Feb 12 20:22:19.958336 kernel: Booting Linux on physical CPU 0x0000000000 [0x410fd083] Feb 12 20:22:19.958374 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Mon Feb 12 18:07:00 -00 2024 Feb 12 20:22:19.958397 kernel: efi: EFI v2.70 by EDK II Feb 12 20:22:19.958412 kernel: efi: SMBIOS=0x7bed0000 SMBIOS 3.0=0x7beb0000 ACPI=0x786e0000 ACPI 2.0=0x786e0014 MEMATTR=0x7ac1aa98 MEMRESERVE=0x71a8cf98 Feb 12 20:22:19.958426 kernel: ACPI: Early table checksum verification disabled Feb 12 20:22:19.958439 kernel: ACPI: RSDP 0x00000000786E0014 000024 (v02 AMAZON) Feb 12 20:22:19.958455 kernel: ACPI: XSDT 0x00000000786D00E8 000064 (v01 AMAZON AMZNFACP 00000001 01000013) Feb 12 20:22:19.958469 kernel: ACPI: FACP 0x00000000786B0000 000114 (v06 AMAZON AMZNFACP 00000001 AMZN 00000001) Feb 12 20:22:19.958483 kernel: ACPI: DSDT 0x0000000078640000 00154F (v02 AMAZON AMZNDSDT 00000001 INTL 20160527) Feb 12 20:22:19.958496 kernel: ACPI: APIC 0x00000000786C0000 000108 (v04 AMAZON AMZNAPIC 00000001 AMZN 00000001) Feb 12 20:22:19.958515 kernel: ACPI: SPCR 0x00000000786A0000 000050 (v02 AMAZON AMZNSPCR 00000001 AMZN 00000001) Feb 12 20:22:19.958528 kernel: ACPI: GTDT 0x0000000078690000 000060 (v02 AMAZON AMZNGTDT 00000001 AMZN 00000001) Feb 12 20:22:19.958542 kernel: ACPI: MCFG 0x0000000078680000 00003C (v02 AMAZON AMZNMCFG 00000001 AMZN 00000001) Feb 12 20:22:19.958556 kernel: ACPI: SLIT 0x0000000078670000 00002D (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Feb 12 20:22:19.958572 kernel: ACPI: IORT 0x0000000078660000 000078 (v01 AMAZON AMZNIORT 00000001 AMZN 00000001) Feb 12 20:22:19.958591 kernel: ACPI: PPTT 0x0000000078650000 0000EC (v01 AMAZON AMZNPPTT 00000001 AMZN 00000001) Feb 12 20:22:19.958606 kernel: ACPI: SPCR: console: uart,mmio,0x90a0000,115200 Feb 12 20:22:19.958620 kernel: earlycon: uart0 at MMIO 0x00000000090a0000 (options '115200') Feb 12 20:22:19.958635 kernel: printk: bootconsole [uart0] enabled Feb 12 20:22:19.958649 kernel: NUMA: Failed to initialise from firmware Feb 12 20:22:19.958663 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000004b5ffffff] Feb 12 20:22:19.958678 kernel: NUMA: NODE_DATA [mem 0x4b5841900-0x4b5846fff] Feb 12 20:22:19.958692 kernel: Zone ranges: Feb 12 20:22:19.958707 kernel: DMA [mem 0x0000000040000000-0x00000000ffffffff] Feb 12 20:22:19.958721 kernel: DMA32 empty Feb 12 20:22:19.958736 kernel: Normal [mem 0x0000000100000000-0x00000004b5ffffff] Feb 12 20:22:19.958754 kernel: Movable zone start for each node Feb 12 20:22:19.958769 kernel: Early memory node ranges Feb 12 20:22:19.958783 kernel: node 0: [mem 0x0000000040000000-0x00000000786effff] Feb 12 20:22:19.958797 kernel: node 0: [mem 0x00000000786f0000-0x000000007872ffff] Feb 12 20:22:19.958812 kernel: node 0: [mem 0x0000000078730000-0x000000007bbfffff] Feb 12 20:22:19.958826 kernel: node 0: [mem 0x000000007bc00000-0x000000007bfdffff] Feb 12 20:22:19.958840 kernel: node 0: [mem 0x000000007bfe0000-0x000000007fffffff] Feb 12 20:22:19.958855 kernel: node 0: [mem 0x0000000400000000-0x00000004b5ffffff] Feb 12 20:22:19.958869 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000004b5ffffff] Feb 12 20:22:19.958884 kernel: On node 0, zone Normal: 8192 pages in unavailable ranges Feb 12 20:22:19.958898 kernel: psci: probing for conduit method from ACPI. Feb 12 20:22:19.958912 kernel: psci: PSCIv1.0 detected in firmware. Feb 12 20:22:19.958931 kernel: psci: Using standard PSCI v0.2 function IDs Feb 12 20:22:19.958946 kernel: psci: Trusted OS migration not required Feb 12 20:22:19.958967 kernel: psci: SMC Calling Convention v1.1 Feb 12 20:22:19.958982 kernel: ACPI: SRAT not present Feb 12 20:22:19.959011 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Feb 12 20:22:19.959036 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Feb 12 20:22:19.959053 kernel: pcpu-alloc: [0] 0 [0] 1 Feb 12 20:22:19.959068 kernel: Detected PIPT I-cache on CPU0 Feb 12 20:22:19.959084 kernel: CPU features: detected: GIC system register CPU interface Feb 12 20:22:19.959099 kernel: CPU features: detected: Spectre-v2 Feb 12 20:22:19.959114 kernel: CPU features: detected: Spectre-v3a Feb 12 20:22:19.959129 kernel: CPU features: detected: Spectre-BHB Feb 12 20:22:19.959144 kernel: CPU features: kernel page table isolation forced ON by KASLR Feb 12 20:22:19.959159 kernel: CPU features: detected: Kernel page table isolation (KPTI) Feb 12 20:22:19.959175 kernel: CPU features: detected: ARM erratum 1742098 Feb 12 20:22:19.959190 kernel: CPU features: detected: ARM errata 1165522, 1319367, or 1530923 Feb 12 20:22:19.959209 kernel: Built 1 zonelists, mobility grouping on. Total pages: 991872 Feb 12 20:22:19.959224 kernel: Policy zone: Normal Feb 12 20:22:19.959261 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=0a07ee1673be713cb46dc1305004c8854c4690dc8835a87e3bc71aa6c6a62e40 Feb 12 20:22:19.959278 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 12 20:22:19.959293 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Feb 12 20:22:19.959308 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 12 20:22:19.959323 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 12 20:22:19.959339 kernel: software IO TLB: mapped [mem 0x000000007c000000-0x0000000080000000] (64MB) Feb 12 20:22:19.959355 kernel: Memory: 3826316K/4030464K available (9792K kernel code, 2092K rwdata, 7556K rodata, 34688K init, 778K bss, 204148K reserved, 0K cma-reserved) Feb 12 20:22:19.959370 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Feb 12 20:22:19.959390 kernel: trace event string verifier disabled Feb 12 20:22:19.959405 kernel: rcu: Preemptible hierarchical RCU implementation. Feb 12 20:22:19.959421 kernel: rcu: RCU event tracing is enabled. Feb 12 20:22:19.959437 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Feb 12 20:22:19.959453 kernel: Trampoline variant of Tasks RCU enabled. Feb 12 20:22:19.959468 kernel: Tracing variant of Tasks RCU enabled. Feb 12 20:22:19.959484 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 12 20:22:19.959499 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Feb 12 20:22:19.959514 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Feb 12 20:22:19.959529 kernel: GICv3: 96 SPIs implemented Feb 12 20:22:19.959544 kernel: GICv3: 0 Extended SPIs implemented Feb 12 20:22:19.959559 kernel: GICv3: Distributor has no Range Selector support Feb 12 20:22:19.959578 kernel: Root IRQ handler: gic_handle_irq Feb 12 20:22:19.959593 kernel: GICv3: 16 PPIs implemented Feb 12 20:22:19.959608 kernel: GICv3: CPU0: found redistributor 0 region 0:0x0000000010200000 Feb 12 20:22:19.959623 kernel: ACPI: SRAT not present Feb 12 20:22:19.959638 kernel: ITS [mem 0x10080000-0x1009ffff] Feb 12 20:22:19.959653 kernel: ITS@0x0000000010080000: allocated 8192 Devices @4000a0000 (indirect, esz 8, psz 64K, shr 1) Feb 12 20:22:19.959669 kernel: ITS@0x0000000010080000: allocated 8192 Interrupt Collections @4000b0000 (flat, esz 8, psz 64K, shr 1) Feb 12 20:22:19.959684 kernel: GICv3: using LPI property table @0x00000004000c0000 Feb 12 20:22:19.959699 kernel: ITS: Using hypervisor restricted LPI range [128] Feb 12 20:22:19.959714 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000004000d0000 Feb 12 20:22:19.959729 kernel: arch_timer: cp15 timer(s) running at 83.33MHz (virt). Feb 12 20:22:19.959749 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x13381ebeec, max_idle_ns: 440795203145 ns Feb 12 20:22:19.959764 kernel: sched_clock: 56 bits at 83MHz, resolution 12ns, wraps every 4398046511100ns Feb 12 20:22:19.959780 kernel: Console: colour dummy device 80x25 Feb 12 20:22:19.959795 kernel: printk: console [tty1] enabled Feb 12 20:22:19.959811 kernel: ACPI: Core revision 20210730 Feb 12 20:22:19.959827 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 166.66 BogoMIPS (lpj=83333) Feb 12 20:22:19.959843 kernel: pid_max: default: 32768 minimum: 301 Feb 12 20:22:19.959859 kernel: LSM: Security Framework initializing Feb 12 20:22:19.959889 kernel: SELinux: Initializing. Feb 12 20:22:19.959906 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 12 20:22:19.959927 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 12 20:22:19.959942 kernel: rcu: Hierarchical SRCU implementation. Feb 12 20:22:19.959958 kernel: Platform MSI: ITS@0x10080000 domain created Feb 12 20:22:19.959973 kernel: PCI/MSI: ITS@0x10080000 domain created Feb 12 20:22:19.959989 kernel: Remapping and enabling EFI services. Feb 12 20:22:19.960004 kernel: smp: Bringing up secondary CPUs ... Feb 12 20:22:19.963321 kernel: Detected PIPT I-cache on CPU1 Feb 12 20:22:19.963348 kernel: GICv3: CPU1: found redistributor 1 region 0:0x0000000010220000 Feb 12 20:22:19.963365 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000004000e0000 Feb 12 20:22:19.963391 kernel: CPU1: Booted secondary processor 0x0000000001 [0x410fd083] Feb 12 20:22:19.963407 kernel: smp: Brought up 1 node, 2 CPUs Feb 12 20:22:19.963423 kernel: SMP: Total of 2 processors activated. Feb 12 20:22:19.963455 kernel: CPU features: detected: 32-bit EL0 Support Feb 12 20:22:19.963472 kernel: CPU features: detected: 32-bit EL1 Support Feb 12 20:22:19.963488 kernel: CPU features: detected: CRC32 instructions Feb 12 20:22:19.963504 kernel: CPU: All CPU(s) started at EL1 Feb 12 20:22:19.963544 kernel: alternatives: patching kernel code Feb 12 20:22:19.971317 kernel: devtmpfs: initialized Feb 12 20:22:19.971344 kernel: KASLR disabled due to lack of seed Feb 12 20:22:19.971362 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 12 20:22:19.971379 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Feb 12 20:22:19.971406 kernel: pinctrl core: initialized pinctrl subsystem Feb 12 20:22:19.971426 kernel: SMBIOS 3.0.0 present. Feb 12 20:22:19.971443 kernel: DMI: Amazon EC2 a1.large/, BIOS 1.0 11/1/2018 Feb 12 20:22:19.971459 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 12 20:22:19.971475 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Feb 12 20:22:19.971492 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Feb 12 20:22:19.971509 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Feb 12 20:22:19.971525 kernel: audit: initializing netlink subsys (disabled) Feb 12 20:22:19.971542 kernel: audit: type=2000 audit(0.248:1): state=initialized audit_enabled=0 res=1 Feb 12 20:22:19.971563 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 12 20:22:19.971579 kernel: cpuidle: using governor menu Feb 12 20:22:19.971595 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Feb 12 20:22:19.971612 kernel: ASID allocator initialised with 32768 entries Feb 12 20:22:19.971628 kernel: ACPI: bus type PCI registered Feb 12 20:22:19.971648 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 12 20:22:19.971664 kernel: Serial: AMBA PL011 UART driver Feb 12 20:22:19.971681 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 12 20:22:19.971697 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Feb 12 20:22:19.971713 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 12 20:22:19.971730 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Feb 12 20:22:19.971746 kernel: cryptd: max_cpu_qlen set to 1000 Feb 12 20:22:19.971762 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Feb 12 20:22:19.971778 kernel: ACPI: Added _OSI(Module Device) Feb 12 20:22:19.971799 kernel: ACPI: Added _OSI(Processor Device) Feb 12 20:22:19.971815 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 12 20:22:19.971831 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 12 20:22:19.971847 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 12 20:22:19.971863 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 12 20:22:19.971880 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 12 20:22:19.971896 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 12 20:22:19.971912 kernel: ACPI: Interpreter enabled Feb 12 20:22:19.971928 kernel: ACPI: Using GIC for interrupt routing Feb 12 20:22:19.971948 kernel: ACPI: MCFG table detected, 1 entries Feb 12 20:22:19.971965 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-0f]) Feb 12 20:22:19.972278 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Feb 12 20:22:19.972488 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Feb 12 20:22:19.972688 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Feb 12 20:22:19.972884 kernel: acpi PNP0A08:00: ECAM area [mem 0x20000000-0x20ffffff] reserved by PNP0C02:00 Feb 12 20:22:19.973079 kernel: acpi PNP0A08:00: ECAM at [mem 0x20000000-0x20ffffff] for [bus 00-0f] Feb 12 20:22:19.973107 kernel: ACPI: Remapped I/O 0x000000001fff0000 to [io 0x0000-0xffff window] Feb 12 20:22:19.973125 kernel: acpiphp: Slot [1] registered Feb 12 20:22:19.973141 kernel: acpiphp: Slot [2] registered Feb 12 20:22:19.973157 kernel: acpiphp: Slot [3] registered Feb 12 20:22:19.973173 kernel: acpiphp: Slot [4] registered Feb 12 20:22:19.973189 kernel: acpiphp: Slot [5] registered Feb 12 20:22:19.973205 kernel: acpiphp: Slot [6] registered Feb 12 20:22:19.973221 kernel: acpiphp: Slot [7] registered Feb 12 20:22:19.973258 kernel: acpiphp: Slot [8] registered Feb 12 20:22:19.973281 kernel: acpiphp: Slot [9] registered Feb 12 20:22:19.973298 kernel: acpiphp: Slot [10] registered Feb 12 20:22:19.973316 kernel: acpiphp: Slot [11] registered Feb 12 20:22:19.973333 kernel: acpiphp: Slot [12] registered Feb 12 20:22:19.973349 kernel: acpiphp: Slot [13] registered Feb 12 20:22:19.973366 kernel: acpiphp: Slot [14] registered Feb 12 20:22:19.973382 kernel: acpiphp: Slot [15] registered Feb 12 20:22:19.973399 kernel: acpiphp: Slot [16] registered Feb 12 20:22:19.973415 kernel: acpiphp: Slot [17] registered Feb 12 20:22:19.973431 kernel: acpiphp: Slot [18] registered Feb 12 20:22:19.973453 kernel: acpiphp: Slot [19] registered Feb 12 20:22:19.973469 kernel: acpiphp: Slot [20] registered Feb 12 20:22:19.973485 kernel: acpiphp: Slot [21] registered Feb 12 20:22:19.973501 kernel: acpiphp: Slot [22] registered Feb 12 20:22:19.973517 kernel: acpiphp: Slot [23] registered Feb 12 20:22:19.973534 kernel: acpiphp: Slot [24] registered Feb 12 20:22:19.973550 kernel: acpiphp: Slot [25] registered Feb 12 20:22:19.973567 kernel: acpiphp: Slot [26] registered Feb 12 20:22:19.973583 kernel: acpiphp: Slot [27] registered Feb 12 20:22:19.973604 kernel: acpiphp: Slot [28] registered Feb 12 20:22:19.973621 kernel: acpiphp: Slot [29] registered Feb 12 20:22:19.973636 kernel: acpiphp: Slot [30] registered Feb 12 20:22:19.973652 kernel: acpiphp: Slot [31] registered Feb 12 20:22:19.973668 kernel: PCI host bridge to bus 0000:00 Feb 12 20:22:19.973889 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xffffffff window] Feb 12 20:22:19.974073 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Feb 12 20:22:19.974305 kernel: pci_bus 0000:00: root bus resource [mem 0x400000000000-0x407fffffffff window] Feb 12 20:22:19.974502 kernel: pci_bus 0000:00: root bus resource [bus 00-0f] Feb 12 20:22:19.974737 kernel: pci 0000:00:00.0: [1d0f:0200] type 00 class 0x060000 Feb 12 20:22:19.974954 kernel: pci 0000:00:01.0: [1d0f:8250] type 00 class 0x070003 Feb 12 20:22:19.975185 kernel: pci 0000:00:01.0: reg 0x10: [mem 0x80118000-0x80118fff] Feb 12 20:22:19.975429 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Feb 12 20:22:19.975631 kernel: pci 0000:00:04.0: reg 0x10: [mem 0x80114000-0x80117fff] Feb 12 20:22:19.975837 kernel: pci 0000:00:04.0: PME# supported from D0 D1 D2 D3hot D3cold Feb 12 20:22:19.976069 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Feb 12 20:22:19.976372 kernel: pci 0000:00:05.0: reg 0x10: [mem 0x80110000-0x80113fff] Feb 12 20:22:19.977078 kernel: pci 0000:00:05.0: reg 0x18: [mem 0x80000000-0x800fffff pref] Feb 12 20:22:19.977422 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x80100000-0x8010ffff] Feb 12 20:22:19.977627 kernel: pci 0000:00:05.0: PME# supported from D0 D1 D2 D3hot D3cold Feb 12 20:22:19.977826 kernel: pci 0000:00:05.0: BAR 2: assigned [mem 0x80000000-0x800fffff pref] Feb 12 20:22:19.978034 kernel: pci 0000:00:05.0: BAR 4: assigned [mem 0x80100000-0x8010ffff] Feb 12 20:22:19.978280 kernel: pci 0000:00:04.0: BAR 0: assigned [mem 0x80110000-0x80113fff] Feb 12 20:22:19.978496 kernel: pci 0000:00:05.0: BAR 0: assigned [mem 0x80114000-0x80117fff] Feb 12 20:22:19.978706 kernel: pci 0000:00:01.0: BAR 0: assigned [mem 0x80118000-0x80118fff] Feb 12 20:22:19.978937 kernel: pci_bus 0000:00: resource 4 [mem 0x80000000-0xffffffff window] Feb 12 20:22:19.979142 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Feb 12 20:22:19.979368 kernel: pci_bus 0000:00: resource 6 [mem 0x400000000000-0x407fffffffff window] Feb 12 20:22:19.979398 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Feb 12 20:22:19.979416 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Feb 12 20:22:19.979433 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Feb 12 20:22:19.979450 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Feb 12 20:22:19.979466 kernel: iommu: Default domain type: Translated Feb 12 20:22:19.979482 kernel: iommu: DMA domain TLB invalidation policy: strict mode Feb 12 20:22:19.979499 kernel: vgaarb: loaded Feb 12 20:22:19.979515 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 12 20:22:19.979531 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 12 20:22:19.979552 kernel: PTP clock support registered Feb 12 20:22:19.979569 kernel: Registered efivars operations Feb 12 20:22:19.979585 kernel: clocksource: Switched to clocksource arch_sys_counter Feb 12 20:22:19.979601 kernel: VFS: Disk quotas dquot_6.6.0 Feb 12 20:22:19.979617 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 12 20:22:19.979633 kernel: pnp: PnP ACPI init Feb 12 20:22:19.979837 kernel: system 00:00: [mem 0x20000000-0x2fffffff] could not be reserved Feb 12 20:22:19.979862 kernel: pnp: PnP ACPI: found 1 devices Feb 12 20:22:19.979879 kernel: NET: Registered PF_INET protocol family Feb 12 20:22:19.979901 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 12 20:22:19.979917 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Feb 12 20:22:19.979934 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 12 20:22:19.979950 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 12 20:22:19.979967 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Feb 12 20:22:19.979983 kernel: TCP: Hash tables configured (established 32768 bind 32768) Feb 12 20:22:19.980000 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 12 20:22:19.980016 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 12 20:22:19.980033 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 12 20:22:19.980053 kernel: PCI: CLS 0 bytes, default 64 Feb 12 20:22:19.980070 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 3 counters available Feb 12 20:22:19.980086 kernel: kvm [1]: HYP mode not available Feb 12 20:22:19.980102 kernel: Initialise system trusted keyrings Feb 12 20:22:19.980119 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Feb 12 20:22:19.980135 kernel: Key type asymmetric registered Feb 12 20:22:19.980151 kernel: Asymmetric key parser 'x509' registered Feb 12 20:22:19.980167 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 12 20:22:19.980184 kernel: io scheduler mq-deadline registered Feb 12 20:22:19.980204 kernel: io scheduler kyber registered Feb 12 20:22:19.980221 kernel: io scheduler bfq registered Feb 12 20:22:19.980456 kernel: pl061_gpio ARMH0061:00: PL061 GPIO chip registered Feb 12 20:22:19.980482 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Feb 12 20:22:19.980499 kernel: ACPI: button: Power Button [PWRB] Feb 12 20:22:19.980516 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 12 20:22:19.980533 kernel: ACPI: \_SB_.PCI0.GSI2: Enabled at IRQ 37 Feb 12 20:22:19.980729 kernel: serial 0000:00:01.0: enabling device (0010 -> 0012) Feb 12 20:22:19.980756 kernel: printk: console [ttyS0] disabled Feb 12 20:22:19.980773 kernel: 0000:00:01.0: ttyS0 at MMIO 0x80118000 (irq = 14, base_baud = 115200) is a 16550A Feb 12 20:22:19.980790 kernel: printk: console [ttyS0] enabled Feb 12 20:22:19.980806 kernel: printk: bootconsole [uart0] disabled Feb 12 20:22:19.980822 kernel: thunder_xcv, ver 1.0 Feb 12 20:22:19.980839 kernel: thunder_bgx, ver 1.0 Feb 12 20:22:19.980855 kernel: nicpf, ver 1.0 Feb 12 20:22:19.980871 kernel: nicvf, ver 1.0 Feb 12 20:22:19.981115 kernel: rtc-efi rtc-efi.0: registered as rtc0 Feb 12 20:22:19.981380 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-02-12T20:22:19 UTC (1707769339) Feb 12 20:22:19.981405 kernel: hid: raw HID events driver (C) Jiri Kosina Feb 12 20:22:19.981423 kernel: NET: Registered PF_INET6 protocol family Feb 12 20:22:19.981439 kernel: Segment Routing with IPv6 Feb 12 20:22:19.981455 kernel: In-situ OAM (IOAM) with IPv6 Feb 12 20:22:19.981471 kernel: NET: Registered PF_PACKET protocol family Feb 12 20:22:19.981488 kernel: Key type dns_resolver registered Feb 12 20:22:19.981504 kernel: registered taskstats version 1 Feb 12 20:22:19.981525 kernel: Loading compiled-in X.509 certificates Feb 12 20:22:19.981542 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: c8c3faa6fd8ae0112832fff0e3d0e58448a7eb6c' Feb 12 20:22:19.981558 kernel: Key type .fscrypt registered Feb 12 20:22:19.981575 kernel: Key type fscrypt-provisioning registered Feb 12 20:22:19.981591 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 12 20:22:19.981607 kernel: ima: Allocated hash algorithm: sha1 Feb 12 20:22:19.981623 kernel: ima: No architecture policies found Feb 12 20:22:19.981640 kernel: Freeing unused kernel memory: 34688K Feb 12 20:22:19.981656 kernel: Run /init as init process Feb 12 20:22:19.981676 kernel: with arguments: Feb 12 20:22:19.981692 kernel: /init Feb 12 20:22:19.981708 kernel: with environment: Feb 12 20:22:19.981724 kernel: HOME=/ Feb 12 20:22:19.981740 kernel: TERM=linux Feb 12 20:22:19.981756 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 12 20:22:19.981777 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 12 20:22:19.981798 systemd[1]: Detected virtualization amazon. Feb 12 20:22:19.981820 systemd[1]: Detected architecture arm64. Feb 12 20:22:19.981838 systemd[1]: Running in initrd. Feb 12 20:22:19.981855 systemd[1]: No hostname configured, using default hostname. Feb 12 20:22:19.981872 systemd[1]: Hostname set to . Feb 12 20:22:19.981890 systemd[1]: Initializing machine ID from VM UUID. Feb 12 20:22:19.981907 systemd[1]: Queued start job for default target initrd.target. Feb 12 20:22:19.981925 systemd[1]: Started systemd-ask-password-console.path. Feb 12 20:22:19.981942 systemd[1]: Reached target cryptsetup.target. Feb 12 20:22:19.981964 systemd[1]: Reached target paths.target. Feb 12 20:22:19.981982 systemd[1]: Reached target slices.target. Feb 12 20:22:19.981999 systemd[1]: Reached target swap.target. Feb 12 20:22:19.982016 systemd[1]: Reached target timers.target. Feb 12 20:22:19.982034 systemd[1]: Listening on iscsid.socket. Feb 12 20:22:19.982052 systemd[1]: Listening on iscsiuio.socket. Feb 12 20:22:19.982069 systemd[1]: Listening on systemd-journald-audit.socket. Feb 12 20:22:19.982087 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 12 20:22:19.982109 systemd[1]: Listening on systemd-journald.socket. Feb 12 20:22:19.982127 systemd[1]: Listening on systemd-networkd.socket. Feb 12 20:22:19.982144 systemd[1]: Listening on systemd-udevd-control.socket. Feb 12 20:22:19.982162 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 12 20:22:19.982179 systemd[1]: Reached target sockets.target. Feb 12 20:22:19.982197 systemd[1]: Starting kmod-static-nodes.service... Feb 12 20:22:19.982214 systemd[1]: Finished network-cleanup.service. Feb 12 20:22:19.982325 systemd[1]: Starting systemd-fsck-usr.service... Feb 12 20:22:19.982347 systemd[1]: Starting systemd-journald.service... Feb 12 20:22:19.982420 systemd[1]: Starting systemd-modules-load.service... Feb 12 20:22:19.982785 systemd[1]: Starting systemd-resolved.service... Feb 12 20:22:19.983108 systemd[1]: Starting systemd-vconsole-setup.service... Feb 12 20:22:19.983459 systemd[1]: Finished kmod-static-nodes.service. Feb 12 20:22:19.983616 kernel: audit: type=1130 audit(1707769339.949:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:19.983637 systemd[1]: Finished systemd-fsck-usr.service. Feb 12 20:22:19.983656 kernel: audit: type=1130 audit(1707769339.961:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:19.983673 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 12 20:22:19.983697 systemd[1]: Finished systemd-vconsole-setup.service. Feb 12 20:22:19.983719 systemd-journald[309]: Journal started Feb 12 20:22:19.983808 systemd-journald[309]: Runtime Journal (/run/log/journal/ec288f49f9c6ed068b479285f783a157) is 8.0M, max 75.4M, 67.4M free. Feb 12 20:22:19.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:19.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:19.942933 systemd-modules-load[310]: Inserted module 'overlay' Feb 12 20:22:19.995315 kernel: audit: type=1130 audit(1707769339.983:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:19.995347 systemd[1]: Started systemd-journald.service. Feb 12 20:22:19.983000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.028263 kernel: audit: type=1130 audit(1707769340.009:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.028317 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 12 20:22:20.028342 kernel: Bridge firewalling registered Feb 12 20:22:20.028603 systemd[1]: Starting dracut-cmdline-ask.service... Feb 12 20:22:20.033716 systemd-modules-load[310]: Inserted module 'br_netfilter' Feb 12 20:22:20.034736 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 12 20:22:20.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.047076 kernel: audit: type=1130 audit(1707769340.033:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.076534 systemd[1]: Finished dracut-cmdline-ask.service. Feb 12 20:22:20.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.079088 systemd-resolved[311]: Positive Trust Anchors: Feb 12 20:22:20.079102 systemd-resolved[311]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 12 20:22:20.079154 systemd-resolved[311]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 12 20:22:20.111264 kernel: audit: type=1130 audit(1707769340.077:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.111330 kernel: SCSI subsystem initialized Feb 12 20:22:20.125548 systemd[1]: Starting dracut-cmdline.service... Feb 12 20:22:20.128912 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 12 20:22:20.128947 kernel: device-mapper: uevent: version 1.0.3 Feb 12 20:22:20.135429 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 12 20:22:20.140923 systemd-modules-load[310]: Inserted module 'dm_multipath' Feb 12 20:22:20.144157 systemd[1]: Finished systemd-modules-load.service. Feb 12 20:22:20.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.156578 systemd[1]: Starting systemd-sysctl.service... Feb 12 20:22:20.158533 kernel: audit: type=1130 audit(1707769340.144:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.159862 dracut-cmdline[327]: dracut-dracut-053 Feb 12 20:22:20.171807 dracut-cmdline[327]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=tty1 console=ttyS0,115200n8 earlycon flatcar.first_boot=detected acpi=force flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=0a07ee1673be713cb46dc1305004c8854c4690dc8835a87e3bc71aa6c6a62e40 Feb 12 20:22:20.198039 systemd[1]: Finished systemd-sysctl.service. Feb 12 20:22:20.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.209272 kernel: audit: type=1130 audit(1707769340.198:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.296263 kernel: Loading iSCSI transport class v2.0-870. Feb 12 20:22:20.310269 kernel: iscsi: registered transport (tcp) Feb 12 20:22:20.335332 kernel: iscsi: registered transport (qla4xxx) Feb 12 20:22:20.335422 kernel: QLogic iSCSI HBA Driver Feb 12 20:22:20.538172 systemd-resolved[311]: Defaulting to hostname 'linux'. Feb 12 20:22:20.540791 kernel: random: crng init done Feb 12 20:22:20.541964 systemd[1]: Started systemd-resolved.service. Feb 12 20:22:20.554270 kernel: audit: type=1130 audit(1707769340.542:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.543861 systemd[1]: Reached target nss-lookup.target. Feb 12 20:22:20.569857 systemd[1]: Finished dracut-cmdline.service. Feb 12 20:22:20.573116 systemd[1]: Starting dracut-pre-udev.service... Feb 12 20:22:20.569000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:20.638286 kernel: raid6: neonx8 gen() 6360 MB/s Feb 12 20:22:20.656263 kernel: raid6: neonx8 xor() 4728 MB/s Feb 12 20:22:20.674261 kernel: raid6: neonx4 gen() 6420 MB/s Feb 12 20:22:20.692263 kernel: raid6: neonx4 xor() 4880 MB/s Feb 12 20:22:20.710259 kernel: raid6: neonx2 gen() 5731 MB/s Feb 12 20:22:20.728261 kernel: raid6: neonx2 xor() 4495 MB/s Feb 12 20:22:20.746264 kernel: raid6: neonx1 gen() 4453 MB/s Feb 12 20:22:20.764261 kernel: raid6: neonx1 xor() 3670 MB/s Feb 12 20:22:20.782260 kernel: raid6: int64x8 gen() 3402 MB/s Feb 12 20:22:20.800260 kernel: raid6: int64x8 xor() 2094 MB/s Feb 12 20:22:20.818261 kernel: raid6: int64x4 gen() 3760 MB/s Feb 12 20:22:20.836260 kernel: raid6: int64x4 xor() 2194 MB/s Feb 12 20:22:20.854261 kernel: raid6: int64x2 gen() 3565 MB/s Feb 12 20:22:20.872260 kernel: raid6: int64x2 xor() 1946 MB/s Feb 12 20:22:20.890263 kernel: raid6: int64x1 gen() 2759 MB/s Feb 12 20:22:20.909743 kernel: raid6: int64x1 xor() 1450 MB/s Feb 12 20:22:20.909773 kernel: raid6: using algorithm neonx4 gen() 6420 MB/s Feb 12 20:22:20.909797 kernel: raid6: .... xor() 4880 MB/s, rmw enabled Feb 12 20:22:20.911602 kernel: raid6: using neon recovery algorithm Feb 12 20:22:20.930270 kernel: xor: measuring software checksum speed Feb 12 20:22:20.933263 kernel: 8regs : 9339 MB/sec Feb 12 20:22:20.935260 kernel: 32regs : 11108 MB/sec Feb 12 20:22:20.939711 kernel: arm64_neon : 9657 MB/sec Feb 12 20:22:20.939755 kernel: xor: using function: 32regs (11108 MB/sec) Feb 12 20:22:21.030284 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Feb 12 20:22:21.046887 systemd[1]: Finished dracut-pre-udev.service. Feb 12 20:22:21.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:21.049000 audit: BPF prog-id=7 op=LOAD Feb 12 20:22:21.049000 audit: BPF prog-id=8 op=LOAD Feb 12 20:22:21.051465 systemd[1]: Starting systemd-udevd.service... Feb 12 20:22:21.079270 systemd-udevd[509]: Using default interface naming scheme 'v252'. Feb 12 20:22:21.090327 systemd[1]: Started systemd-udevd.service. Feb 12 20:22:21.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:21.098443 systemd[1]: Starting dracut-pre-trigger.service... Feb 12 20:22:21.125424 dracut-pre-trigger[520]: rd.md=0: removing MD RAID activation Feb 12 20:22:21.186753 systemd[1]: Finished dracut-pre-trigger.service. Feb 12 20:22:21.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:21.189897 systemd[1]: Starting systemd-udev-trigger.service... Feb 12 20:22:21.297153 systemd[1]: Finished systemd-udev-trigger.service. Feb 12 20:22:21.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:21.416866 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Feb 12 20:22:21.416937 kernel: ena 0000:00:05.0: enabling device (0010 -> 0012) Feb 12 20:22:21.425536 kernel: ena 0000:00:05.0: ENA device version: 0.10 Feb 12 20:22:21.425841 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Feb 12 20:22:21.433274 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem 80114000, mac addr 06:c2:d0:e6:eb:71 Feb 12 20:22:21.435654 (udev-worker)[570]: Network interface NamePolicy= disabled on kernel command line. Feb 12 20:22:21.443795 kernel: ACPI: \_SB_.PCI0.GSI0: Enabled at IRQ 35 Feb 12 20:22:21.443868 kernel: nvme nvme0: pci function 0000:00:04.0 Feb 12 20:22:21.455275 kernel: nvme nvme0: 2/0/0 default/read/poll queues Feb 12 20:22:21.461417 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 12 20:22:21.461467 kernel: GPT:9289727 != 16777215 Feb 12 20:22:21.461501 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 12 20:22:21.463584 kernel: GPT:9289727 != 16777215 Feb 12 20:22:21.464865 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 12 20:22:21.466739 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 12 20:22:21.533257 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (574) Feb 12 20:22:21.549895 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 12 20:22:21.616708 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 12 20:22:21.618974 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 12 20:22:21.624371 systemd[1]: Starting disk-uuid.service... Feb 12 20:22:21.649289 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 12 20:22:21.658578 disk-uuid[665]: Primary Header is updated. Feb 12 20:22:21.658578 disk-uuid[665]: Secondary Entries is updated. Feb 12 20:22:21.658578 disk-uuid[665]: Secondary Header is updated. Feb 12 20:22:21.703012 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 12 20:22:22.663279 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Feb 12 20:22:22.663360 disk-uuid[667]: The operation has completed successfully. Feb 12 20:22:22.843460 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 12 20:22:22.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:22.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:22.843676 systemd[1]: Finished disk-uuid.service. Feb 12 20:22:22.846907 systemd[1]: Starting verity-setup.service... Feb 12 20:22:22.885308 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Feb 12 20:22:22.948657 systemd[1]: Found device dev-mapper-usr.device. Feb 12 20:22:22.953056 systemd[1]: Finished verity-setup.service. Feb 12 20:22:22.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:22.958039 systemd[1]: Mounting sysusr-usr.mount... Feb 12 20:22:23.043271 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 12 20:22:23.044223 systemd[1]: Mounted sysusr-usr.mount. Feb 12 20:22:23.047366 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 12 20:22:23.051396 systemd[1]: Starting ignition-setup.service... Feb 12 20:22:23.062174 systemd[1]: Starting parse-ip-for-networkd.service... Feb 12 20:22:23.082512 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Feb 12 20:22:23.082583 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 12 20:22:23.084853 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 12 20:22:23.098676 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 12 20:22:23.117886 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 12 20:22:23.152895 systemd[1]: Finished ignition-setup.service. Feb 12 20:22:23.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:23.157413 systemd[1]: Starting ignition-fetch-offline.service... Feb 12 20:22:23.220916 systemd[1]: Finished parse-ip-for-networkd.service. Feb 12 20:22:23.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:23.224000 audit: BPF prog-id=9 op=LOAD Feb 12 20:22:23.226629 systemd[1]: Starting systemd-networkd.service... Feb 12 20:22:23.273565 systemd-networkd[1100]: lo: Link UP Feb 12 20:22:23.273589 systemd-networkd[1100]: lo: Gained carrier Feb 12 20:22:23.277242 systemd-networkd[1100]: Enumeration completed Feb 12 20:22:23.277416 systemd[1]: Started systemd-networkd.service. Feb 12 20:22:23.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:23.279289 systemd[1]: Reached target network.target. Feb 12 20:22:23.282554 systemd[1]: Starting iscsiuio.service... Feb 12 20:22:23.296221 systemd-networkd[1100]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 12 20:22:23.301688 systemd[1]: Started iscsiuio.service. Feb 12 20:22:23.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:23.304739 systemd[1]: Starting iscsid.service... Feb 12 20:22:23.311303 systemd-networkd[1100]: eth0: Link UP Feb 12 20:22:23.311480 systemd-networkd[1100]: eth0: Gained carrier Feb 12 20:22:23.316735 iscsid[1105]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 12 20:22:23.316735 iscsid[1105]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 12 20:22:23.316735 iscsid[1105]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 12 20:22:23.316735 iscsid[1105]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 12 20:22:23.335930 iscsid[1105]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 12 20:22:23.335930 iscsid[1105]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 12 20:22:23.341451 systemd[1]: Started iscsid.service. Feb 12 20:22:23.343000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:23.345649 systemd[1]: Starting dracut-initqueue.service... Feb 12 20:22:23.355405 systemd-networkd[1100]: eth0: DHCPv4 address 172.31.21.82/20, gateway 172.31.16.1 acquired from 172.31.16.1 Feb 12 20:22:23.369675 systemd[1]: Finished dracut-initqueue.service. Feb 12 20:22:23.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:23.371679 systemd[1]: Reached target remote-fs-pre.target. Feb 12 20:22:23.373393 systemd[1]: Reached target remote-cryptsetup.target. Feb 12 20:22:23.375165 systemd[1]: Reached target remote-fs.target. Feb 12 20:22:23.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:23.378223 systemd[1]: Starting dracut-pre-mount.service... Feb 12 20:22:23.396837 systemd[1]: Finished dracut-pre-mount.service. Feb 12 20:22:23.818754 ignition[1048]: Ignition 2.14.0 Feb 12 20:22:23.818784 ignition[1048]: Stage: fetch-offline Feb 12 20:22:23.819110 ignition[1048]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 20:22:23.819171 ignition[1048]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 20:22:23.839485 ignition[1048]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 20:22:23.840148 ignition[1048]: Ignition finished successfully Feb 12 20:22:23.852245 kernel: kauditd_printk_skb: 18 callbacks suppressed Feb 12 20:22:23.852306 kernel: audit: type=1130 audit(1707769343.846:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:23.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:23.845561 systemd[1]: Finished ignition-fetch-offline.service. Feb 12 20:22:23.859857 systemd[1]: Starting ignition-fetch.service... Feb 12 20:22:23.874481 ignition[1124]: Ignition 2.14.0 Feb 12 20:22:23.874509 ignition[1124]: Stage: fetch Feb 12 20:22:23.874812 ignition[1124]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 20:22:23.874871 ignition[1124]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 20:22:23.888335 ignition[1124]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 20:22:23.890834 ignition[1124]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 20:22:23.897917 ignition[1124]: INFO : PUT result: OK Feb 12 20:22:23.901462 ignition[1124]: DEBUG : parsed url from cmdline: "" Feb 12 20:22:23.903291 ignition[1124]: INFO : no config URL provided Feb 12 20:22:23.905029 ignition[1124]: INFO : reading system config file "/usr/lib/ignition/user.ign" Feb 12 20:22:23.907463 ignition[1124]: INFO : no config at "/usr/lib/ignition/user.ign" Feb 12 20:22:23.907463 ignition[1124]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 20:22:23.912375 ignition[1124]: INFO : PUT result: OK Feb 12 20:22:23.913876 ignition[1124]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Feb 12 20:22:23.917266 ignition[1124]: INFO : GET result: OK Feb 12 20:22:23.917266 ignition[1124]: DEBUG : parsing config with SHA512: 0f2b23721b4158b4cd35749c7162248a82c3aee54feeec51002bbdb69bd0f81dd29465bd8ede85f546abd207d74fad557ebcb784b59cb5277ac578f432a97ae9 Feb 12 20:22:23.985867 unknown[1124]: fetched base config from "system" Feb 12 20:22:23.985896 unknown[1124]: fetched base config from "system" Feb 12 20:22:23.985911 unknown[1124]: fetched user config from "aws" Feb 12 20:22:23.988803 ignition[1124]: fetch: fetch complete Feb 12 20:22:23.988816 ignition[1124]: fetch: fetch passed Feb 12 20:22:23.988905 ignition[1124]: Ignition finished successfully Feb 12 20:22:23.997555 systemd[1]: Finished ignition-fetch.service. Feb 12 20:22:23.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.002127 systemd[1]: Starting ignition-kargs.service... Feb 12 20:22:24.014431 kernel: audit: type=1130 audit(1707769343.999:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.025291 ignition[1130]: Ignition 2.14.0 Feb 12 20:22:24.025322 ignition[1130]: Stage: kargs Feb 12 20:22:24.025622 ignition[1130]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 20:22:24.025676 ignition[1130]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 20:22:24.040419 ignition[1130]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 20:22:24.042737 ignition[1130]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 20:22:24.045417 ignition[1130]: INFO : PUT result: OK Feb 12 20:22:24.051210 ignition[1130]: kargs: kargs passed Feb 12 20:22:24.051364 ignition[1130]: Ignition finished successfully Feb 12 20:22:24.055624 systemd[1]: Finished ignition-kargs.service. Feb 12 20:22:24.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.060166 systemd[1]: Starting ignition-disks.service... Feb 12 20:22:24.069876 kernel: audit: type=1130 audit(1707769344.057:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.075621 ignition[1136]: Ignition 2.14.0 Feb 12 20:22:24.075647 ignition[1136]: Stage: disks Feb 12 20:22:24.075960 ignition[1136]: reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 20:22:24.076019 ignition[1136]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 20:22:24.091850 ignition[1136]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 20:22:24.094713 ignition[1136]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 20:22:24.097217 ignition[1136]: INFO : PUT result: OK Feb 12 20:22:24.103102 ignition[1136]: disks: disks passed Feb 12 20:22:24.104729 ignition[1136]: Ignition finished successfully Feb 12 20:22:24.107890 systemd[1]: Finished ignition-disks.service. Feb 12 20:22:24.137424 kernel: audit: type=1130 audit(1707769344.106:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.108719 systemd[1]: Reached target initrd-root-device.target. Feb 12 20:22:24.109085 systemd[1]: Reached target local-fs-pre.target. Feb 12 20:22:24.110481 systemd[1]: Reached target local-fs.target. Feb 12 20:22:24.110804 systemd[1]: Reached target sysinit.target. Feb 12 20:22:24.111147 systemd[1]: Reached target basic.target. Feb 12 20:22:24.135253 systemd[1]: Starting systemd-fsck-root.service... Feb 12 20:22:24.178134 systemd-fsck[1144]: ROOT: clean, 602/553520 files, 56014/553472 blocks Feb 12 20:22:24.185064 systemd[1]: Finished systemd-fsck-root.service. Feb 12 20:22:24.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.197011 systemd[1]: Mounting sysroot.mount... Feb 12 20:22:24.204314 kernel: audit: type=1130 audit(1707769344.186:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.215281 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 12 20:22:24.216713 systemd[1]: Mounted sysroot.mount. Feb 12 20:22:24.217194 systemd[1]: Reached target initrd-root-fs.target. Feb 12 20:22:24.229787 systemd[1]: Mounting sysroot-usr.mount... Feb 12 20:22:24.232589 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 12 20:22:24.232691 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 12 20:22:24.232753 systemd[1]: Reached target ignition-diskful.target. Feb 12 20:22:24.240901 systemd[1]: Mounted sysroot-usr.mount. Feb 12 20:22:24.257084 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 12 20:22:24.260082 systemd[1]: Starting initrd-setup-root.service... Feb 12 20:22:24.281312 initrd-setup-root[1166]: cut: /sysroot/etc/passwd: No such file or directory Feb 12 20:22:24.287989 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1161) Feb 12 20:22:24.294357 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Feb 12 20:22:24.294423 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 12 20:22:24.296797 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 12 20:22:24.303465 initrd-setup-root[1191]: cut: /sysroot/etc/group: No such file or directory Feb 12 20:22:24.308521 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 12 20:22:24.314605 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 12 20:22:24.320125 initrd-setup-root[1200]: cut: /sysroot/etc/shadow: No such file or directory Feb 12 20:22:24.329365 initrd-setup-root[1208]: cut: /sysroot/etc/gshadow: No such file or directory Feb 12 20:22:24.543948 systemd[1]: Finished initrd-setup-root.service. Feb 12 20:22:24.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.548701 systemd[1]: Starting ignition-mount.service... Feb 12 20:22:24.558121 kernel: audit: type=1130 audit(1707769344.546:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.559344 systemd[1]: Starting sysroot-boot.service... Feb 12 20:22:24.569916 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Feb 12 20:22:24.570088 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Feb 12 20:22:24.603346 systemd[1]: Finished sysroot-boot.service. Feb 12 20:22:24.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.614029 ignition[1228]: INFO : Ignition 2.14.0 Feb 12 20:22:24.614029 ignition[1228]: INFO : Stage: mount Feb 12 20:22:24.614029 ignition[1228]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 20:22:24.614029 ignition[1228]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 20:22:24.627386 kernel: audit: type=1130 audit(1707769344.605:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.628414 systemd-networkd[1100]: eth0: Gained IPv6LL Feb 12 20:22:24.634925 ignition[1228]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 20:22:24.637599 ignition[1228]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 20:22:24.640812 ignition[1228]: INFO : PUT result: OK Feb 12 20:22:24.646820 ignition[1228]: INFO : mount: mount passed Feb 12 20:22:24.648493 ignition[1228]: INFO : Ignition finished successfully Feb 12 20:22:24.651554 systemd[1]: Finished ignition-mount.service. Feb 12 20:22:24.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.669524 kernel: audit: type=1130 audit(1707769344.657:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:24.667633 systemd[1]: Starting ignition-files.service... Feb 12 20:22:24.683300 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 12 20:22:24.700261 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1236) Feb 12 20:22:24.705701 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-generic) checksum algorithm Feb 12 20:22:24.705737 kernel: BTRFS info (device nvme0n1p6): using free space tree Feb 12 20:22:24.705760 kernel: BTRFS info (device nvme0n1p6): has skinny extents Feb 12 20:22:24.714263 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Feb 12 20:22:24.718917 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 12 20:22:24.737755 ignition[1255]: INFO : Ignition 2.14.0 Feb 12 20:22:24.737755 ignition[1255]: INFO : Stage: files Feb 12 20:22:24.742429 ignition[1255]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 20:22:24.742429 ignition[1255]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 20:22:24.755548 ignition[1255]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 20:22:24.755548 ignition[1255]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 20:22:24.761915 ignition[1255]: INFO : PUT result: OK Feb 12 20:22:24.768008 ignition[1255]: DEBUG : files: compiled without relabeling support, skipping Feb 12 20:22:24.772018 ignition[1255]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 12 20:22:24.774834 ignition[1255]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 12 20:22:24.805172 ignition[1255]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 12 20:22:24.808066 ignition[1255]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 12 20:22:24.810692 ignition[1255]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 12 20:22:24.808150 unknown[1255]: wrote ssh authorized keys file for user: core Feb 12 20:22:24.815845 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 12 20:22:24.815845 ignition[1255]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Feb 12 20:22:25.335023 ignition[1255]: INFO : GET result: OK Feb 12 20:22:25.859679 ignition[1255]: DEBUG : file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Feb 12 20:22:25.865314 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 12 20:22:25.865314 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 12 20:22:25.865314 ignition[1255]: INFO : GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Feb 12 20:22:25.905313 ignition[1255]: INFO : GET result: OK Feb 12 20:22:26.014560 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 12 20:22:26.018520 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 12 20:22:26.018520 ignition[1255]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Feb 12 20:22:26.399577 ignition[1255]: INFO : GET result: OK Feb 12 20:22:26.664455 ignition[1255]: DEBUG : file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Feb 12 20:22:26.669278 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 12 20:22:26.669278 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubectl" Feb 12 20:22:26.669278 ignition[1255]: INFO : GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Feb 12 20:22:26.812311 ignition[1255]: INFO : GET result: OK Feb 12 20:22:27.461185 ignition[1255]: DEBUG : file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Feb 12 20:22:27.466176 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 12 20:22:27.466176 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Feb 12 20:22:27.466176 ignition[1255]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 12 20:22:27.486247 ignition[1255]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2654645517" Feb 12 20:22:27.493438 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1260) Feb 12 20:22:27.493483 ignition[1255]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2654645517": device or resource busy Feb 12 20:22:27.493483 ignition[1255]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2654645517", trying btrfs: device or resource busy Feb 12 20:22:27.493483 ignition[1255]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2654645517" Feb 12 20:22:27.503362 ignition[1255]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2654645517" Feb 12 20:22:27.513032 ignition[1255]: INFO : op(3): [started] unmounting "/mnt/oem2654645517" Feb 12 20:22:27.513032 ignition[1255]: INFO : op(3): [finished] unmounting "/mnt/oem2654645517" Feb 12 20:22:27.513032 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Feb 12 20:22:27.513032 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 12 20:22:27.513032 ignition[1255]: INFO : GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Feb 12 20:22:27.528791 systemd[1]: mnt-oem2654645517.mount: Deactivated successfully. Feb 12 20:22:27.580423 ignition[1255]: INFO : GET result: OK Feb 12 20:22:28.196624 ignition[1255]: DEBUG : file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Feb 12 20:22:28.201656 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 12 20:22:28.201656 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubelet" Feb 12 20:22:28.201656 ignition[1255]: INFO : GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Feb 12 20:22:28.262078 ignition[1255]: INFO : GET result: OK Feb 12 20:22:29.474014 ignition[1255]: DEBUG : file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 12 20:22:29.479134 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 12 20:22:29.558953 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 12 20:22:29.558953 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(10): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Feb 12 20:22:29.558953 ignition[1255]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 12 20:22:29.558953 ignition[1255]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2667855874" Feb 12 20:22:29.558953 ignition[1255]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2667855874": device or resource busy Feb 12 20:22:29.558953 ignition[1255]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2667855874", trying btrfs: device or resource busy Feb 12 20:22:29.558953 ignition[1255]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2667855874" Feb 12 20:22:29.558953 ignition[1255]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2667855874" Feb 12 20:22:29.558953 ignition[1255]: INFO : op(6): [started] unmounting "/mnt/oem2667855874" Feb 12 20:22:29.558953 ignition[1255]: INFO : op(6): [finished] unmounting "/mnt/oem2667855874" Feb 12 20:22:29.558953 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(10): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Feb 12 20:22:29.558953 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(11): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Feb 12 20:22:29.558953 ignition[1255]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 12 20:22:29.558953 ignition[1255]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3486222040" Feb 12 20:22:29.558953 ignition[1255]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3486222040": device or resource busy Feb 12 20:22:29.558953 ignition[1255]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3486222040", trying btrfs: device or resource busy Feb 12 20:22:29.558953 ignition[1255]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3486222040" Feb 12 20:22:29.505814 systemd[1]: mnt-oem2667855874.mount: Deactivated successfully. Feb 12 20:22:29.635412 ignition[1255]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3486222040" Feb 12 20:22:29.635412 ignition[1255]: INFO : op(9): [started] unmounting "/mnt/oem3486222040" Feb 12 20:22:29.635412 ignition[1255]: INFO : op(9): [finished] unmounting "/mnt/oem3486222040" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(11): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(12): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Feb 12 20:22:29.635412 ignition[1255]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Feb 12 20:22:29.635412 ignition[1255]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3626833172" Feb 12 20:22:29.635412 ignition[1255]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3626833172": device or resource busy Feb 12 20:22:29.635412 ignition[1255]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3626833172", trying btrfs: device or resource busy Feb 12 20:22:29.635412 ignition[1255]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3626833172" Feb 12 20:22:29.635412 ignition[1255]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3626833172" Feb 12 20:22:29.635412 ignition[1255]: INFO : op(c): [started] unmounting "/mnt/oem3626833172" Feb 12 20:22:29.635412 ignition[1255]: INFO : op(c): [finished] unmounting "/mnt/oem3626833172" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: createFilesystemsFiles: createFiles: op(12): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: op(13): [started] processing unit "coreos-metadata-sshkeys@.service" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: op(13): [finished] processing unit "coreos-metadata-sshkeys@.service" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: op(14): [started] processing unit "amazon-ssm-agent.service" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: op(14): op(15): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: op(14): op(15): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: op(14): [finished] processing unit "amazon-ssm-agent.service" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: op(16): [started] processing unit "nvidia.service" Feb 12 20:22:29.635412 ignition[1255]: INFO : files: op(16): [finished] processing unit "nvidia.service" Feb 12 20:22:29.570514 systemd[1]: mnt-oem3486222040.mount: Deactivated successfully. Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(17): [started] processing unit "prepare-cni-plugins.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(17): op(18): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(17): op(18): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(17): [finished] processing unit "prepare-cni-plugins.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(19): [started] processing unit "prepare-critools.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(19): op(1a): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(19): op(1a): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(19): [finished] processing unit "prepare-critools.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1b): [started] processing unit "prepare-helm.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1b): op(1c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1b): op(1c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1b): [finished] processing unit "prepare-helm.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1d): [started] setting preset to enabled for "prepare-helm.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1d): [finished] setting preset to enabled for "prepare-helm.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1e): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1e): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1f): [started] setting preset to enabled for "amazon-ssm-agent.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(1f): [finished] setting preset to enabled for "amazon-ssm-agent.service" Feb 12 20:22:29.713565 ignition[1255]: INFO : files: op(20): [started] setting preset to enabled for "nvidia.service" Feb 12 20:22:29.771837 ignition[1255]: INFO : files: op(20): [finished] setting preset to enabled for "nvidia.service" Feb 12 20:22:29.771837 ignition[1255]: INFO : files: op(21): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 12 20:22:29.771837 ignition[1255]: INFO : files: op(21): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 12 20:22:29.771837 ignition[1255]: INFO : files: op(22): [started] setting preset to enabled for "prepare-critools.service" Feb 12 20:22:29.771837 ignition[1255]: INFO : files: op(22): [finished] setting preset to enabled for "prepare-critools.service" Feb 12 20:22:29.771837 ignition[1255]: INFO : files: createResultFile: createFiles: op(23): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 12 20:22:29.771837 ignition[1255]: INFO : files: createResultFile: createFiles: op(23): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 12 20:22:29.771837 ignition[1255]: INFO : files: files passed Feb 12 20:22:29.771837 ignition[1255]: INFO : Ignition finished successfully Feb 12 20:22:29.815492 kernel: audit: type=1130 audit(1707769349.781:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.781101 systemd[1]: Finished ignition-files.service. Feb 12 20:22:29.806718 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 12 20:22:29.817355 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 12 20:22:29.819269 systemd[1]: Starting ignition-quench.service... Feb 12 20:22:29.827925 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 12 20:22:29.828133 systemd[1]: Finished ignition-quench.service. Feb 12 20:22:29.840709 initrd-setup-root-after-ignition[1280]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 12 20:22:29.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.846192 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 12 20:22:29.874417 kernel: audit: type=1130 audit(1707769349.844:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.874466 kernel: audit: type=1131 audit(1707769349.844:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.874492 kernel: audit: type=1130 audit(1707769349.860:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.844000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.862040 systemd[1]: Reached target ignition-complete.target. Feb 12 20:22:29.875028 systemd[1]: Starting initrd-parse-etc.service... Feb 12 20:22:29.917064 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 12 20:22:29.919091 systemd[1]: Finished initrd-parse-etc.service. Feb 12 20:22:29.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.922551 systemd[1]: Reached target initrd-fs.target. Feb 12 20:22:29.939468 kernel: audit: type=1130 audit(1707769349.921:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.939509 kernel: audit: type=1131 audit(1707769349.921:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.939501 systemd[1]: Reached target initrd.target. Feb 12 20:22:29.941133 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 12 20:22:29.942574 systemd[1]: Starting dracut-pre-pivot.service... Feb 12 20:22:29.968693 systemd[1]: Finished dracut-pre-pivot.service. Feb 12 20:22:29.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.972153 systemd[1]: Starting initrd-cleanup.service... Feb 12 20:22:29.983159 kernel: audit: type=1130 audit(1707769349.969:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:29.994083 systemd[1]: Stopped target nss-lookup.target. Feb 12 20:22:29.997682 systemd[1]: Stopped target remote-cryptsetup.target. Feb 12 20:22:30.001381 systemd[1]: Stopped target timers.target. Feb 12 20:22:30.004520 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 12 20:22:30.005759 systemd[1]: Stopped dracut-pre-pivot.service. Feb 12 20:22:30.009871 systemd[1]: Stopped target initrd.target. Feb 12 20:22:30.012914 systemd[1]: Stopped target basic.target. Feb 12 20:22:30.028606 systemd[1]: Stopped target ignition-complete.target. Feb 12 20:22:30.032153 systemd[1]: Stopped target ignition-diskful.target. Feb 12 20:22:30.035633 systemd[1]: Stopped target initrd-root-device.target. Feb 12 20:22:30.041268 systemd[1]: Stopped target remote-fs.target. Feb 12 20:22:30.044492 systemd[1]: Stopped target remote-fs-pre.target. Feb 12 20:22:30.048136 systemd[1]: Stopped target sysinit.target. Feb 12 20:22:30.051125 systemd[1]: Stopped target local-fs.target. Feb 12 20:22:30.054174 systemd[1]: Stopped target local-fs-pre.target. Feb 12 20:22:30.060010 systemd[1]: Stopped target swap.target. Feb 12 20:22:30.063825 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 12 20:22:30.065946 systemd[1]: Stopped dracut-pre-mount.service. Feb 12 20:22:30.069242 systemd[1]: Stopped target cryptsetup.target. Feb 12 20:22:30.073977 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 12 20:22:30.075995 systemd[1]: Stopped dracut-initqueue.service. Feb 12 20:22:30.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.067000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.093150 kernel: audit: type=1131 audit(1707769350.008:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.093195 kernel: audit: type=1131 audit(1707769350.067:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.100645 kernel: audit: type=1131 audit(1707769350.092:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.093590 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 12 20:22:30.093838 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 12 20:22:30.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.105059 systemd[1]: ignition-files.service: Deactivated successfully. Feb 12 20:22:30.108931 systemd[1]: Stopped ignition-files.service. Feb 12 20:22:30.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.113625 systemd[1]: Stopping ignition-mount.service... Feb 12 20:22:30.117759 systemd[1]: Stopping iscsiuio.service... Feb 12 20:22:30.120904 systemd[1]: Stopping sysroot-boot.service... Feb 12 20:22:30.123217 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 12 20:22:30.123572 systemd[1]: Stopped systemd-udev-trigger.service. Feb 12 20:22:30.140085 ignition[1293]: INFO : Ignition 2.14.0 Feb 12 20:22:30.141941 ignition[1293]: INFO : Stage: umount Feb 12 20:22:30.141941 ignition[1293]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Feb 12 20:22:30.141941 ignition[1293]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Feb 12 20:22:30.149000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.150703 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 12 20:22:30.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.150940 systemd[1]: Stopped dracut-pre-trigger.service. Feb 12 20:22:30.159217 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 12 20:22:30.164418 systemd[1]: Stopped iscsiuio.service. Feb 12 20:22:30.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.171735 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 12 20:22:30.173285 systemd[1]: Finished initrd-cleanup.service. Feb 12 20:22:30.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.182575 ignition[1293]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Feb 12 20:22:30.185359 ignition[1293]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Feb 12 20:22:30.193862 ignition[1293]: INFO : PUT result: OK Feb 12 20:22:30.199391 ignition[1293]: INFO : umount: umount passed Feb 12 20:22:30.201161 ignition[1293]: INFO : Ignition finished successfully Feb 12 20:22:30.205219 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 12 20:22:30.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.216000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.205452 systemd[1]: Stopped ignition-mount.service. Feb 12 20:22:30.207381 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 12 20:22:30.207471 systemd[1]: Stopped ignition-disks.service. Feb 12 20:22:30.211260 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 12 20:22:30.211361 systemd[1]: Stopped ignition-kargs.service. Feb 12 20:22:30.213457 systemd[1]: ignition-fetch.service: Deactivated successfully. Feb 12 20:22:30.213550 systemd[1]: Stopped ignition-fetch.service. Feb 12 20:22:30.219188 systemd[1]: Stopped target network.target. Feb 12 20:22:30.220860 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 12 20:22:30.220956 systemd[1]: Stopped ignition-fetch-offline.service. Feb 12 20:22:30.236000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.237222 systemd[1]: Stopped target paths.target. Feb 12 20:22:30.237387 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 12 20:22:30.243299 systemd[1]: Stopped systemd-ask-password-console.path. Feb 12 20:22:30.246648 systemd[1]: Stopped target slices.target. Feb 12 20:22:30.248249 systemd[1]: Stopped target sockets.target. Feb 12 20:22:30.251139 systemd[1]: iscsid.socket: Deactivated successfully. Feb 12 20:22:30.252546 systemd[1]: Closed iscsid.socket. Feb 12 20:22:30.255443 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 12 20:22:30.256666 systemd[1]: Closed iscsiuio.socket. Feb 12 20:22:30.258121 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 12 20:22:30.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.259832 systemd[1]: Stopped ignition-setup.service. Feb 12 20:22:30.264683 systemd[1]: Stopping systemd-networkd.service... Feb 12 20:22:30.269446 systemd[1]: Stopping systemd-resolved.service... Feb 12 20:22:30.270284 systemd-networkd[1100]: eth0: DHCPv6 lease lost Feb 12 20:22:30.274672 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 12 20:22:30.278582 systemd[1]: Stopped systemd-networkd.service. Feb 12 20:22:30.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.282491 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 12 20:22:30.284609 systemd[1]: Stopped systemd-resolved.service. Feb 12 20:22:30.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.289119 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 12 20:22:30.291193 systemd[1]: Stopped sysroot-boot.service. Feb 12 20:22:30.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.293000 audit: BPF prog-id=9 op=UNLOAD Feb 12 20:22:30.293000 audit: BPF prog-id=6 op=UNLOAD Feb 12 20:22:30.294713 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 12 20:22:30.294826 systemd[1]: Closed systemd-networkd.socket. Feb 12 20:22:30.300098 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 12 20:22:30.300296 systemd[1]: Stopped initrd-setup-root.service. Feb 12 20:22:30.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.306602 systemd[1]: Stopping network-cleanup.service... Feb 12 20:22:30.311411 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 12 20:22:30.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.311550 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 12 20:22:30.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.314953 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 12 20:22:30.315054 systemd[1]: Stopped systemd-sysctl.service. Feb 12 20:22:30.318847 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 12 20:22:30.318932 systemd[1]: Stopped systemd-modules-load.service. Feb 12 20:22:30.320913 systemd[1]: Stopping systemd-udevd.service... Feb 12 20:22:30.336569 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 12 20:22:30.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.341000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.336873 systemd[1]: Stopped systemd-udevd.service. Feb 12 20:22:30.338946 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 12 20:22:30.339050 systemd[1]: Closed systemd-udevd-control.socket. Feb 12 20:22:30.340795 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 12 20:22:30.340867 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 12 20:22:30.367000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.342538 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 12 20:22:30.342620 systemd[1]: Stopped dracut-pre-udev.service. Feb 12 20:22:30.344308 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 12 20:22:30.344386 systemd[1]: Stopped dracut-cmdline.service. Feb 12 20:22:30.379000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.381000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.346011 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 12 20:22:30.346084 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 12 20:22:30.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.351432 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 12 20:22:30.366483 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Feb 12 20:22:30.366629 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Feb 12 20:22:30.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:30.369486 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 12 20:22:30.369580 systemd[1]: Stopped kmod-static-nodes.service. Feb 12 20:22:30.380149 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 12 20:22:30.380268 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 12 20:22:30.382919 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 12 20:22:30.383141 systemd[1]: Stopped network-cleanup.service. Feb 12 20:22:30.392048 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 12 20:22:30.393723 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 12 20:22:30.415858 systemd[1]: Reached target initrd-switch-root.target. Feb 12 20:22:30.420598 systemd[1]: Starting initrd-switch-root.service... Feb 12 20:22:30.437044 systemd[1]: Switching root. Feb 12 20:22:30.465740 iscsid[1105]: iscsid shutting down. Feb 12 20:22:30.467442 systemd-journald[309]: Received SIGTERM from PID 1 (systemd). Feb 12 20:22:30.467518 systemd-journald[309]: Journal stopped Feb 12 20:22:35.868987 kernel: SELinux: Class mctp_socket not defined in policy. Feb 12 20:22:35.869102 kernel: SELinux: Class anon_inode not defined in policy. Feb 12 20:22:35.869146 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 12 20:22:35.869180 kernel: SELinux: policy capability network_peer_controls=1 Feb 12 20:22:35.869210 kernel: SELinux: policy capability open_perms=1 Feb 12 20:22:35.870392 kernel: SELinux: policy capability extended_socket_class=1 Feb 12 20:22:35.870438 kernel: SELinux: policy capability always_check_network=0 Feb 12 20:22:35.870479 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 12 20:22:35.870508 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 12 20:22:35.870538 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 12 20:22:35.870781 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 12 20:22:35.870826 systemd[1]: Successfully loaded SELinux policy in 112.725ms. Feb 12 20:22:35.870881 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 19.689ms. Feb 12 20:22:35.870918 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 12 20:22:35.870989 systemd[1]: Detected virtualization amazon. Feb 12 20:22:35.872471 systemd[1]: Detected architecture arm64. Feb 12 20:22:35.872516 systemd[1]: Detected first boot. Feb 12 20:22:35.872549 systemd[1]: Initializing machine ID from VM UUID. Feb 12 20:22:35.872586 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 12 20:22:35.872620 systemd[1]: Populated /etc with preset unit settings. Feb 12 20:22:35.872656 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 20:22:35.872693 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 20:22:35.872728 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 20:22:35.872760 kernel: kauditd_printk_skb: 48 callbacks suppressed Feb 12 20:22:35.872789 kernel: audit: type=1334 audit(1707769355.434:88): prog-id=12 op=LOAD Feb 12 20:22:35.872820 kernel: audit: type=1334 audit(1707769355.434:89): prog-id=3 op=UNLOAD Feb 12 20:22:35.872854 kernel: audit: type=1334 audit(1707769355.434:90): prog-id=13 op=LOAD Feb 12 20:22:35.872883 kernel: audit: type=1334 audit(1707769355.434:91): prog-id=14 op=LOAD Feb 12 20:22:35.872913 kernel: audit: type=1334 audit(1707769355.434:92): prog-id=4 op=UNLOAD Feb 12 20:22:35.872943 kernel: audit: type=1334 audit(1707769355.434:93): prog-id=5 op=UNLOAD Feb 12 20:22:35.872981 systemd[1]: iscsid.service: Deactivated successfully. Feb 12 20:22:35.873011 kernel: audit: type=1334 audit(1707769355.443:94): prog-id=15 op=LOAD Feb 12 20:22:35.873040 systemd[1]: Stopped iscsid.service. Feb 12 20:22:35.873071 kernel: audit: type=1334 audit(1707769355.443:95): prog-id=12 op=UNLOAD Feb 12 20:22:35.873100 kernel: audit: type=1334 audit(1707769355.445:96): prog-id=16 op=LOAD Feb 12 20:22:35.873132 kernel: audit: type=1334 audit(1707769355.448:97): prog-id=17 op=LOAD Feb 12 20:22:35.873162 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 12 20:22:35.873193 systemd[1]: Stopped initrd-switch-root.service. Feb 12 20:22:35.873242 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 12 20:22:35.873281 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 12 20:22:35.873312 systemd[1]: Created slice system-addon\x2drun.slice. Feb 12 20:22:35.873343 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Feb 12 20:22:35.873376 systemd[1]: Created slice system-getty.slice. Feb 12 20:22:35.873412 systemd[1]: Created slice system-modprobe.slice. Feb 12 20:22:35.873443 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 12 20:22:35.873473 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 12 20:22:35.873508 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 12 20:22:35.873541 systemd[1]: Created slice user.slice. Feb 12 20:22:35.873572 systemd[1]: Started systemd-ask-password-console.path. Feb 12 20:22:35.873602 systemd[1]: Started systemd-ask-password-wall.path. Feb 12 20:22:35.873633 systemd[1]: Set up automount boot.automount. Feb 12 20:22:35.873664 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 12 20:22:35.873699 systemd[1]: Stopped target initrd-switch-root.target. Feb 12 20:22:35.873728 systemd[1]: Stopped target initrd-fs.target. Feb 12 20:22:35.873759 systemd[1]: Stopped target initrd-root-fs.target. Feb 12 20:22:35.873791 systemd[1]: Reached target integritysetup.target. Feb 12 20:22:35.873824 systemd[1]: Reached target remote-cryptsetup.target. Feb 12 20:22:35.873856 systemd[1]: Reached target remote-fs.target. Feb 12 20:22:35.873885 systemd[1]: Reached target slices.target. Feb 12 20:22:35.873917 systemd[1]: Reached target swap.target. Feb 12 20:22:35.873948 systemd[1]: Reached target torcx.target. Feb 12 20:22:35.873981 systemd[1]: Reached target veritysetup.target. Feb 12 20:22:35.874012 systemd[1]: Listening on systemd-coredump.socket. Feb 12 20:22:35.874042 systemd[1]: Listening on systemd-initctl.socket. Feb 12 20:22:35.874070 systemd[1]: Listening on systemd-networkd.socket. Feb 12 20:22:35.874101 systemd[1]: Listening on systemd-udevd-control.socket. Feb 12 20:22:35.874130 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 12 20:22:35.874162 systemd[1]: Listening on systemd-userdbd.socket. Feb 12 20:22:35.874192 systemd[1]: Mounting dev-hugepages.mount... Feb 12 20:22:35.874223 systemd[1]: Mounting dev-mqueue.mount... Feb 12 20:22:35.874277 systemd[1]: Mounting media.mount... Feb 12 20:22:35.874308 systemd[1]: Mounting sys-kernel-debug.mount... Feb 12 20:22:35.874339 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 12 20:22:35.874368 systemd[1]: Mounting tmp.mount... Feb 12 20:22:35.874399 systemd[1]: Starting flatcar-tmpfiles.service... Feb 12 20:22:35.874431 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 12 20:22:35.874469 systemd[1]: Starting kmod-static-nodes.service... Feb 12 20:22:35.874499 systemd[1]: Starting modprobe@configfs.service... Feb 12 20:22:35.874530 systemd[1]: Starting modprobe@dm_mod.service... Feb 12 20:22:35.874561 systemd[1]: Starting modprobe@drm.service... Feb 12 20:22:35.874594 systemd[1]: Starting modprobe@efi_pstore.service... Feb 12 20:22:35.874624 systemd[1]: Starting modprobe@fuse.service... Feb 12 20:22:35.874655 systemd[1]: Starting modprobe@loop.service... Feb 12 20:22:35.874687 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 12 20:22:35.874717 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 12 20:22:35.874746 systemd[1]: Stopped systemd-fsck-root.service. Feb 12 20:22:35.874777 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 12 20:22:35.874806 systemd[1]: Stopped systemd-fsck-usr.service. Feb 12 20:22:35.874843 systemd[1]: Stopped systemd-journald.service. Feb 12 20:22:35.874873 systemd[1]: Starting systemd-journald.service... Feb 12 20:22:35.874904 systemd[1]: Starting systemd-modules-load.service... Feb 12 20:22:35.874935 systemd[1]: Starting systemd-network-generator.service... Feb 12 20:22:35.874982 systemd[1]: Starting systemd-remount-fs.service... Feb 12 20:22:35.875013 kernel: loop: module loaded Feb 12 20:22:35.875044 systemd[1]: Starting systemd-udev-trigger.service... Feb 12 20:22:35.875075 systemd[1]: verity-setup.service: Deactivated successfully. Feb 12 20:22:35.875105 systemd[1]: Stopped verity-setup.service. Feb 12 20:22:35.875133 kernel: fuse: init (API version 7.34) Feb 12 20:22:35.875167 systemd[1]: Mounted dev-hugepages.mount. Feb 12 20:22:35.875196 systemd[1]: Mounted dev-mqueue.mount. Feb 12 20:22:35.875238 systemd[1]: Mounted media.mount. Feb 12 20:22:35.875274 systemd[1]: Mounted sys-kernel-debug.mount. Feb 12 20:22:35.875303 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 12 20:22:35.875333 systemd[1]: Mounted tmp.mount. Feb 12 20:22:35.875364 systemd[1]: Finished kmod-static-nodes.service. Feb 12 20:22:35.875402 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 12 20:22:35.875434 systemd[1]: Finished modprobe@configfs.service. Feb 12 20:22:35.875474 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 12 20:22:35.875508 systemd[1]: Finished modprobe@dm_mod.service. Feb 12 20:22:35.875545 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 12 20:22:35.875575 systemd[1]: Finished modprobe@drm.service. Feb 12 20:22:35.875605 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 12 20:22:35.875635 systemd[1]: Finished modprobe@efi_pstore.service. Feb 12 20:22:35.875666 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 12 20:22:35.875696 systemd[1]: Finished modprobe@fuse.service. Feb 12 20:22:35.875726 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 12 20:22:35.875760 systemd-journald[1405]: Journal started Feb 12 20:22:35.875855 systemd-journald[1405]: Runtime Journal (/run/log/journal/ec288f49f9c6ed068b479285f783a157) is 8.0M, max 75.4M, 67.4M free. Feb 12 20:22:35.879450 systemd[1]: Finished modprobe@loop.service. Feb 12 20:22:31.122000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 12 20:22:31.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 12 20:22:31.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 12 20:22:31.311000 audit: BPF prog-id=10 op=LOAD Feb 12 20:22:31.311000 audit: BPF prog-id=10 op=UNLOAD Feb 12 20:22:31.311000 audit: BPF prog-id=11 op=LOAD Feb 12 20:22:31.311000 audit: BPF prog-id=11 op=UNLOAD Feb 12 20:22:31.493000 audit[1326]: AVC avc: denied { associate } for pid=1326 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 12 20:22:31.493000 audit[1326]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001458ac a1=40000c6de0 a2=40000cd0c0 a3=32 items=0 ppid=1309 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:31.493000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 12 20:22:31.497000 audit[1326]: AVC avc: denied { associate } for pid=1326 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 12 20:22:31.497000 audit[1326]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=4000145985 a2=1ed a3=0 items=2 ppid=1309 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:31.497000 audit: CWD cwd="/" Feb 12 20:22:31.497000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:22:31.497000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:22:31.497000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 12 20:22:35.434000 audit: BPF prog-id=12 op=LOAD Feb 12 20:22:35.434000 audit: BPF prog-id=3 op=UNLOAD Feb 12 20:22:35.434000 audit: BPF prog-id=13 op=LOAD Feb 12 20:22:35.434000 audit: BPF prog-id=14 op=LOAD Feb 12 20:22:35.434000 audit: BPF prog-id=4 op=UNLOAD Feb 12 20:22:35.434000 audit: BPF prog-id=5 op=UNLOAD Feb 12 20:22:35.443000 audit: BPF prog-id=15 op=LOAD Feb 12 20:22:35.443000 audit: BPF prog-id=12 op=UNLOAD Feb 12 20:22:35.884435 systemd[1]: Started systemd-journald.service. Feb 12 20:22:35.445000 audit: BPF prog-id=16 op=LOAD Feb 12 20:22:35.448000 audit: BPF prog-id=17 op=LOAD Feb 12 20:22:35.448000 audit: BPF prog-id=13 op=UNLOAD Feb 12 20:22:35.448000 audit: BPF prog-id=14 op=UNLOAD Feb 12 20:22:35.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.459000 audit: BPF prog-id=15 op=UNLOAD Feb 12 20:22:35.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.732000 audit: BPF prog-id=18 op=LOAD Feb 12 20:22:35.733000 audit: BPF prog-id=19 op=LOAD Feb 12 20:22:35.733000 audit: BPF prog-id=20 op=LOAD Feb 12 20:22:35.733000 audit: BPF prog-id=16 op=UNLOAD Feb 12 20:22:35.733000 audit: BPF prog-id=17 op=UNLOAD Feb 12 20:22:35.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.842000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.861000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.861000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.864000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 12 20:22:35.864000 audit[1405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=ffffeb74a470 a2=4000 a3=1 items=0 ppid=1 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:35.864000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 12 20:22:35.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.432879 systemd[1]: Queued start job for default target multi-user.target. Feb 12 20:22:31.481491 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 20:22:35.451079 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 12 20:22:31.482162 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 12 20:22:35.887034 systemd[1]: Finished systemd-modules-load.service. Feb 12 20:22:35.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:31.482211 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 12 20:22:35.889458 systemd[1]: Finished systemd-network-generator.service. Feb 12 20:22:31.482301 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 12 20:22:35.892005 systemd[1]: Finished systemd-remount-fs.service. Feb 12 20:22:31.482328 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 12 20:22:35.894693 systemd[1]: Reached target network-pre.target. Feb 12 20:22:31.482389 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 12 20:22:35.899102 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 12 20:22:31.482420 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 12 20:22:35.903257 systemd[1]: Mounting sys-kernel-config.mount... Feb 12 20:22:31.482815 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 12 20:22:35.907434 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 12 20:22:31.482893 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 12 20:22:35.910442 systemd[1]: Starting systemd-hwdb-update.service... Feb 12 20:22:31.482930 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 12 20:22:31.483846 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 12 20:22:35.914626 systemd[1]: Starting systemd-journal-flush.service... Feb 12 20:22:31.483929 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 12 20:22:35.916502 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 12 20:22:31.483974 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 12 20:22:35.919205 systemd[1]: Starting systemd-random-seed.service... Feb 12 20:22:31.484015 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 12 20:22:35.921001 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 12 20:22:31.484060 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 12 20:22:35.923478 systemd[1]: Starting systemd-sysctl.service... Feb 12 20:22:31.484099 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:31Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 12 20:22:35.931203 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 12 20:22:34.554569 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:34Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 20:22:35.934096 systemd[1]: Mounted sys-kernel-config.mount. Feb 12 20:22:34.555133 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:34Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 20:22:34.555401 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:34Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 20:22:34.555849 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:34Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 12 20:22:34.555957 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:34Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 12 20:22:34.556095 /usr/lib/systemd/system-generators/torcx-generator[1326]: time="2024-02-12T20:22:34Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 12 20:22:35.959199 systemd-journald[1405]: Time spent on flushing to /var/log/journal/ec288f49f9c6ed068b479285f783a157 is 58.073ms for 1169 entries. Feb 12 20:22:35.959199 systemd-journald[1405]: System Journal (/var/log/journal/ec288f49f9c6ed068b479285f783a157) is 8.0M, max 195.6M, 187.6M free. Feb 12 20:22:36.035779 systemd-journald[1405]: Received client request to flush runtime journal. Feb 12 20:22:35.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.987000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.993000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:35.965155 systemd[1]: Finished flatcar-tmpfiles.service. Feb 12 20:22:35.969327 systemd[1]: Starting systemd-sysusers.service... Feb 12 20:22:35.987103 systemd[1]: Finished systemd-sysctl.service. Feb 12 20:22:35.992491 systemd[1]: Finished systemd-random-seed.service. Feb 12 20:22:35.994573 systemd[1]: Reached target first-boot-complete.target. Feb 12 20:22:36.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:36.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:36.038262 systemd[1]: Finished systemd-journal-flush.service. Feb 12 20:22:36.045493 systemd[1]: Finished systemd-sysusers.service. Feb 12 20:22:36.049612 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 12 20:22:36.108709 systemd[1]: Finished systemd-udev-trigger.service. Feb 12 20:22:36.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:36.113455 systemd[1]: Starting systemd-udev-settle.service... Feb 12 20:22:36.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:36.132098 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 12 20:22:36.139654 udevadm[1448]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Feb 12 20:22:36.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:36.832991 systemd[1]: Finished systemd-hwdb-update.service. Feb 12 20:22:36.836000 audit: BPF prog-id=21 op=LOAD Feb 12 20:22:36.836000 audit: BPF prog-id=22 op=LOAD Feb 12 20:22:36.836000 audit: BPF prog-id=7 op=UNLOAD Feb 12 20:22:36.836000 audit: BPF prog-id=8 op=UNLOAD Feb 12 20:22:36.838883 systemd[1]: Starting systemd-udevd.service... Feb 12 20:22:36.875171 systemd-udevd[1449]: Using default interface naming scheme 'v252'. Feb 12 20:22:36.918514 systemd[1]: Started systemd-udevd.service. Feb 12 20:22:36.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:36.920000 audit: BPF prog-id=23 op=LOAD Feb 12 20:22:36.925346 systemd[1]: Starting systemd-networkd.service... Feb 12 20:22:36.932000 audit: BPF prog-id=24 op=LOAD Feb 12 20:22:36.932000 audit: BPF prog-id=25 op=LOAD Feb 12 20:22:36.933000 audit: BPF prog-id=26 op=LOAD Feb 12 20:22:36.935634 systemd[1]: Starting systemd-userdbd.service... Feb 12 20:22:37.006533 systemd[1]: Started systemd-userdbd.service. Feb 12 20:22:37.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:37.022787 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Feb 12 20:22:37.037703 (udev-worker)[1451]: Network interface NamePolicy= disabled on kernel command line. Feb 12 20:22:37.172342 systemd-networkd[1454]: lo: Link UP Feb 12 20:22:37.172362 systemd-networkd[1454]: lo: Gained carrier Feb 12 20:22:37.173314 systemd-networkd[1454]: Enumeration completed Feb 12 20:22:37.173480 systemd[1]: Started systemd-networkd.service. Feb 12 20:22:37.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:37.177584 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 12 20:22:37.182438 systemd-networkd[1454]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 12 20:22:37.188280 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 20:22:37.188440 systemd-networkd[1454]: eth0: Link UP Feb 12 20:22:37.188750 systemd-networkd[1454]: eth0: Gained carrier Feb 12 20:22:37.196479 systemd-networkd[1454]: eth0: DHCPv4 address 172.31.21.82/20, gateway 172.31.16.1 acquired from 172.31.16.1 Feb 12 20:22:37.279280 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1453) Feb 12 20:22:37.396430 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 12 20:22:37.399225 systemd[1]: Finished systemd-udev-settle.service. Feb 12 20:22:37.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:37.403772 systemd[1]: Starting lvm2-activation-early.service... Feb 12 20:22:37.440876 lvm[1565]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 12 20:22:37.478888 systemd[1]: Finished lvm2-activation-early.service. Feb 12 20:22:37.479000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:37.481083 systemd[1]: Reached target cryptsetup.target. Feb 12 20:22:37.485006 systemd[1]: Starting lvm2-activation.service... Feb 12 20:22:37.493574 lvm[1566]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 12 20:22:37.530931 systemd[1]: Finished lvm2-activation.service. Feb 12 20:22:37.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:37.532973 systemd[1]: Reached target local-fs-pre.target. Feb 12 20:22:37.534757 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 12 20:22:37.534816 systemd[1]: Reached target local-fs.target. Feb 12 20:22:37.536503 systemd[1]: Reached target machines.target. Feb 12 20:22:37.540612 systemd[1]: Starting ldconfig.service... Feb 12 20:22:37.543026 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 12 20:22:37.543339 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 12 20:22:37.545777 systemd[1]: Starting systemd-boot-update.service... Feb 12 20:22:37.549844 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 12 20:22:37.555818 systemd[1]: Starting systemd-machine-id-commit.service... Feb 12 20:22:37.560107 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 12 20:22:37.561152 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 12 20:22:37.563865 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 12 20:22:37.568639 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1568 (bootctl) Feb 12 20:22:37.578558 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 12 20:22:37.600535 systemd-tmpfiles[1571]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 12 20:22:37.603383 systemd-tmpfiles[1571]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 12 20:22:37.606525 systemd-tmpfiles[1571]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 12 20:22:37.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:37.613617 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 12 20:22:37.727345 systemd-fsck[1578]: fsck.fat 4.2 (2021-01-31) Feb 12 20:22:37.727345 systemd-fsck[1578]: /dev/nvme0n1p1: 236 files, 113719/258078 clusters Feb 12 20:22:37.732544 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 12 20:22:37.733000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:37.737402 systemd[1]: Mounting boot.mount... Feb 12 20:22:37.756126 systemd[1]: Mounted boot.mount. Feb 12 20:22:37.784054 systemd[1]: Finished systemd-boot-update.service. Feb 12 20:22:37.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:37.964094 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 12 20:22:37.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:37.968486 systemd[1]: Starting audit-rules.service... Feb 12 20:22:37.974225 systemd[1]: Starting clean-ca-certificates.service... Feb 12 20:22:37.979935 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 12 20:22:37.986000 audit: BPF prog-id=27 op=LOAD Feb 12 20:22:37.989707 systemd[1]: Starting systemd-resolved.service... Feb 12 20:22:37.992000 audit: BPF prog-id=28 op=LOAD Feb 12 20:22:37.995585 systemd[1]: Starting systemd-timesyncd.service... Feb 12 20:22:38.000858 systemd[1]: Starting systemd-update-utmp.service... Feb 12 20:22:38.004622 systemd[1]: Finished clean-ca-certificates.service. Feb 12 20:22:38.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:38.007394 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 12 20:22:38.039000 audit[1603]: SYSTEM_BOOT pid=1603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 12 20:22:38.048797 systemd[1]: Finished systemd-update-utmp.service. Feb 12 20:22:38.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:38.103420 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 12 20:22:38.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:38.132000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 12 20:22:38.132000 audit[1612]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd9321e70 a2=420 a3=0 items=0 ppid=1592 pid=1612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:38.132000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 12 20:22:38.134211 augenrules[1612]: No rules Feb 12 20:22:38.136970 systemd[1]: Finished audit-rules.service. Feb 12 20:22:38.164184 systemd[1]: Started systemd-timesyncd.service. Feb 12 20:22:38.168346 systemd[1]: Reached target time-set.target. Feb 12 20:22:38.218404 systemd-resolved[1596]: Positive Trust Anchors: Feb 12 20:22:38.219050 systemd-resolved[1596]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 12 20:22:38.219283 systemd-resolved[1596]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 12 20:22:38.247034 systemd-resolved[1596]: Defaulting to hostname 'linux'. Feb 12 20:22:38.253404 systemd[1]: Started systemd-resolved.service. Feb 12 20:22:38.255338 systemd[1]: Reached target network.target. Feb 12 20:22:38.256990 systemd[1]: Reached target nss-lookup.target. Feb 12 20:22:38.259038 systemd-timesyncd[1599]: Contacted time server 199.188.48.60:123 (0.flatcar.pool.ntp.org). Feb 12 20:22:38.259434 systemd-timesyncd[1599]: Initial clock synchronization to Mon 2024-02-12 20:22:38.280701 UTC. Feb 12 20:22:38.431956 ldconfig[1567]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 12 20:22:38.461582 systemd[1]: Finished ldconfig.service. Feb 12 20:22:38.465577 systemd[1]: Starting systemd-update-done.service... Feb 12 20:22:38.481117 systemd[1]: Finished systemd-update-done.service. Feb 12 20:22:38.483295 systemd[1]: Reached target sysinit.target. Feb 12 20:22:38.485144 systemd[1]: Started motdgen.path. Feb 12 20:22:38.486663 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 12 20:22:38.489338 systemd[1]: Started logrotate.timer. Feb 12 20:22:38.491202 systemd[1]: Started mdadm.timer. Feb 12 20:22:38.492660 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 12 20:22:38.494409 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 12 20:22:38.494459 systemd[1]: Reached target paths.target. Feb 12 20:22:38.496000 systemd[1]: Reached target timers.target. Feb 12 20:22:38.498291 systemd[1]: Listening on dbus.socket. Feb 12 20:22:38.501893 systemd[1]: Starting docker.socket... Feb 12 20:22:38.508629 systemd[1]: Listening on sshd.socket. Feb 12 20:22:38.510678 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 12 20:22:38.511713 systemd[1]: Listening on docker.socket. Feb 12 20:22:38.513700 systemd[1]: Reached target sockets.target. Feb 12 20:22:38.515916 systemd[1]: Reached target basic.target. Feb 12 20:22:38.518088 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 12 20:22:38.518301 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 12 20:22:38.531216 systemd[1]: Starting containerd.service... Feb 12 20:22:38.535603 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Feb 12 20:22:38.542417 systemd[1]: Starting dbus.service... Feb 12 20:22:38.546604 systemd[1]: Starting enable-oem-cloudinit.service... Feb 12 20:22:38.551355 systemd[1]: Starting extend-filesystems.service... Feb 12 20:22:38.553134 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 12 20:22:38.555550 systemd[1]: Starting motdgen.service... Feb 12 20:22:38.559543 systemd[1]: Starting prepare-cni-plugins.service... Feb 12 20:22:38.564561 systemd[1]: Starting prepare-critools.service... Feb 12 20:22:38.570969 systemd[1]: Starting prepare-helm.service... Feb 12 20:22:38.575141 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 12 20:22:38.579617 systemd[1]: Starting sshd-keygen.service... Feb 12 20:22:38.586067 systemd[1]: Starting systemd-logind.service... Feb 12 20:22:38.587797 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 12 20:22:38.587924 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 12 20:22:38.590434 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 12 20:22:38.591975 systemd[1]: Starting update-engine.service... Feb 12 20:22:38.596192 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 12 20:22:38.621603 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 12 20:22:38.621952 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 12 20:22:38.636991 jq[1624]: false Feb 12 20:22:38.637538 jq[1636]: true Feb 12 20:22:38.652043 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 12 20:22:38.652435 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 12 20:22:38.691521 systemd[1]: motdgen.service: Deactivated successfully. Feb 12 20:22:38.691855 systemd[1]: Finished motdgen.service. Feb 12 20:22:38.708376 jq[1656]: true Feb 12 20:22:38.709159 systemd-networkd[1454]: eth0: Gained IPv6LL Feb 12 20:22:38.713956 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 12 20:22:38.716466 systemd[1]: Reached target network-online.target. Feb 12 20:22:38.720954 systemd[1]: Started amazon-ssm-agent.service. Feb 12 20:22:38.727770 systemd[1]: Started nvidia.service. Feb 12 20:22:38.740094 extend-filesystems[1626]: Found nvme0n1 Feb 12 20:22:38.744517 extend-filesystems[1626]: Found nvme0n1p1 Feb 12 20:22:38.746167 extend-filesystems[1626]: Found nvme0n1p2 Feb 12 20:22:38.746167 extend-filesystems[1626]: Found nvme0n1p3 Feb 12 20:22:38.750090 extend-filesystems[1626]: Found usr Feb 12 20:22:38.750090 extend-filesystems[1626]: Found nvme0n1p4 Feb 12 20:22:38.750090 extend-filesystems[1626]: Found nvme0n1p6 Feb 12 20:22:38.750090 extend-filesystems[1626]: Found nvme0n1p7 Feb 12 20:22:38.750090 extend-filesystems[1626]: Found nvme0n1p9 Feb 12 20:22:38.750090 extend-filesystems[1626]: Checking size of /dev/nvme0n1p9 Feb 12 20:22:38.790711 tar[1638]: ./ Feb 12 20:22:38.790711 tar[1638]: ./loopback Feb 12 20:22:38.796500 tar[1639]: crictl Feb 12 20:22:38.802043 tar[1640]: linux-arm64/helm Feb 12 20:22:38.866886 extend-filesystems[1626]: Resized partition /dev/nvme0n1p9 Feb 12 20:22:38.925629 systemd-logind[1634]: Watching system buttons on /dev/input/event0 (Power Button) Feb 12 20:22:38.927553 env[1658]: time="2024-02-12T20:22:38.927422440Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 12 20:22:38.948856 extend-filesystems[1697]: resize2fs 1.46.5 (30-Dec-2021) Feb 12 20:22:38.966722 systemd-logind[1634]: New seat seat0. Feb 12 20:22:39.114106 dbus-daemon[1623]: [system] SELinux support is enabled Feb 12 20:22:39.114702 systemd[1]: Started dbus.service. Feb 12 20:22:39.122790 dbus-daemon[1623]: [system] Successfully activated service 'org.freedesktop.systemd1' Feb 12 20:22:39.119542 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 12 20:22:39.119584 systemd[1]: Reached target system-config.target. Feb 12 20:22:39.121480 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 12 20:22:39.121515 systemd[1]: Reached target user-config.target. Feb 12 20:22:39.123383 systemd[1]: Started systemd-logind.service. Feb 12 20:22:39.139738 dbus-daemon[1623]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.4' (uid=244 pid=1454 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Feb 12 20:22:39.167262 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Feb 12 20:22:39.176061 systemd[1]: Starting systemd-hostnamed.service... Feb 12 20:22:39.234718 update_engine[1635]: I0212 20:22:39.233760 1635 main.cc:92] Flatcar Update Engine starting Feb 12 20:22:39.249359 amazon-ssm-agent[1671]: 2024/02/12 20:22:39 Failed to load instance info from vault. RegistrationKey does not exist. Feb 12 20:22:39.249359 amazon-ssm-agent[1671]: Initializing new seelog logger Feb 12 20:22:39.249359 amazon-ssm-agent[1671]: New Seelog Logger Creation Complete Feb 12 20:22:39.249359 amazon-ssm-agent[1671]: 2024/02/12 20:22:39 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Feb 12 20:22:39.249359 amazon-ssm-agent[1671]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Feb 12 20:22:39.249359 amazon-ssm-agent[1671]: 2024/02/12 20:22:39 processing appconfig overrides Feb 12 20:22:39.250003 bash[1694]: Updated "/home/core/.ssh/authorized_keys" Feb 12 20:22:39.250931 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 12 20:22:39.277214 systemd[1]: Started update-engine.service. Feb 12 20:22:39.282629 systemd[1]: Started locksmithd.service. Feb 12 20:22:39.286614 update_engine[1635]: I0212 20:22:39.286558 1635 update_check_scheduler.cc:74] Next update check in 2m1s Feb 12 20:22:39.299007 systemd[1]: nvidia.service: Deactivated successfully. Feb 12 20:22:39.357831 env[1658]: time="2024-02-12T20:22:39.357770637Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 12 20:22:39.358295 env[1658]: time="2024-02-12T20:22:39.358222875Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 12 20:22:39.373202 env[1658]: time="2024-02-12T20:22:39.373132787Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 12 20:22:39.375026 env[1658]: time="2024-02-12T20:22:39.374944608Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 12 20:22:39.377213 env[1658]: time="2024-02-12T20:22:39.377157656Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 12 20:22:39.377659 env[1658]: time="2024-02-12T20:22:39.377628014Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 12 20:22:39.378016 env[1658]: time="2024-02-12T20:22:39.377982366Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 12 20:22:39.378658 env[1658]: time="2024-02-12T20:22:39.378577935Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 12 20:22:39.380316 env[1658]: time="2024-02-12T20:22:39.380263752Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 12 20:22:39.431555 env[1658]: time="2024-02-12T20:22:39.426425484Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 12 20:22:39.431555 env[1658]: time="2024-02-12T20:22:39.426745829Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 12 20:22:39.431555 env[1658]: time="2024-02-12T20:22:39.426787562Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 12 20:22:39.431555 env[1658]: time="2024-02-12T20:22:39.426920379Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 12 20:22:39.431555 env[1658]: time="2024-02-12T20:22:39.426948269Z" level=info msg="metadata content store policy set" policy=shared Feb 12 20:22:39.458341 tar[1638]: ./bandwidth Feb 12 20:22:39.504921 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Feb 12 20:22:39.473521 systemd[1]: Started systemd-hostnamed.service. Feb 12 20:22:39.473188 dbus-daemon[1623]: [system] Successfully activated service 'org.freedesktop.hostname1' Feb 12 20:22:39.483092 systemd[1]: Starting polkit.service... Feb 12 20:22:39.478065 dbus-daemon[1623]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1709 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Feb 12 20:22:39.511696 extend-filesystems[1697]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Feb 12 20:22:39.511696 extend-filesystems[1697]: old_desc_blocks = 1, new_desc_blocks = 1 Feb 12 20:22:39.511696 extend-filesystems[1697]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Feb 12 20:22:39.538311 extend-filesystems[1626]: Resized filesystem in /dev/nvme0n1p9 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.529379377Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.529447462Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.529478981Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.529591346Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.529713817Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.529795685Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.529829247Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.530350807Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.530398368Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.530464710Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.530496469Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.530529731Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.530760638Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 12 20:22:39.555592 env[1658]: time="2024-02-12T20:22:39.530973737Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 12 20:22:39.514759 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.531615653Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.531688232Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.531723824Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.531837079Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.531869163Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.531997162Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.532027707Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.532064694Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.532097090Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.532126566Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.532159203Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.532193894Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.532495097Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.532531002Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.566315 env[1658]: time="2024-02-12T20:22:39.532560611Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.515088 systemd[1]: Finished extend-filesystems.service. Feb 12 20:22:39.579018 env[1658]: time="2024-02-12T20:22:39.532589702Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 12 20:22:39.579018 env[1658]: time="2024-02-12T20:22:39.532628035Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 12 20:22:39.579018 env[1658]: time="2024-02-12T20:22:39.532655492Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 12 20:22:39.579018 env[1658]: time="2024-02-12T20:22:39.532690400Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 12 20:22:39.579018 env[1658]: time="2024-02-12T20:22:39.532753005Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 12 20:22:39.576925 polkitd[1740]: Started polkitd version 121 Feb 12 20:22:39.560095 systemd[1]: Started containerd.service. Feb 12 20:22:39.590288 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.533072689Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.533171572Z" level=info msg="Connect containerd service" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.533224445Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.534579438Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.537360513Z" level=info msg="Start subscribing containerd event" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.537449795Z" level=info msg="Start recovering state" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.537569358Z" level=info msg="Start event monitor" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.537607546Z" level=info msg="Start snapshots syncer" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.537680113Z" level=info msg="Start cni network conf syncer for default" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.537700938Z" level=info msg="Start streaming server" Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.559714814Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.559844255Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 12 20:22:39.599997 env[1658]: time="2024-02-12T20:22:39.559967194Z" level=info msg="containerd successfully booted in 0.633809s" Feb 12 20:22:39.591819 systemd[1]: Finished systemd-machine-id-commit.service. Feb 12 20:22:39.680649 polkitd[1740]: Loading rules from directory /etc/polkit-1/rules.d Feb 12 20:22:39.681424 polkitd[1740]: Loading rules from directory /usr/share/polkit-1/rules.d Feb 12 20:22:39.693793 polkitd[1740]: Finished loading, compiling and executing 2 rules Feb 12 20:22:39.695176 dbus-daemon[1623]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Feb 12 20:22:39.695471 systemd[1]: Started polkit.service. Feb 12 20:22:39.705003 polkitd[1740]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Feb 12 20:22:39.787380 systemd-resolved[1596]: System hostname changed to 'ip-172-31-21-82'. Feb 12 20:22:39.787382 systemd-hostnamed[1709]: Hostname set to (transient) Feb 12 20:22:39.788942 coreos-metadata[1622]: Feb 12 20:22:39.788 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Feb 12 20:22:39.796271 coreos-metadata[1622]: Feb 12 20:22:39.791 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Feb 12 20:22:39.796744 coreos-metadata[1622]: Feb 12 20:22:39.796 INFO Fetch successful Feb 12 20:22:39.798517 coreos-metadata[1622]: Feb 12 20:22:39.796 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Feb 12 20:22:39.799298 coreos-metadata[1622]: Feb 12 20:22:39.799 INFO Fetch successful Feb 12 20:22:39.808226 unknown[1622]: wrote ssh authorized keys file for user: core Feb 12 20:22:39.834702 update-ssh-keys[1788]: Updated "/home/core/.ssh/authorized_keys" Feb 12 20:22:39.836606 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Feb 12 20:22:39.899628 tar[1638]: ./ptp Feb 12 20:22:40.185464 tar[1638]: ./vlan Feb 12 20:22:40.214249 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Create new startup processor Feb 12 20:22:40.217423 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [LongRunningPluginsManager] registered plugins: {} Feb 12 20:22:40.217959 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Initializing bookkeeping folders Feb 12 20:22:40.218206 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO removing the completed state files Feb 12 20:22:40.218664 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Initializing bookkeeping folders for long running plugins Feb 12 20:22:40.219170 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Initializing replies folder for MDS reply requests that couldn't reach the service Feb 12 20:22:40.219592 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Initializing healthcheck folders for long running plugins Feb 12 20:22:40.220186 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Initializing locations for inventory plugin Feb 12 20:22:40.220376 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Initializing default location for custom inventory Feb 12 20:22:40.220532 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Initializing default location for file inventory Feb 12 20:22:40.220831 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Initializing default location for role inventory Feb 12 20:22:40.221098 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Init the cloudwatchlogs publisher Feb 12 20:22:40.221305 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform independent plugin aws:updateSsmAgent Feb 12 20:22:40.221466 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform independent plugin aws:configureDocker Feb 12 20:22:40.221608 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform independent plugin aws:downloadContent Feb 12 20:22:40.221763 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform independent plugin aws:runDocument Feb 12 20:22:40.221903 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform independent plugin aws:runPowerShellScript Feb 12 20:22:40.222028 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform independent plugin aws:runDockerAction Feb 12 20:22:40.222169 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform independent plugin aws:refreshAssociation Feb 12 20:22:40.222321 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform independent plugin aws:configurePackage Feb 12 20:22:40.222446 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform independent plugin aws:softwareInventory Feb 12 20:22:40.225182 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Successfully loaded platform dependent plugin aws:runShellScript Feb 12 20:22:40.225407 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO Starting Agent: amazon-ssm-agent - v2.3.1319.0 Feb 12 20:22:40.225527 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO OS: linux, Arch: arm64 Feb 12 20:22:40.235456 amazon-ssm-agent[1671]: datastore file /var/lib/amazon/ssm/i-077d0f774956915c6/longrunningplugins/datastore/store doesn't exist - no long running plugins to execute Feb 12 20:22:40.326352 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] Starting document processing engine... Feb 12 20:22:40.379350 tar[1638]: ./host-device Feb 12 20:22:40.421936 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] [EngineProcessor] Starting Feb 12 20:22:40.495463 tar[1638]: ./tuning Feb 12 20:22:40.516291 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] [EngineProcessor] Initial processing Feb 12 20:22:40.605063 tar[1638]: ./vrf Feb 12 20:22:40.610979 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] Starting message polling Feb 12 20:22:40.705715 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] Starting send replies to MDS Feb 12 20:22:40.720074 tar[1638]: ./sbr Feb 12 20:22:40.800707 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [instanceID=i-077d0f774956915c6] Starting association polling Feb 12 20:22:40.822478 tar[1638]: ./tap Feb 12 20:22:40.895832 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Starting Feb 12 20:22:40.949431 tar[1638]: ./dhcp Feb 12 20:22:40.991153 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] [Association] Launching response handler Feb 12 20:22:41.059135 systemd[1]: Finished prepare-critools.service. Feb 12 20:22:41.070948 tar[1640]: linux-arm64/LICENSE Feb 12 20:22:41.071515 tar[1640]: linux-arm64/README.md Feb 12 20:22:41.080812 systemd[1]: Finished prepare-helm.service. Feb 12 20:22:41.086688 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] [Association] [EngineProcessor] Initial processing Feb 12 20:22:41.182408 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] [Association] Initializing association scheduling service Feb 12 20:22:41.185371 tar[1638]: ./static Feb 12 20:22:41.231891 tar[1638]: ./firewall Feb 12 20:22:41.278353 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessagingDeliveryService] [Association] Association scheduling service initialized Feb 12 20:22:41.302392 tar[1638]: ./macvlan Feb 12 20:22:41.367046 tar[1638]: ./dummy Feb 12 20:22:41.374438 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessageGatewayService] Starting session document processing engine... Feb 12 20:22:41.431331 tar[1638]: ./bridge Feb 12 20:22:41.470753 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessageGatewayService] [EngineProcessor] Starting Feb 12 20:22:41.500978 tar[1638]: ./ipvlan Feb 12 20:22:41.563543 tar[1638]: ./portmap Feb 12 20:22:41.567304 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessageGatewayService] SSM Agent is trying to setup control channel for Session Manager module. Feb 12 20:22:41.623788 tar[1638]: ./host-local Feb 12 20:22:41.664093 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessageGatewayService] Setting up websocket for controlchannel for instance: i-077d0f774956915c6, requestId: b7bae82c-3547-4902-9fde-e01774f0af49 Feb 12 20:22:41.697221 systemd[1]: Finished prepare-cni-plugins.service. Feb 12 20:22:41.753103 locksmithd[1720]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 12 20:22:41.760985 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [OfflineService] Starting document processing engine... Feb 12 20:22:41.858057 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [OfflineService] [EngineProcessor] Starting Feb 12 20:22:41.955301 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [OfflineService] [EngineProcessor] Initial processing Feb 12 20:22:42.052752 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [OfflineService] Starting message polling Feb 12 20:22:42.150433 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [OfflineService] Starting send replies to MDS Feb 12 20:22:42.248467 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [LongRunningPluginsManager] starting long running plugin manager Feb 12 20:22:42.346642 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [LongRunningPluginsManager] there aren't any long running plugin to execute Feb 12 20:22:42.444911 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [HealthCheck] HealthCheck reporting agent health. Feb 12 20:22:42.543467 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessageGatewayService] listening reply. Feb 12 20:22:42.642020 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [LongRunningPluginsManager] There are no long running plugins currently getting executed - skipping their healthcheck Feb 12 20:22:42.740961 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [StartupProcessor] Executing startup processor tasks Feb 12 20:22:42.840187 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [StartupProcessor] Write to serial port: Amazon SSM Agent v2.3.1319.0 is running Feb 12 20:22:42.939361 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [StartupProcessor] Write to serial port: OsProductName: Flatcar Container Linux by Kinvolk Feb 12 20:22:43.038837 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [StartupProcessor] Write to serial port: OsVersion: 3510.3.2 Feb 12 20:22:43.138745 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessageGatewayService] Opening websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-077d0f774956915c6?role=subscribe&stream=input Feb 12 20:22:43.238909 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessageGatewayService] Successfully opened websocket connection to: wss://ssmmessages.us-west-2.amazonaws.com/v1/control-channel/i-077d0f774956915c6?role=subscribe&stream=input Feb 12 20:22:43.339082 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessageGatewayService] Starting receiving message from control channel Feb 12 20:22:43.439458 amazon-ssm-agent[1671]: 2024-02-12 20:22:40 INFO [MessageGatewayService] [EngineProcessor] Initial processing Feb 12 20:22:44.290501 sshd_keygen[1649]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 12 20:22:44.328600 systemd[1]: Finished sshd-keygen.service. Feb 12 20:22:44.333203 systemd[1]: Starting issuegen.service... Feb 12 20:22:44.343013 systemd[1]: issuegen.service: Deactivated successfully. Feb 12 20:22:44.343393 systemd[1]: Finished issuegen.service. Feb 12 20:22:44.347945 systemd[1]: Starting systemd-user-sessions.service... Feb 12 20:22:44.361667 systemd[1]: Finished systemd-user-sessions.service. Feb 12 20:22:44.366223 systemd[1]: Started getty@tty1.service. Feb 12 20:22:44.370747 systemd[1]: Started serial-getty@ttyS0.service. Feb 12 20:22:44.373195 systemd[1]: Reached target getty.target. Feb 12 20:22:44.374995 systemd[1]: Reached target multi-user.target. Feb 12 20:22:44.379348 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 12 20:22:44.394428 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 12 20:22:44.394802 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 12 20:22:44.397055 systemd[1]: Startup finished in 1.138s (kernel) + 11.403s (initrd) + 13.401s (userspace) = 25.943s. Feb 12 20:22:47.432983 systemd[1]: Created slice system-sshd.slice. Feb 12 20:22:47.436188 systemd[1]: Started sshd@0-172.31.21.82:22-147.75.109.163:32962.service. Feb 12 20:22:47.617402 sshd[1848]: Accepted publickey for core from 147.75.109.163 port 32962 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:22:47.621823 sshd[1848]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:22:47.638335 systemd[1]: Created slice user-500.slice. Feb 12 20:22:47.642078 systemd[1]: Starting user-runtime-dir@500.service... Feb 12 20:22:47.650626 systemd-logind[1634]: New session 1 of user core. Feb 12 20:22:47.661164 systemd[1]: Finished user-runtime-dir@500.service. Feb 12 20:22:47.664547 systemd[1]: Starting user@500.service... Feb 12 20:22:47.671802 (systemd)[1851]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:22:47.846600 systemd[1851]: Queued start job for default target default.target. Feb 12 20:22:47.847665 systemd[1851]: Reached target paths.target. Feb 12 20:22:47.847718 systemd[1851]: Reached target sockets.target. Feb 12 20:22:47.847750 systemd[1851]: Reached target timers.target. Feb 12 20:22:47.847779 systemd[1851]: Reached target basic.target. Feb 12 20:22:47.847872 systemd[1851]: Reached target default.target. Feb 12 20:22:47.847938 systemd[1851]: Startup finished in 163ms. Feb 12 20:22:47.848513 systemd[1]: Started user@500.service. Feb 12 20:22:47.850496 systemd[1]: Started session-1.scope. Feb 12 20:22:47.998670 systemd[1]: Started sshd@1-172.31.21.82:22-147.75.109.163:32966.service. Feb 12 20:22:48.169795 sshd[1860]: Accepted publickey for core from 147.75.109.163 port 32966 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:22:48.172221 sshd[1860]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:22:48.181535 systemd[1]: Started session-2.scope. Feb 12 20:22:48.182446 systemd-logind[1634]: New session 2 of user core. Feb 12 20:22:48.313446 sshd[1860]: pam_unix(sshd:session): session closed for user core Feb 12 20:22:48.318127 systemd-logind[1634]: Session 2 logged out. Waiting for processes to exit. Feb 12 20:22:48.318547 systemd[1]: sshd@1-172.31.21.82:22-147.75.109.163:32966.service: Deactivated successfully. Feb 12 20:22:48.319881 systemd[1]: session-2.scope: Deactivated successfully. Feb 12 20:22:48.321396 systemd-logind[1634]: Removed session 2. Feb 12 20:22:48.341427 systemd[1]: Started sshd@2-172.31.21.82:22-147.75.109.163:32976.service. Feb 12 20:22:48.512094 sshd[1866]: Accepted publickey for core from 147.75.109.163 port 32976 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:22:48.515042 sshd[1866]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:22:48.523177 systemd[1]: Started session-3.scope. Feb 12 20:22:48.524037 systemd-logind[1634]: New session 3 of user core. Feb 12 20:22:48.646645 sshd[1866]: pam_unix(sshd:session): session closed for user core Feb 12 20:22:48.651396 systemd[1]: sshd@2-172.31.21.82:22-147.75.109.163:32976.service: Deactivated successfully. Feb 12 20:22:48.652600 systemd[1]: session-3.scope: Deactivated successfully. Feb 12 20:22:48.653759 systemd-logind[1634]: Session 3 logged out. Waiting for processes to exit. Feb 12 20:22:48.655652 systemd-logind[1634]: Removed session 3. Feb 12 20:22:48.673746 systemd[1]: Started sshd@3-172.31.21.82:22-147.75.109.163:32992.service. Feb 12 20:22:48.842845 sshd[1872]: Accepted publickey for core from 147.75.109.163 port 32992 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:22:48.845877 sshd[1872]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:22:48.854111 systemd[1]: Started session-4.scope. Feb 12 20:22:48.856800 systemd-logind[1634]: New session 4 of user core. Feb 12 20:22:48.986158 sshd[1872]: pam_unix(sshd:session): session closed for user core Feb 12 20:22:48.990807 systemd-logind[1634]: Session 4 logged out. Waiting for processes to exit. Feb 12 20:22:48.991988 systemd[1]: sshd@3-172.31.21.82:22-147.75.109.163:32992.service: Deactivated successfully. Feb 12 20:22:48.993183 systemd[1]: session-4.scope: Deactivated successfully. Feb 12 20:22:48.994688 systemd-logind[1634]: Removed session 4. Feb 12 20:22:49.013489 systemd[1]: Started sshd@4-172.31.21.82:22-147.75.109.163:33004.service. Feb 12 20:22:49.181505 sshd[1878]: Accepted publickey for core from 147.75.109.163 port 33004 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:22:49.183927 sshd[1878]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:22:49.191906 systemd-logind[1634]: New session 5 of user core. Feb 12 20:22:49.192823 systemd[1]: Started session-5.scope. Feb 12 20:22:49.307835 sudo[1881]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 12 20:22:49.308849 sudo[1881]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 20:22:49.323912 dbus-daemon[1623]: avc: received setenforce notice (enforcing=1) Feb 12 20:22:49.324403 sudo[1881]: pam_unix(sudo:session): session closed for user root Feb 12 20:22:49.348349 sshd[1878]: pam_unix(sshd:session): session closed for user core Feb 12 20:22:49.354342 systemd[1]: sshd@4-172.31.21.82:22-147.75.109.163:33004.service: Deactivated successfully. Feb 12 20:22:49.354708 systemd-logind[1634]: Session 5 logged out. Waiting for processes to exit. Feb 12 20:22:49.355760 systemd[1]: session-5.scope: Deactivated successfully. Feb 12 20:22:49.357747 systemd-logind[1634]: Removed session 5. Feb 12 20:22:49.378367 systemd[1]: Started sshd@5-172.31.21.82:22-147.75.109.163:33010.service. Feb 12 20:22:49.554481 sshd[1885]: Accepted publickey for core from 147.75.109.163 port 33010 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:22:49.557606 sshd[1885]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:22:49.566462 systemd[1]: Started session-6.scope. Feb 12 20:22:49.567375 systemd-logind[1634]: New session 6 of user core. Feb 12 20:22:49.676637 sudo[1889]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 12 20:22:49.677736 sudo[1889]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 20:22:49.683514 sudo[1889]: pam_unix(sudo:session): session closed for user root Feb 12 20:22:49.692539 sudo[1888]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 12 20:22:49.693039 sudo[1888]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 20:22:49.709682 systemd[1]: Stopping audit-rules.service... Feb 12 20:22:49.710000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 12 20:22:49.713769 kernel: kauditd_printk_skb: 72 callbacks suppressed Feb 12 20:22:49.713864 kernel: audit: type=1305 audit(1707769369.710:166): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 12 20:22:49.714220 auditctl[1892]: No rules Feb 12 20:22:49.719505 systemd[1]: audit-rules.service: Deactivated successfully. Feb 12 20:22:49.710000 audit[1892]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe3b216d0 a2=420 a3=0 items=0 ppid=1 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:49.731297 kernel: audit: type=1300 audit(1707769369.710:166): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe3b216d0 a2=420 a3=0 items=0 ppid=1 pid=1892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:49.719865 systemd[1]: Stopped audit-rules.service. Feb 12 20:22:49.729791 systemd[1]: Starting audit-rules.service... Feb 12 20:22:49.710000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 12 20:22:49.736103 kernel: audit: type=1327 audit(1707769369.710:166): proctitle=2F7362696E2F617564697463746C002D44 Feb 12 20:22:49.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.747206 kernel: audit: type=1131 audit(1707769369.718:167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.764375 augenrules[1909]: No rules Feb 12 20:22:49.765882 systemd[1]: Finished audit-rules.service. Feb 12 20:22:49.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.767864 sudo[1888]: pam_unix(sudo:session): session closed for user root Feb 12 20:22:49.765000 audit[1888]: USER_END pid=1888 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.784424 kernel: audit: type=1130 audit(1707769369.765:168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.784491 kernel: audit: type=1106 audit(1707769369.765:169): pid=1888 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.784535 kernel: audit: type=1104 audit(1707769369.765:170): pid=1888 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.765000 audit[1888]: CRED_DISP pid=1888 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.797895 sshd[1885]: pam_unix(sshd:session): session closed for user core Feb 12 20:22:49.798000 audit[1885]: USER_END pid=1885 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:22:49.801929 systemd[1]: session-6.scope: Deactivated successfully. Feb 12 20:22:49.803016 systemd[1]: sshd@5-172.31.21.82:22-147.75.109.163:33010.service: Deactivated successfully. Feb 12 20:22:49.806156 systemd-logind[1634]: Session 6 logged out. Waiting for processes to exit. Feb 12 20:22:49.807971 systemd-logind[1634]: Removed session 6. Feb 12 20:22:49.798000 audit[1885]: CRED_DISP pid=1885 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:22:49.821212 kernel: audit: type=1106 audit(1707769369.798:171): pid=1885 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:22:49.821349 kernel: audit: type=1104 audit(1707769369.798:172): pid=1885 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:22:49.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.21.82:22-147.75.109.163:33010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.832272 kernel: audit: type=1131 audit(1707769369.798:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.21.82:22-147.75.109.163:33010 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.828541 systemd[1]: Started sshd@6-172.31.21.82:22-147.75.109.163:33016.service. Feb 12 20:22:49.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.82:22-147.75.109.163:33016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:49.999000 audit[1915]: USER_ACCT pid=1915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:22:50.000954 sshd[1915]: Accepted publickey for core from 147.75.109.163 port 33016 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:22:50.001000 audit[1915]: CRED_ACQ pid=1915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:22:50.001000 audit[1915]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5f6bac0 a2=3 a3=1 items=0 ppid=1 pid=1915 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:50.001000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:22:50.003874 sshd[1915]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:22:50.011687 systemd-logind[1634]: New session 7 of user core. Feb 12 20:22:50.012563 systemd[1]: Started session-7.scope. Feb 12 20:22:50.020000 audit[1915]: USER_START pid=1915 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:22:50.023000 audit[1917]: CRED_ACQ pid=1917 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:22:50.118000 audit[1918]: USER_ACCT pid=1918 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:22:50.119385 sudo[1918]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 12 20:22:50.120000 audit[1918]: CRED_REFR pid=1918 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:22:50.120893 sudo[1918]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 12 20:22:50.123000 audit[1918]: USER_START pid=1918 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:22:50.815583 systemd[1]: Starting docker.service... Feb 12 20:22:50.890170 env[1933]: time="2024-02-12T20:22:50.890077631Z" level=info msg="Starting up" Feb 12 20:22:50.893151 env[1933]: time="2024-02-12T20:22:50.893101874Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 12 20:22:50.893977 env[1933]: time="2024-02-12T20:22:50.893942342Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 12 20:22:50.894128 env[1933]: time="2024-02-12T20:22:50.894095974Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 12 20:22:50.894292 env[1933]: time="2024-02-12T20:22:50.894263078Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 12 20:22:50.897127 env[1933]: time="2024-02-12T20:22:50.897057582Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 12 20:22:50.897127 env[1933]: time="2024-02-12T20:22:50.897104041Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 12 20:22:50.897342 env[1933]: time="2024-02-12T20:22:50.897139970Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 12 20:22:50.897342 env[1933]: time="2024-02-12T20:22:50.897162497Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 12 20:22:50.906250 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport776490853-merged.mount: Deactivated successfully. Feb 12 20:22:50.948499 env[1933]: time="2024-02-12T20:22:50.948438657Z" level=info msg="Loading containers: start." Feb 12 20:22:51.024000 audit[1963]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.024000 audit[1963]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe619a9c0 a2=0 a3=1 items=0 ppid=1933 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.024000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 12 20:22:51.028000 audit[1965]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1965 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.028000 audit[1965]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffcc81ac70 a2=0 a3=1 items=0 ppid=1933 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.028000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 12 20:22:51.032000 audit[1967]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1967 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.032000 audit[1967]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe66f8c90 a2=0 a3=1 items=0 ppid=1933 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.032000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 12 20:22:51.036000 audit[1969]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1969 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.036000 audit[1969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffe533e90 a2=0 a3=1 items=0 ppid=1933 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.036000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 12 20:22:51.041000 audit[1971]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1971 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.041000 audit[1971]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe9ec37b0 a2=0 a3=1 items=0 ppid=1933 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.041000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 12 20:22:51.063000 audit[1976]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1976 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.063000 audit[1976]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe8c03d80 a2=0 a3=1 items=0 ppid=1933 pid=1976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.063000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 12 20:22:51.079000 audit[1978]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.079000 audit[1978]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffcaac5ce0 a2=0 a3=1 items=0 ppid=1933 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.079000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 12 20:22:51.084000 audit[1980]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.084000 audit[1980]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffcfbc22b0 a2=0 a3=1 items=0 ppid=1933 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.084000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 12 20:22:51.088000 audit[1982]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.088000 audit[1982]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffe6f2e540 a2=0 a3=1 items=0 ppid=1933 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.088000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:22:51.102000 audit[1986]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.102000 audit[1986]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffe8665070 a2=0 a3=1 items=0 ppid=1933 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.102000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:22:51.104000 audit[1987]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1987 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.104000 audit[1987]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff78ebd80 a2=0 a3=1 items=0 ppid=1933 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.104000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:22:51.116270 kernel: Initializing XFRM netlink socket Feb 12 20:22:51.157676 env[1933]: time="2024-02-12T20:22:51.157624039Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 12 20:22:51.160625 (udev-worker)[1942]: Network interface NamePolicy= disabled on kernel command line. Feb 12 20:22:51.186000 audit[1995]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.186000 audit[1995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd2bf4c50 a2=0 a3=1 items=0 ppid=1933 pid=1995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.186000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 12 20:22:51.200000 audit[1998]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1998 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.200000 audit[1998]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff4a35d80 a2=0 a3=1 items=0 ppid=1933 pid=1998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.200000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 12 20:22:51.206000 audit[2001]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=2001 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.206000 audit[2001]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe1344560 a2=0 a3=1 items=0 ppid=1933 pid=2001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.206000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 12 20:22:51.210000 audit[2003]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=2003 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.210000 audit[2003]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe9ad1f00 a2=0 a3=1 items=0 ppid=1933 pid=2003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.210000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 12 20:22:51.214000 audit[2005]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=2005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.214000 audit[2005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd8978b90 a2=0 a3=1 items=0 ppid=1933 pid=2005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.214000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 12 20:22:51.219000 audit[2007]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=2007 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.219000 audit[2007]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffdbd431d0 a2=0 a3=1 items=0 ppid=1933 pid=2007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.219000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 12 20:22:51.223000 audit[2009]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=2009 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.223000 audit[2009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd93cc1c0 a2=0 a3=1 items=0 ppid=1933 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.223000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 12 20:22:51.237000 audit[2012]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=2012 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.237000 audit[2012]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc485f690 a2=0 a3=1 items=0 ppid=1933 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.237000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 12 20:22:51.243000 audit[2014]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=2014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.243000 audit[2014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffff9b0be0 a2=0 a3=1 items=0 ppid=1933 pid=2014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.243000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 12 20:22:51.248000 audit[2016]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=2016 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.248000 audit[2016]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe8b9bfb0 a2=0 a3=1 items=0 ppid=1933 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.248000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 12 20:22:51.252000 audit[2018]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.252000 audit[2018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd2573e10 a2=0 a3=1 items=0 ppid=1933 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.252000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 12 20:22:51.254583 systemd-networkd[1454]: docker0: Link UP Feb 12 20:22:51.267000 audit[2022]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2022 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.267000 audit[2022]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd3e3e8b0 a2=0 a3=1 items=0 ppid=1933 pid=2022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.267000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:22:51.269000 audit[2023]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:22:51.269000 audit[2023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff40081d0 a2=0 a3=1 items=0 ppid=1933 pid=2023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:22:51.269000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 12 20:22:51.271983 env[1933]: time="2024-02-12T20:22:51.271921380Z" level=info msg="Loading containers: done." Feb 12 20:22:51.300104 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3945925634-merged.mount: Deactivated successfully. Feb 12 20:22:51.321183 env[1933]: time="2024-02-12T20:22:51.321108102Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 12 20:22:51.321631 env[1933]: time="2024-02-12T20:22:51.321560547Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 12 20:22:51.321899 env[1933]: time="2024-02-12T20:22:51.321832098Z" level=info msg="Daemon has completed initialization" Feb 12 20:22:51.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:51.348512 systemd[1]: Started docker.service. Feb 12 20:22:51.362122 env[1933]: time="2024-02-12T20:22:51.362012225Z" level=info msg="API listen on /run/docker.sock" Feb 12 20:22:51.397811 systemd[1]: Reloading. Feb 12 20:22:51.550596 /usr/lib/systemd/system-generators/torcx-generator[2077]: time="2024-02-12T20:22:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 20:22:51.550662 /usr/lib/systemd/system-generators/torcx-generator[2077]: time="2024-02-12T20:22:51Z" level=info msg="torcx already run" Feb 12 20:22:51.680824 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 20:22:51.680866 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 20:22:51.724253 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit: BPF prog-id=37 op=LOAD Feb 12 20:22:51.878000 audit: BPF prog-id=18 op=UNLOAD Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit: BPF prog-id=38 op=LOAD Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.879000 audit: BPF prog-id=39 op=LOAD Feb 12 20:22:51.879000 audit: BPF prog-id=19 op=UNLOAD Feb 12 20:22:51.879000 audit: BPF prog-id=20 op=UNLOAD Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit: BPF prog-id=40 op=LOAD Feb 12 20:22:51.882000 audit: BPF prog-id=24 op=UNLOAD Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit: BPF prog-id=41 op=LOAD Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.883000 audit: BPF prog-id=42 op=LOAD Feb 12 20:22:51.883000 audit: BPF prog-id=25 op=UNLOAD Feb 12 20:22:51.883000 audit: BPF prog-id=26 op=UNLOAD Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.885000 audit: BPF prog-id=43 op=LOAD Feb 12 20:22:51.886000 audit: BPF prog-id=28 op=UNLOAD Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit: BPF prog-id=44 op=LOAD Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.887000 audit: BPF prog-id=45 op=LOAD Feb 12 20:22:51.887000 audit: BPF prog-id=21 op=UNLOAD Feb 12 20:22:51.887000 audit: BPF prog-id=22 op=UNLOAD Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.890000 audit: BPF prog-id=46 op=LOAD Feb 12 20:22:51.890000 audit: BPF prog-id=29 op=UNLOAD Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit: BPF prog-id=47 op=LOAD Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.891000 audit: BPF prog-id=48 op=LOAD Feb 12 20:22:51.891000 audit: BPF prog-id=30 op=UNLOAD Feb 12 20:22:51.891000 audit: BPF prog-id=31 op=UNLOAD Feb 12 20:22:51.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.894000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.894000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit: BPF prog-id=49 op=LOAD Feb 12 20:22:51.895000 audit: BPF prog-id=32 op=UNLOAD Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit: BPF prog-id=50 op=LOAD Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.895000 audit: BPF prog-id=51 op=LOAD Feb 12 20:22:51.895000 audit: BPF prog-id=33 op=UNLOAD Feb 12 20:22:51.895000 audit: BPF prog-id=34 op=UNLOAD Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.896000 audit: BPF prog-id=52 op=LOAD Feb 12 20:22:51.896000 audit: BPF prog-id=35 op=UNLOAD Feb 12 20:22:51.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.898000 audit: BPF prog-id=53 op=LOAD Feb 12 20:22:51.898000 audit: BPF prog-id=27 op=UNLOAD Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:22:51.900000 audit: BPF prog-id=54 op=LOAD Feb 12 20:22:51.900000 audit: BPF prog-id=23 op=UNLOAD Feb 12 20:22:51.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:22:51.919595 systemd[1]: Started kubelet.service. Feb 12 20:22:52.062443 kubelet[2126]: E0212 20:22:52.057181 2126 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 12 20:22:52.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 20:22:52.064347 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 12 20:22:52.064686 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 12 20:22:52.491080 env[1658]: time="2024-02-12T20:22:52.491018828Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.6\"" Feb 12 20:22:53.113969 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2204744308.mount: Deactivated successfully. Feb 12 20:22:56.008516 env[1658]: time="2024-02-12T20:22:56.008454442Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:22:56.011120 env[1658]: time="2024-02-12T20:22:56.011073532Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:68142d88471bf00b1317307442bd31edbbc7532061d623e85659df2d417308fb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:22:56.014224 env[1658]: time="2024-02-12T20:22:56.014160307Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:22:56.017599 env[1658]: time="2024-02-12T20:22:56.017536727Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:98a686df810b9f1de8e3b2ae869e79c51a36e7434d33c53f011852618aec0a68,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:22:56.019361 env[1658]: time="2024-02-12T20:22:56.019313429Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.6\" returns image reference \"sha256:68142d88471bf00b1317307442bd31edbbc7532061d623e85659df2d417308fb\"" Feb 12 20:22:56.037018 env[1658]: time="2024-02-12T20:22:56.036950888Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.6\"" Feb 12 20:22:59.163562 env[1658]: time="2024-02-12T20:22:59.163492688Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:22:59.166606 env[1658]: time="2024-02-12T20:22:59.166541846Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8dbd4fd1241644100b94eb40a9d284c5cf08fa7f2d15cafdf1ca8cec8443b31f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:22:59.170038 env[1658]: time="2024-02-12T20:22:59.169973792Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:22:59.173269 env[1658]: time="2024-02-12T20:22:59.173186415Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:80bdcd72cfe26028bb2fed75732fc2f511c35fa8d1edc03deae11f3490713c9e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:22:59.175001 env[1658]: time="2024-02-12T20:22:59.174913060Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.6\" returns image reference \"sha256:8dbd4fd1241644100b94eb40a9d284c5cf08fa7f2d15cafdf1ca8cec8443b31f\"" Feb 12 20:22:59.192750 env[1658]: time="2024-02-12T20:22:59.192700756Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.6\"" Feb 12 20:23:01.187017 env[1658]: time="2024-02-12T20:23:01.186960746Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:01.192466 env[1658]: time="2024-02-12T20:23:01.192391627Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:541cddf10a6c9bb71f141eeefea4203714984b67ec3582fb4538058af9e43663,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:01.195726 env[1658]: time="2024-02-12T20:23:01.195639036Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:01.207136 env[1658]: time="2024-02-12T20:23:01.207074421Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:a89db556c34d652d403d909882dbd97336f2e935b1c726b2e2b2c0400186ac39,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:01.207993 env[1658]: time="2024-02-12T20:23:01.207930964Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.6\" returns image reference \"sha256:541cddf10a6c9bb71f141eeefea4203714984b67ec3582fb4538058af9e43663\"" Feb 12 20:23:01.225009 env[1658]: time="2024-02-12T20:23:01.224932419Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.6\"" Feb 12 20:23:02.137297 kernel: kauditd_printk_skb: 292 callbacks suppressed Feb 12 20:23:02.137438 kernel: audit: type=1130 audit(1707769382.132:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:02.132000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:02.133492 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 12 20:23:02.133823 systemd[1]: Stopped kubelet.service. Feb 12 20:23:02.136644 systemd[1]: Started kubelet.service. Feb 12 20:23:02.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:02.154812 kernel: audit: type=1131 audit(1707769382.132:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:02.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:02.164412 kernel: audit: type=1130 audit(1707769382.135:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:02.258971 kubelet[2160]: E0212 20:23:02.258910 2160 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 12 20:23:02.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 20:23:02.266629 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 12 20:23:02.266950 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 12 20:23:02.276280 kernel: audit: type=1131 audit(1707769382.266:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 20:23:02.557755 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2521503860.mount: Deactivated successfully. Feb 12 20:23:03.410172 env[1658]: time="2024-02-12T20:23:03.410091037Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:03.446104 env[1658]: time="2024-02-12T20:23:03.446027778Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2d8b4f784b5f439fa536676861ad1144130a981e5ac011d08829ed921477ec74,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:03.467485 env[1658]: time="2024-02-12T20:23:03.467393248Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:03.493056 env[1658]: time="2024-02-12T20:23:03.492980872Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:3898a1671ae42be1cd3c2e777549bc7b5b306b8da3a224b747365f6679fb902a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:03.494067 env[1658]: time="2024-02-12T20:23:03.494019798Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.6\" returns image reference \"sha256:2d8b4f784b5f439fa536676861ad1144130a981e5ac011d08829ed921477ec74\"" Feb 12 20:23:03.511520 env[1658]: time="2024-02-12T20:23:03.511451930Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 12 20:23:03.986531 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount511228483.mount: Deactivated successfully. Feb 12 20:23:03.994844 env[1658]: time="2024-02-12T20:23:03.994787626Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:03.997826 env[1658]: time="2024-02-12T20:23:03.997779470Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:04.000548 env[1658]: time="2024-02-12T20:23:04.000497587Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:04.003390 env[1658]: time="2024-02-12T20:23:04.003320181Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:04.004650 env[1658]: time="2024-02-12T20:23:04.004600209Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Feb 12 20:23:04.020435 env[1658]: time="2024-02-12T20:23:04.020385658Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Feb 12 20:23:04.625051 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3425081489.mount: Deactivated successfully. Feb 12 20:23:08.655159 amazon-ssm-agent[1671]: 2024-02-12 20:23:08 INFO [MessagingDeliveryService] [Association] No associations on boot. Requerying for associations after 30 seconds. Feb 12 20:23:09.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:09.820643 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Feb 12 20:23:09.835652 kernel: audit: type=1131 audit(1707769389.819:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:09.850000 audit: BPF prog-id=51 op=UNLOAD Feb 12 20:23:09.856709 kernel: audit: type=1334 audit(1707769389.850:421): prog-id=51 op=UNLOAD Feb 12 20:23:09.856830 kernel: audit: type=1334 audit(1707769389.850:422): prog-id=50 op=UNLOAD Feb 12 20:23:09.850000 audit: BPF prog-id=50 op=UNLOAD Feb 12 20:23:09.850000 audit: BPF prog-id=49 op=UNLOAD Feb 12 20:23:09.859772 kernel: audit: type=1334 audit(1707769389.850:423): prog-id=49 op=UNLOAD Feb 12 20:23:10.169033 env[1658]: time="2024-02-12T20:23:10.168971598Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:10.172072 env[1658]: time="2024-02-12T20:23:10.172022730Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:10.175668 env[1658]: time="2024-02-12T20:23:10.175618223Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:10.179191 env[1658]: time="2024-02-12T20:23:10.179123386Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:10.181134 env[1658]: time="2024-02-12T20:23:10.181084321Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Feb 12 20:23:10.199030 env[1658]: time="2024-02-12T20:23:10.198961372Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Feb 12 20:23:10.698720 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3002099322.mount: Deactivated successfully. Feb 12 20:23:11.559648 env[1658]: time="2024-02-12T20:23:11.559589988Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:11.562123 env[1658]: time="2024-02-12T20:23:11.562073495Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:11.564886 env[1658]: time="2024-02-12T20:23:11.564839518Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:11.567654 env[1658]: time="2024-02-12T20:23:11.567602084Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:11.568690 env[1658]: time="2024-02-12T20:23:11.568623173Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Feb 12 20:23:12.383501 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Feb 12 20:23:12.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:12.383830 systemd[1]: Stopped kubelet.service. Feb 12 20:23:12.399722 systemd[1]: Started kubelet.service. Feb 12 20:23:12.410288 kernel: audit: type=1130 audit(1707769392.383:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:12.410435 kernel: audit: type=1131 audit(1707769392.383:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:12.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:12.399000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:12.423257 kernel: audit: type=1130 audit(1707769392.399:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:12.516282 kubelet[2244]: E0212 20:23:12.516178 2244 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 12 20:23:12.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 20:23:12.521013 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 12 20:23:12.521380 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 12 20:23:12.531463 kernel: audit: type=1131 audit(1707769392.521:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 12 20:23:20.898829 systemd[1]: Stopped kubelet.service. Feb 12 20:23:20.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:20.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:20.915336 kernel: audit: type=1130 audit(1707769400.899:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:20.915460 kernel: audit: type=1131 audit(1707769400.902:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:20.941328 systemd[1]: Reloading. Feb 12 20:23:21.093087 /usr/lib/systemd/system-generators/torcx-generator[2276]: time="2024-02-12T20:23:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 20:23:21.110356 /usr/lib/systemd/system-generators/torcx-generator[2276]: time="2024-02-12T20:23:21Z" level=info msg="torcx already run" Feb 12 20:23:21.216108 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 20:23:21.217087 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 20:23:21.260460 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 20:23:21.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425572 kernel: audit: type=1400 audit(1707769401.410:430): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425727 kernel: audit: type=1400 audit(1707769401.418:431): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.433296 kernel: audit: type=1400 audit(1707769401.418:432): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440888 kernel: audit: type=1400 audit(1707769401.418:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448487 kernel: audit: type=1400 audit(1707769401.418:434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.456119 kernel: audit: type=1400 audit(1707769401.418:435): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.456275 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 12 20:23:21.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.465487 kernel: audit: type=1400 audit(1707769401.418:436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit: BPF prog-id=55 op=LOAD Feb 12 20:23:21.425000 audit: BPF prog-id=37 op=UNLOAD Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit: BPF prog-id=56 op=LOAD Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.425000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.433000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.433000 audit: BPF prog-id=57 op=LOAD Feb 12 20:23:21.433000 audit: BPF prog-id=38 op=UNLOAD Feb 12 20:23:21.433000 audit: BPF prog-id=39 op=UNLOAD Feb 12 20:23:21.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.436000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.436000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440000 audit: BPF prog-id=58 op=LOAD Feb 12 20:23:21.440000 audit: BPF prog-id=40 op=UNLOAD Feb 12 20:23:21.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.440000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit: BPF prog-id=59 op=LOAD Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.448000 audit: BPF prog-id=60 op=LOAD Feb 12 20:23:21.448000 audit: BPF prog-id=41 op=UNLOAD Feb 12 20:23:21.448000 audit: BPF prog-id=42 op=UNLOAD Feb 12 20:23:21.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.450000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.458000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit: BPF prog-id=62 op=LOAD Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.468000 audit: BPF prog-id=63 op=LOAD Feb 12 20:23:21.468000 audit: BPF prog-id=44 op=UNLOAD Feb 12 20:23:21.468000 audit: BPF prog-id=45 op=UNLOAD Feb 12 20:23:21.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit: BPF prog-id=64 op=LOAD Feb 12 20:23:21.472000 audit: BPF prog-id=46 op=UNLOAD Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit: BPF prog-id=65 op=LOAD Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.472000 audit: BPF prog-id=66 op=LOAD Feb 12 20:23:21.472000 audit: BPF prog-id=47 op=UNLOAD Feb 12 20:23:21.472000 audit: BPF prog-id=48 op=UNLOAD Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.476000 audit: BPF prog-id=67 op=LOAD Feb 12 20:23:21.476000 audit: BPF prog-id=52 op=UNLOAD Feb 12 20:23:21.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.478000 audit: BPF prog-id=68 op=LOAD Feb 12 20:23:21.478000 audit: BPF prog-id=53 op=UNLOAD Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:21.480000 audit: BPF prog-id=69 op=LOAD Feb 12 20:23:21.480000 audit: BPF prog-id=54 op=UNLOAD Feb 12 20:23:21.508000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:21.508032 systemd[1]: Started kubelet.service. Feb 12 20:23:21.597122 kubelet[2329]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 20:23:21.597656 kubelet[2329]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 12 20:23:21.597754 kubelet[2329]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 20:23:21.598032 kubelet[2329]: I0212 20:23:21.597971 2329 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 12 20:23:22.600840 kubelet[2329]: I0212 20:23:22.600796 2329 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Feb 12 20:23:22.601460 kubelet[2329]: I0212 20:23:22.601435 2329 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 12 20:23:22.601895 kubelet[2329]: I0212 20:23:22.601871 2329 server.go:895] "Client rotation is on, will bootstrap in background" Feb 12 20:23:22.609981 kubelet[2329]: E0212 20:23:22.609919 2329 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.21.82:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:22.610183 kubelet[2329]: I0212 20:23:22.610031 2329 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 12 20:23:22.617982 kubelet[2329]: W0212 20:23:22.617943 2329 machine.go:65] Cannot read vendor id correctly, set empty. Feb 12 20:23:22.619161 kubelet[2329]: I0212 20:23:22.619127 2329 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 12 20:23:22.619748 kubelet[2329]: I0212 20:23:22.619710 2329 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 12 20:23:22.620061 kubelet[2329]: I0212 20:23:22.620013 2329 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Feb 12 20:23:22.620364 kubelet[2329]: I0212 20:23:22.620079 2329 topology_manager.go:138] "Creating topology manager with none policy" Feb 12 20:23:22.620364 kubelet[2329]: I0212 20:23:22.620104 2329 container_manager_linux.go:301] "Creating device plugin manager" Feb 12 20:23:22.620364 kubelet[2329]: I0212 20:23:22.620342 2329 state_mem.go:36] "Initialized new in-memory state store" Feb 12 20:23:22.620614 kubelet[2329]: I0212 20:23:22.620579 2329 kubelet.go:393] "Attempting to sync node with API server" Feb 12 20:23:22.620704 kubelet[2329]: I0212 20:23:22.620621 2329 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 12 20:23:22.620704 kubelet[2329]: I0212 20:23:22.620655 2329 kubelet.go:309] "Adding apiserver pod source" Feb 12 20:23:22.620704 kubelet[2329]: I0212 20:23:22.620687 2329 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 12 20:23:22.622082 kubelet[2329]: I0212 20:23:22.622048 2329 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 12 20:23:22.624831 kubelet[2329]: W0212 20:23:22.624773 2329 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 12 20:23:22.625815 kubelet[2329]: I0212 20:23:22.625766 2329 server.go:1232] "Started kubelet" Feb 12 20:23:22.626049 kubelet[2329]: W0212 20:23:22.625970 2329 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.21.82:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-82&limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:22.626136 kubelet[2329]: E0212 20:23:22.626068 2329 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.21.82:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-82&limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:22.626280 kubelet[2329]: W0212 20:23:22.626191 2329 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.21.82:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:22.626280 kubelet[2329]: E0212 20:23:22.626277 2329 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.21.82:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:22.627000 audit[2329]: AVC avc: denied { mac_admin } for pid=2329 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:22.627000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:23:22.627000 audit[2329]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b8f3b0 a1=4000b92a80 a2=4000b8f380 a3=25 items=0 ppid=1 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.627000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:23:22.628000 audit[2329]: AVC avc: denied { mac_admin } for pid=2329 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:22.628000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:23:22.628000 audit[2329]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008b3780 a1=4000b92a98 a2=4000b8f440 a3=25 items=0 ppid=1 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.628000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:23:22.629982 kubelet[2329]: I0212 20:23:22.629210 2329 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 12 20:23:22.629982 kubelet[2329]: I0212 20:23:22.629314 2329 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 12 20:23:22.629982 kubelet[2329]: I0212 20:23:22.629436 2329 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 12 20:23:22.633456 kubelet[2329]: E0212 20:23:22.633422 2329 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 12 20:23:22.633694 kubelet[2329]: E0212 20:23:22.633667 2329 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 12 20:23:22.634552 kubelet[2329]: E0212 20:23:22.634374 2329 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-21-82.17b3373939c9b1b8", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-21-82", UID:"ip-172-31-21-82", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-21-82"}, FirstTimestamp:time.Date(2024, time.February, 12, 20, 23, 22, 625733048, time.Local), LastTimestamp:time.Date(2024, time.February, 12, 20, 23, 22, 625733048, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-21-82"}': 'Post "https://172.31.21.82:6443/api/v1/namespaces/default/events": dial tcp 172.31.21.82:6443: connect: connection refused'(may retry after sleeping) Feb 12 20:23:22.633000 audit[2339]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:22.633000 audit[2339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffda7736f0 a2=0 a3=1 items=0 ppid=2329 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.633000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 12 20:23:22.636000 audit[2340]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:22.636000 audit[2340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe141ae60 a2=0 a3=1 items=0 ppid=2329 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.636000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 12 20:23:22.639689 kubelet[2329]: I0212 20:23:22.639637 2329 volume_manager.go:291] "Starting Kubelet Volume Manager" Feb 12 20:23:22.640903 kubelet[2329]: I0212 20:23:22.640866 2329 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 12 20:23:22.640000 audit[2342]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:22.640000 audit[2342]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd93a0250 a2=0 a3=1 items=0 ppid=2329 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.640000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 20:23:22.642669 kubelet[2329]: I0212 20:23:22.642634 2329 server.go:462] "Adding debug handlers to kubelet server" Feb 12 20:23:22.644411 kubelet[2329]: I0212 20:23:22.644359 2329 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 12 20:23:22.644581 kubelet[2329]: I0212 20:23:22.644476 2329 reconciler_new.go:29] "Reconciler: start to sync state" Feb 12 20:23:22.644947 kubelet[2329]: I0212 20:23:22.644921 2329 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 12 20:23:22.645443 kubelet[2329]: I0212 20:23:22.645416 2329 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Feb 12 20:23:22.644000 audit[2344]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:22.644000 audit[2344]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd1e42a00 a2=0 a3=1 items=0 ppid=2329 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.644000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 20:23:22.649390 kubelet[2329]: W0212 20:23:22.649289 2329 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.21.82:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:22.649563 kubelet[2329]: E0212 20:23:22.649400 2329 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.21.82:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:22.652169 kubelet[2329]: E0212 20:23:22.652096 2329 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.82:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-82?timeout=10s\": dial tcp 172.31.21.82:6443: connect: connection refused" interval="200ms" Feb 12 20:23:22.673000 audit[2351]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:22.673000 audit[2351]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffea1f4fc0 a2=0 a3=1 items=0 ppid=2329 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.673000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 12 20:23:22.675517 kubelet[2329]: I0212 20:23:22.675459 2329 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Feb 12 20:23:22.676000 audit[2352]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:22.676000 audit[2352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe891fe70 a2=0 a3=1 items=0 ppid=2329 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.676000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 12 20:23:22.678000 audit[2353]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:22.678000 audit[2353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffe19d260 a2=0 a3=1 items=0 ppid=2329 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.678000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 12 20:23:22.681000 audit[2354]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:22.683173 kubelet[2329]: I0212 20:23:22.683051 2329 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Feb 12 20:23:22.683173 kubelet[2329]: I0212 20:23:22.683097 2329 status_manager.go:217] "Starting to sync pod status with apiserver" Feb 12 20:23:22.683173 kubelet[2329]: I0212 20:23:22.683126 2329 kubelet.go:2303] "Starting kubelet main sync loop" Feb 12 20:23:22.683450 kubelet[2329]: E0212 20:23:22.683215 2329 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 12 20:23:22.681000 audit[2354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd87be210 a2=0 a3=1 items=0 ppid=2329 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.681000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 12 20:23:22.690000 audit[2355]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:22.690000 audit[2355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc93a7fd0 a2=0 a3=1 items=0 ppid=2329 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.690000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 12 20:23:22.692147 kubelet[2329]: W0212 20:23:22.692083 2329 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.21.82:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:22.692688 kubelet[2329]: E0212 20:23:22.692197 2329 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.21.82:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:22.693000 audit[2356]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:22.693000 audit[2356]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffca0c1f70 a2=0 a3=1 items=0 ppid=2329 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.693000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 12 20:23:22.696000 audit[2358]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:22.696000 audit[2358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe5573a40 a2=0 a3=1 items=0 ppid=2329 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.696000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 12 20:23:22.699000 audit[2359]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:22.699000 audit[2359]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffd208e20 a2=0 a3=1 items=0 ppid=2329 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.699000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 12 20:23:22.724249 kubelet[2329]: I0212 20:23:22.724189 2329 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 12 20:23:22.724397 kubelet[2329]: I0212 20:23:22.724293 2329 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 12 20:23:22.724397 kubelet[2329]: I0212 20:23:22.724328 2329 state_mem.go:36] "Initialized new in-memory state store" Feb 12 20:23:22.727077 kubelet[2329]: I0212 20:23:22.727028 2329 policy_none.go:49] "None policy: Start" Feb 12 20:23:22.728336 kubelet[2329]: I0212 20:23:22.728297 2329 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 12 20:23:22.728481 kubelet[2329]: I0212 20:23:22.728373 2329 state_mem.go:35] "Initializing new in-memory state store" Feb 12 20:23:22.737248 systemd[1]: Created slice kubepods.slice. Feb 12 20:23:22.744290 kubelet[2329]: I0212 20:23:22.743001 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-82" Feb 12 20:23:22.744864 kubelet[2329]: E0212 20:23:22.744835 2329 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.21.82:6443/api/v1/nodes\": dial tcp 172.31.21.82:6443: connect: connection refused" node="ip-172-31-21-82" Feb 12 20:23:22.748958 systemd[1]: Created slice kubepods-besteffort.slice. Feb 12 20:23:22.759783 systemd[1]: Created slice kubepods-burstable.slice. Feb 12 20:23:22.762089 kubelet[2329]: I0212 20:23:22.762056 2329 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 12 20:23:22.762000 audit[2329]: AVC avc: denied { mac_admin } for pid=2329 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:22.762000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:23:22.762000 audit[2329]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000af6d20 a1=4000b0d368 a2=4000af6cf0 a3=25 items=0 ppid=1 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:22.762000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:23:22.765511 kubelet[2329]: I0212 20:23:22.765472 2329 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 12 20:23:22.766021 kubelet[2329]: I0212 20:23:22.765994 2329 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 12 20:23:22.767609 kubelet[2329]: E0212 20:23:22.767206 2329 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-21-82\" not found" Feb 12 20:23:22.784194 kubelet[2329]: I0212 20:23:22.784130 2329 topology_manager.go:215] "Topology Admit Handler" podUID="9e342a65e003f98b56fe3f08185b105d" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-21-82" Feb 12 20:23:22.786669 kubelet[2329]: I0212 20:23:22.786628 2329 topology_manager.go:215] "Topology Admit Handler" podUID="a3f131dcca6648e20adfdc5b3b532de7" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-21-82" Feb 12 20:23:22.789321 kubelet[2329]: I0212 20:23:22.789285 2329 topology_manager.go:215] "Topology Admit Handler" podUID="194e59f21a736e33ab244f4b12817c01" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:22.801382 systemd[1]: Created slice kubepods-burstable-pod9e342a65e003f98b56fe3f08185b105d.slice. Feb 12 20:23:22.818132 systemd[1]: Created slice kubepods-burstable-poda3f131dcca6648e20adfdc5b3b532de7.slice. Feb 12 20:23:22.828826 systemd[1]: Created slice kubepods-burstable-pod194e59f21a736e33ab244f4b12817c01.slice. Feb 12 20:23:22.852871 kubelet[2329]: E0212 20:23:22.852736 2329 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.82:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-82?timeout=10s\": dial tcp 172.31.21.82:6443: connect: connection refused" interval="400ms" Feb 12 20:23:22.945679 kubelet[2329]: I0212 20:23:22.945626 2329 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-ca-certs\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:22.945857 kubelet[2329]: I0212 20:23:22.945821 2329 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:22.945956 kubelet[2329]: I0212 20:23:22.945885 2329 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-k8s-certs\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:22.945956 kubelet[2329]: I0212 20:23:22.945938 2329 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:22.946071 kubelet[2329]: I0212 20:23:22.945981 2329 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a3f131dcca6648e20adfdc5b3b532de7-ca-certs\") pod \"kube-apiserver-ip-172-31-21-82\" (UID: \"a3f131dcca6648e20adfdc5b3b532de7\") " pod="kube-system/kube-apiserver-ip-172-31-21-82" Feb 12 20:23:22.946071 kubelet[2329]: I0212 20:23:22.946024 2329 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a3f131dcca6648e20adfdc5b3b532de7-k8s-certs\") pod \"kube-apiserver-ip-172-31-21-82\" (UID: \"a3f131dcca6648e20adfdc5b3b532de7\") " pod="kube-system/kube-apiserver-ip-172-31-21-82" Feb 12 20:23:22.946071 kubelet[2329]: I0212 20:23:22.946067 2329 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-kubeconfig\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:22.946301 kubelet[2329]: I0212 20:23:22.946113 2329 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9e342a65e003f98b56fe3f08185b105d-kubeconfig\") pod \"kube-scheduler-ip-172-31-21-82\" (UID: \"9e342a65e003f98b56fe3f08185b105d\") " pod="kube-system/kube-scheduler-ip-172-31-21-82" Feb 12 20:23:22.946301 kubelet[2329]: I0212 20:23:22.946171 2329 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a3f131dcca6648e20adfdc5b3b532de7-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-21-82\" (UID: \"a3f131dcca6648e20adfdc5b3b532de7\") " pod="kube-system/kube-apiserver-ip-172-31-21-82" Feb 12 20:23:22.948292 kubelet[2329]: I0212 20:23:22.948219 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-82" Feb 12 20:23:22.948944 kubelet[2329]: E0212 20:23:22.948914 2329 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.21.82:6443/api/v1/nodes\": dial tcp 172.31.21.82:6443: connect: connection refused" node="ip-172-31-21-82" Feb 12 20:23:23.115597 env[1658]: time="2024-02-12T20:23:23.115076981Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-21-82,Uid:9e342a65e003f98b56fe3f08185b105d,Namespace:kube-system,Attempt:0,}" Feb 12 20:23:23.125921 env[1658]: time="2024-02-12T20:23:23.125714210Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-21-82,Uid:a3f131dcca6648e20adfdc5b3b532de7,Namespace:kube-system,Attempt:0,}" Feb 12 20:23:23.135396 env[1658]: time="2024-02-12T20:23:23.135029534Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-21-82,Uid:194e59f21a736e33ab244f4b12817c01,Namespace:kube-system,Attempt:0,}" Feb 12 20:23:23.254377 kubelet[2329]: E0212 20:23:23.254326 2329 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.82:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-82?timeout=10s\": dial tcp 172.31.21.82:6443: connect: connection refused" interval="800ms" Feb 12 20:23:23.350896 kubelet[2329]: I0212 20:23:23.350852 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-82" Feb 12 20:23:23.351353 kubelet[2329]: E0212 20:23:23.351305 2329 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.21.82:6443/api/v1/nodes\": dial tcp 172.31.21.82:6443: connect: connection refused" node="ip-172-31-21-82" Feb 12 20:23:23.614764 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1525688392.mount: Deactivated successfully. Feb 12 20:23:23.622501 env[1658]: time="2024-02-12T20:23:23.622445956Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.628268 env[1658]: time="2024-02-12T20:23:23.628183638Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.630815 env[1658]: time="2024-02-12T20:23:23.630764912Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.633091 env[1658]: time="2024-02-12T20:23:23.633043162Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.635656 env[1658]: time="2024-02-12T20:23:23.635605811Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.637973 env[1658]: time="2024-02-12T20:23:23.637922800Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.639569 env[1658]: time="2024-02-12T20:23:23.639524424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.641183 env[1658]: time="2024-02-12T20:23:23.641128940Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.647049 env[1658]: time="2024-02-12T20:23:23.646997205Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.654987 env[1658]: time="2024-02-12T20:23:23.654932119Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.656587 env[1658]: time="2024-02-12T20:23:23.656545060Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.658201 env[1658]: time="2024-02-12T20:23:23.658151220Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:23.713468 env[1658]: time="2024-02-12T20:23:23.713350733Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:23:23.713655 env[1658]: time="2024-02-12T20:23:23.713424058Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:23:23.713655 env[1658]: time="2024-02-12T20:23:23.713452033Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:23:23.713841 env[1658]: time="2024-02-12T20:23:23.713764790Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ca1c69dbb905053167c834bbe16c099643c8245cfc1b36c45e3da7b1da3b1a36 pid=2368 runtime=io.containerd.runc.v2 Feb 12 20:23:23.727152 env[1658]: time="2024-02-12T20:23:23.727020280Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:23:23.727506 env[1658]: time="2024-02-12T20:23:23.727425769Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:23:23.727711 env[1658]: time="2024-02-12T20:23:23.727650031Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:23:23.728115 env[1658]: time="2024-02-12T20:23:23.728043938Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e6d3a15bc936a90b2d2bb7f62d8858ab6ba49c239183dd94ae66ce9f7249f8a3 pid=2390 runtime=io.containerd.runc.v2 Feb 12 20:23:23.730613 env[1658]: time="2024-02-12T20:23:23.730467892Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:23:23.730826 env[1658]: time="2024-02-12T20:23:23.730548874Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:23:23.730826 env[1658]: time="2024-02-12T20:23:23.730607403Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:23:23.731000 env[1658]: time="2024-02-12T20:23:23.730944090Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a1b1c48e005b4ea96f30083024f96caf3440a8e00074d2f6004302c36d3e43fc pid=2394 runtime=io.containerd.runc.v2 Feb 12 20:23:23.758024 systemd[1]: Started cri-containerd-ca1c69dbb905053167c834bbe16c099643c8245cfc1b36c45e3da7b1da3b1a36.scope. Feb 12 20:23:23.781603 systemd[1]: Started cri-containerd-a1b1c48e005b4ea96f30083024f96caf3440a8e00074d2f6004302c36d3e43fc.scope. Feb 12 20:23:23.804102 systemd[1]: Started cri-containerd-e6d3a15bc936a90b2d2bb7f62d8858ab6ba49c239183dd94ae66ce9f7249f8a3.scope. Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.821000 audit: BPF prog-id=70 op=LOAD Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2368 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361316336396462623930353035333136376338333462626531366330 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2368 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361316336396462623930353035333136376338333462626531366330 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit: BPF prog-id=71 op=LOAD Feb 12 20:23:23.822000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2368 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361316336396462623930353035333136376338333462626531366330 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.822000 audit: BPF prog-id=72 op=LOAD Feb 12 20:23:23.822000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2368 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361316336396462623930353035333136376338333462626531366330 Feb 12 20:23:23.823000 audit: BPF prog-id=72 op=UNLOAD Feb 12 20:23:23.823000 audit: BPF prog-id=71 op=UNLOAD Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { perfmon } for pid=2389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit[2389]: AVC avc: denied { bpf } for pid=2389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.823000 audit: BPF prog-id=73 op=LOAD Feb 12 20:23:23.823000 audit[2389]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2368 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361316336396462623930353035333136376338333462626531366330 Feb 12 20:23:23.838080 kubelet[2329]: W0212 20:23:23.838001 2329 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.21.82:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:23.838080 kubelet[2329]: E0212 20:23:23.838073 2329 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.21.82:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:23.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.849000 audit: BPF prog-id=74 op=LOAD Feb 12 20:23:23.850000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.850000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2390 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.850000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643361313562633933366139306232643262623766363264383835 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2390 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643361313562633933366139306232643262623766363264383835 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.851000 audit: BPF prog-id=75 op=LOAD Feb 12 20:23:23.851000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2390 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.851000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643361313562633933366139306232643262623766363264383835 Feb 12 20:23:23.853000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.853000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.853000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.853000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.853000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.853000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.853000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.853000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.853000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.853000 audit: BPF prog-id=76 op=LOAD Feb 12 20:23:23.853000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2390 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.853000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643361313562633933366139306232643262623766363264383835 Feb 12 20:23:23.855000 audit: BPF prog-id=76 op=UNLOAD Feb 12 20:23:23.855000 audit: BPF prog-id=75 op=UNLOAD Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.857000 audit: BPF prog-id=77 op=LOAD Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { perfmon } for pid=2416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.857000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.857000 audit[2428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2394 pid=2428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623163343865303035623465613936663330303833303234663936 Feb 12 20:23:23.857000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.857000 audit[2428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2394 pid=2428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623163343865303035623465613936663330303833303234663936 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit: BPF prog-id=78 op=LOAD Feb 12 20:23:23.858000 audit[2428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2394 pid=2428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623163343865303035623465613936663330303833303234663936 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit: BPF prog-id=79 op=LOAD Feb 12 20:23:23.858000 audit[2428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2394 pid=2428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623163343865303035623465613936663330303833303234663936 Feb 12 20:23:23.858000 audit: BPF prog-id=79 op=UNLOAD Feb 12 20:23:23.858000 audit: BPF prog-id=78 op=UNLOAD Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { perfmon } for pid=2428 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit[2428]: AVC avc: denied { bpf } for pid=2428 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.858000 audit: BPF prog-id=80 op=LOAD Feb 12 20:23:23.858000 audit[2428]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2394 pid=2428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131623163343865303035623465613936663330303833303234663936 Feb 12 20:23:23.856000 audit[2416]: AVC avc: denied { bpf } for pid=2416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:23.856000 audit: BPF prog-id=81 op=LOAD Feb 12 20:23:23.856000 audit[2416]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2390 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:23.856000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643361313562633933366139306232643262623766363264383835 Feb 12 20:23:23.906892 env[1658]: time="2024-02-12T20:23:23.906825589Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-21-82,Uid:9e342a65e003f98b56fe3f08185b105d,Namespace:kube-system,Attempt:0,} returns sandbox id \"ca1c69dbb905053167c834bbe16c099643c8245cfc1b36c45e3da7b1da3b1a36\"" Feb 12 20:23:23.922681 env[1658]: time="2024-02-12T20:23:23.922622775Z" level=info msg="CreateContainer within sandbox \"ca1c69dbb905053167c834bbe16c099643c8245cfc1b36c45e3da7b1da3b1a36\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 12 20:23:23.954044 env[1658]: time="2024-02-12T20:23:23.953986344Z" level=info msg="CreateContainer within sandbox \"ca1c69dbb905053167c834bbe16c099643c8245cfc1b36c45e3da7b1da3b1a36\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a\"" Feb 12 20:23:23.954471 env[1658]: time="2024-02-12T20:23:23.954116230Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-21-82,Uid:a3f131dcca6648e20adfdc5b3b532de7,Namespace:kube-system,Attempt:0,} returns sandbox id \"a1b1c48e005b4ea96f30083024f96caf3440a8e00074d2f6004302c36d3e43fc\"" Feb 12 20:23:23.956782 env[1658]: time="2024-02-12T20:23:23.956577459Z" level=info msg="StartContainer for \"664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a\"" Feb 12 20:23:23.965898 env[1658]: time="2024-02-12T20:23:23.965813385Z" level=info msg="CreateContainer within sandbox \"a1b1c48e005b4ea96f30083024f96caf3440a8e00074d2f6004302c36d3e43fc\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 12 20:23:23.973265 env[1658]: time="2024-02-12T20:23:23.973183677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-21-82,Uid:194e59f21a736e33ab244f4b12817c01,Namespace:kube-system,Attempt:0,} returns sandbox id \"e6d3a15bc936a90b2d2bb7f62d8858ab6ba49c239183dd94ae66ce9f7249f8a3\"" Feb 12 20:23:23.978143 kubelet[2329]: W0212 20:23:23.978060 2329 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.21.82:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-82&limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:23.978143 kubelet[2329]: E0212 20:23:23.978149 2329 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.21.82:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-21-82&limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:23.978603 env[1658]: time="2024-02-12T20:23:23.978533489Z" level=info msg="CreateContainer within sandbox \"e6d3a15bc936a90b2d2bb7f62d8858ab6ba49c239183dd94ae66ce9f7249f8a3\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 12 20:23:24.006454 env[1658]: time="2024-02-12T20:23:24.006375075Z" level=info msg="CreateContainer within sandbox \"a1b1c48e005b4ea96f30083024f96caf3440a8e00074d2f6004302c36d3e43fc\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d26e92dba892dda40c7b780d379f54d53ff445d2782ff6583a96be0e855af804\"" Feb 12 20:23:24.008200 env[1658]: time="2024-02-12T20:23:24.008143683Z" level=info msg="StartContainer for \"d26e92dba892dda40c7b780d379f54d53ff445d2782ff6583a96be0e855af804\"" Feb 12 20:23:24.014419 systemd[1]: Started cri-containerd-664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a.scope. Feb 12 20:23:24.027601 env[1658]: time="2024-02-12T20:23:24.027526442Z" level=info msg="CreateContainer within sandbox \"e6d3a15bc936a90b2d2bb7f62d8858ab6ba49c239183dd94ae66ce9f7249f8a3\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5\"" Feb 12 20:23:24.029329 env[1658]: time="2024-02-12T20:23:24.029208380Z" level=info msg="StartContainer for \"fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5\"" Feb 12 20:23:24.055461 kubelet[2329]: E0212 20:23:24.055390 2329 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.21.82:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-82?timeout=10s\": dial tcp 172.31.21.82:6443: connect: connection refused" interval="1.6s" Feb 12 20:23:24.071980 systemd[1]: Started cri-containerd-d26e92dba892dda40c7b780d379f54d53ff445d2782ff6583a96be0e855af804.scope. Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.084000 audit: BPF prog-id=82 op=LOAD Feb 12 20:23:24.086000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.086000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2368 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.086000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636346332346436303631333330393865356162323933393061366534 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2368 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636346332346436303631333330393865356162323933393061366534 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.087000 audit: BPF prog-id=83 op=LOAD Feb 12 20:23:24.087000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2368 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.087000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636346332346436303631333330393865356162323933393061366534 Feb 12 20:23:24.089000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.089000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.089000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.089000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.089000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.089000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.089000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.089000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.089000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.089000 audit: BPF prog-id=84 op=LOAD Feb 12 20:23:24.089000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2368 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636346332346436303631333330393865356162323933393061366534 Feb 12 20:23:24.093000 audit: BPF prog-id=84 op=UNLOAD Feb 12 20:23:24.093000 audit: BPF prog-id=83 op=UNLOAD Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { perfmon } for pid=2494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit[2494]: AVC avc: denied { bpf } for pid=2494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.093000 audit: BPF prog-id=85 op=LOAD Feb 12 20:23:24.093000 audit[2494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2368 pid=2494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.093000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636346332346436303631333330393865356162323933393061366534 Feb 12 20:23:24.105510 systemd[1]: Started cri-containerd-fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5.scope. Feb 12 20:23:24.112196 kubelet[2329]: W0212 20:23:24.111993 2329 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.21.82:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:24.112196 kubelet[2329]: E0212 20:23:24.112127 2329 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.21.82:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:24.143386 kubelet[2329]: W0212 20:23:24.143213 2329 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.21.82:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:24.143386 kubelet[2329]: E0212 20:23:24.143318 2329 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.21.82:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.21.82:6443: connect: connection refused Feb 12 20:23:24.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.144000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.145000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.145000 audit: BPF prog-id=86 op=LOAD Feb 12 20:23:24.146000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.146000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2394 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432366539326462613839326464613430633762373830643337396635 Feb 12 20:23:24.146000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.146000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2394 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432366539326462613839326464613430633762373830643337396635 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit: BPF prog-id=87 op=LOAD Feb 12 20:23:24.147000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2394 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432366539326462613839326464613430633762373830643337396635 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.147000 audit: BPF prog-id=88 op=LOAD Feb 12 20:23:24.147000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2394 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432366539326462613839326464613430633762373830643337396635 Feb 12 20:23:24.147000 audit: BPF prog-id=88 op=UNLOAD Feb 12 20:23:24.150000 audit: BPF prog-id=87 op=UNLOAD Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.150000 audit: BPF prog-id=89 op=LOAD Feb 12 20:23:24.150000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2394 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432366539326462613839326464613430633762373830643337396635 Feb 12 20:23:24.159712 kubelet[2329]: I0212 20:23:24.155960 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-82" Feb 12 20:23:24.160071 kubelet[2329]: E0212 20:23:24.156668 2329 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.21.82:6443/api/v1/nodes\": dial tcp 172.31.21.82:6443: connect: connection refused" node="ip-172-31-21-82" Feb 12 20:23:24.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.183000 audit: BPF prog-id=90 op=LOAD Feb 12 20:23:24.186000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.186000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2390 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662643963373065366532663533323530353866363466666539306462 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2390 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662643963373065366532663533323530353866363466666539306462 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit: BPF prog-id=91 op=LOAD Feb 12 20:23:24.188000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2390 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662643963373065366532663533323530353866363466666539306462 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.192296 env[1658]: time="2024-02-12T20:23:24.191109179Z" level=info msg="StartContainer for \"664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a\" returns successfully" Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.188000 audit: BPF prog-id=92 op=LOAD Feb 12 20:23:24.188000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2390 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.188000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662643963373065366532663533323530353866363466666539306462 Feb 12 20:23:24.197000 audit: BPF prog-id=92 op=UNLOAD Feb 12 20:23:24.197000 audit: BPF prog-id=91 op=UNLOAD Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { perfmon } for pid=2526 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit[2526]: AVC avc: denied { bpf } for pid=2526 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:24.197000 audit: BPF prog-id=93 op=LOAD Feb 12 20:23:24.197000 audit[2526]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2390 pid=2526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:24.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662643963373065366532663533323530353866363466666539306462 Feb 12 20:23:24.251695 env[1658]: time="2024-02-12T20:23:24.251610870Z" level=info msg="StartContainer for \"d26e92dba892dda40c7b780d379f54d53ff445d2782ff6583a96be0e855af804\" returns successfully" Feb 12 20:23:24.290838 env[1658]: time="2024-02-12T20:23:24.290774002Z" level=info msg="StartContainer for \"fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5\" returns successfully" Feb 12 20:23:24.453703 update_engine[1635]: I0212 20:23:24.453558 1635 update_attempter.cc:509] Updating boot flags... Feb 12 20:23:25.762211 kubelet[2329]: I0212 20:23:25.762175 2329 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-82" Feb 12 20:23:27.682975 kernel: kauditd_printk_skb: 571 callbacks suppressed Feb 12 20:23:27.683138 kernel: audit: type=1400 audit(1707769407.669:718): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:27.669000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:27.669000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40009c6180 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:27.669000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:27.714666 kernel: audit: type=1300 audit(1707769407.669:718): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40009c6180 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:27.714732 kernel: audit: type=1327 audit(1707769407.669:718): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:27.670000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:27.729888 kernel: audit: type=1400 audit(1707769407.670:719): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:27.670000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000a62020 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:27.746859 kernel: audit: type=1300 audit(1707769407.670:719): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000a62020 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:27.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:27.764751 kernel: audit: type=1327 audit(1707769407.670:719): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:28.341000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:28.341000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:28.363177 kernel: audit: type=1400 audit(1707769408.341:720): avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:28.363300 kernel: audit: type=1400 audit(1707769408.341:721): avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:28.341000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4006c96510 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:23:28.384682 kernel: audit: type=1300 audit(1707769408.341:721): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4006c96510 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:23:28.341000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:23:28.400767 kernel: audit: type=1327 audit(1707769408.341:721): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:23:28.351000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:28.351000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=4c a1=4006c978f0 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:23:28.351000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:23:28.341000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40069a8060 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:23:28.341000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:23:28.362000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:28.362000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400566c0a0 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:23:28.362000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:23:28.516000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:28.516000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4003beb480 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:23:28.516000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:23:28.516000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:28.516000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=40069a9980 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:23:28.516000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:23:28.624411 kubelet[2329]: I0212 20:23:28.624280 2329 apiserver.go:52] "Watching apiserver" Feb 12 20:23:28.724373 kubelet[2329]: E0212 20:23:28.724334 2329 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-21-82\" not found" node="ip-172-31-21-82" Feb 12 20:23:28.745025 kubelet[2329]: I0212 20:23:28.744971 2329 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 12 20:23:28.748293 kubelet[2329]: I0212 20:23:28.748223 2329 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-21-82" Feb 12 20:23:28.880396 kubelet[2329]: E0212 20:23:28.880257 2329 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-21-82\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:31.676155 systemd[1]: Reloading. Feb 12 20:23:31.834790 /usr/lib/systemd/system-generators/torcx-generator[2717]: time="2024-02-12T20:23:31Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 12 20:23:31.834852 /usr/lib/systemd/system-generators/torcx-generator[2717]: time="2024-02-12T20:23:31Z" level=info msg="torcx already run" Feb 12 20:23:32.012450 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 12 20:23:32.012490 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 12 20:23:32.058175 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 12 20:23:32.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.252000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.252000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.252000 audit: BPF prog-id=94 op=LOAD Feb 12 20:23:32.253000 audit: BPF prog-id=70 op=UNLOAD Feb 12 20:23:32.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.254000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.255000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.255000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.255000 audit: BPF prog-id=95 op=LOAD Feb 12 20:23:32.255000 audit: BPF prog-id=55 op=UNLOAD Feb 12 20:23:32.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.256000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.256000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.257000 audit: BPF prog-id=96 op=LOAD Feb 12 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.258000 audit: BPF prog-id=97 op=LOAD Feb 12 20:23:32.258000 audit: BPF prog-id=56 op=UNLOAD Feb 12 20:23:32.258000 audit: BPF prog-id=57 op=UNLOAD Feb 12 20:23:32.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.262000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.264000 audit: BPF prog-id=98 op=LOAD Feb 12 20:23:32.264000 audit: BPF prog-id=58 op=UNLOAD Feb 12 20:23:32.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.265000 audit: BPF prog-id=99 op=LOAD Feb 12 20:23:32.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.266000 audit: BPF prog-id=100 op=LOAD Feb 12 20:23:32.267000 audit: BPF prog-id=59 op=UNLOAD Feb 12 20:23:32.267000 audit: BPF prog-id=60 op=UNLOAD Feb 12 20:23:32.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.269000 audit: BPF prog-id=101 op=LOAD Feb 12 20:23:32.269000 audit: BPF prog-id=90 op=UNLOAD Feb 12 20:23:32.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.273000 audit: BPF prog-id=102 op=LOAD Feb 12 20:23:32.273000 audit: BPF prog-id=61 op=UNLOAD Feb 12 20:23:32.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.276000 audit: BPF prog-id=103 op=LOAD Feb 12 20:23:32.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.277000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.277000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.277000 audit: BPF prog-id=104 op=LOAD Feb 12 20:23:32.277000 audit: BPF prog-id=62 op=UNLOAD Feb 12 20:23:32.277000 audit: BPF prog-id=63 op=UNLOAD Feb 12 20:23:32.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.280000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.280000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.282000 audit: BPF prog-id=105 op=LOAD Feb 12 20:23:32.282000 audit: BPF prog-id=64 op=UNLOAD Feb 12 20:23:32.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.283000 audit: BPF prog-id=106 op=LOAD Feb 12 20:23:32.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.285000 audit: BPF prog-id=107 op=LOAD Feb 12 20:23:32.285000 audit: BPF prog-id=65 op=UNLOAD Feb 12 20:23:32.285000 audit: BPF prog-id=66 op=UNLOAD Feb 12 20:23:32.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.292000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.292000 audit: BPF prog-id=108 op=LOAD Feb 12 20:23:32.292000 audit: BPF prog-id=86 op=UNLOAD Feb 12 20:23:32.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.294000 audit: BPF prog-id=109 op=LOAD Feb 12 20:23:32.294000 audit: BPF prog-id=67 op=UNLOAD Feb 12 20:23:32.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.297000 audit: BPF prog-id=110 op=LOAD Feb 12 20:23:32.298000 audit: BPF prog-id=74 op=UNLOAD Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.303000 audit: BPF prog-id=111 op=LOAD Feb 12 20:23:32.303000 audit: BPF prog-id=68 op=UNLOAD Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.305000 audit: BPF prog-id=112 op=LOAD Feb 12 20:23:32.305000 audit: BPF prog-id=77 op=UNLOAD Feb 12 20:23:32.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.307000 audit: BPF prog-id=113 op=LOAD Feb 12 20:23:32.307000 audit: BPF prog-id=69 op=UNLOAD Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.309000 audit: BPF prog-id=114 op=LOAD Feb 12 20:23:32.309000 audit: BPF prog-id=82 op=UNLOAD Feb 12 20:23:32.356148 systemd[1]: Stopping kubelet.service... Feb 12 20:23:32.378462 systemd[1]: kubelet.service: Deactivated successfully. Feb 12 20:23:32.378875 systemd[1]: Stopped kubelet.service. Feb 12 20:23:32.378972 systemd[1]: kubelet.service: Consumed 1.679s CPU time. Feb 12 20:23:32.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:32.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:32.385134 systemd[1]: Started kubelet.service. Feb 12 20:23:32.537350 kubelet[2770]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 20:23:32.537350 kubelet[2770]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 12 20:23:32.537350 kubelet[2770]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 12 20:23:32.546349 kubelet[2770]: I0212 20:23:32.545726 2770 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 12 20:23:32.566298 kubelet[2770]: I0212 20:23:32.564499 2770 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Feb 12 20:23:32.566298 kubelet[2770]: I0212 20:23:32.564814 2770 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 12 20:23:32.566298 kubelet[2770]: I0212 20:23:32.565330 2770 server.go:895] "Client rotation is on, will bootstrap in background" Feb 12 20:23:32.568455 kubelet[2770]: I0212 20:23:32.568398 2770 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 12 20:23:32.572088 kubelet[2770]: I0212 20:23:32.572047 2770 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 12 20:23:32.581950 kubelet[2770]: W0212 20:23:32.581886 2770 machine.go:65] Cannot read vendor id correctly, set empty. Feb 12 20:23:32.583459 kubelet[2770]: I0212 20:23:32.583268 2770 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 12 20:23:32.583841 kubelet[2770]: I0212 20:23:32.583800 2770 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 12 20:23:32.584168 kubelet[2770]: I0212 20:23:32.584125 2770 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Feb 12 20:23:32.584421 kubelet[2770]: I0212 20:23:32.584174 2770 topology_manager.go:138] "Creating topology manager with none policy" Feb 12 20:23:32.584421 kubelet[2770]: I0212 20:23:32.584195 2770 container_manager_linux.go:301] "Creating device plugin manager" Feb 12 20:23:32.584421 kubelet[2770]: I0212 20:23:32.584342 2770 state_mem.go:36] "Initialized new in-memory state store" Feb 12 20:23:32.584589 kubelet[2770]: I0212 20:23:32.584514 2770 kubelet.go:393] "Attempting to sync node with API server" Feb 12 20:23:32.584589 kubelet[2770]: I0212 20:23:32.584546 2770 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 12 20:23:32.584589 kubelet[2770]: I0212 20:23:32.584580 2770 kubelet.go:309] "Adding apiserver pod source" Feb 12 20:23:32.584785 kubelet[2770]: I0212 20:23:32.584611 2770 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 12 20:23:32.590219 kubelet[2770]: I0212 20:23:32.590026 2770 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 12 20:23:32.595170 kubelet[2770]: I0212 20:23:32.594793 2770 server.go:1232] "Started kubelet" Feb 12 20:23:32.600000 audit[2770]: AVC avc: denied { mac_admin } for pid=2770 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.600000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:23:32.600000 audit[2770]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b91980 a1=4000bb8b28 a2=4000b91950 a3=25 items=0 ppid=1 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:32.600000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:23:32.602435 kubelet[2770]: I0212 20:23:32.601958 2770 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 12 20:23:32.602435 kubelet[2770]: I0212 20:23:32.602033 2770 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 12 20:23:32.602435 kubelet[2770]: I0212 20:23:32.602078 2770 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 12 20:23:32.600000 audit[2770]: AVC avc: denied { mac_admin } for pid=2770 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.600000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:23:32.600000 audit[2770]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b86ee0 a1=4000bb8b40 a2=4000b91a10 a3=25 items=0 ppid=1 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:32.600000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:23:32.609286 kubelet[2770]: E0212 20:23:32.607570 2770 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 12 20:23:32.609286 kubelet[2770]: E0212 20:23:32.607624 2770 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 12 20:23:32.609286 kubelet[2770]: I0212 20:23:32.609005 2770 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 12 20:23:32.615795 kubelet[2770]: I0212 20:23:32.615727 2770 server.go:462] "Adding debug handlers to kubelet server" Feb 12 20:23:32.623223 kubelet[2770]: I0212 20:23:32.623154 2770 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 12 20:23:32.623572 kubelet[2770]: I0212 20:23:32.623536 2770 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Feb 12 20:23:32.658501 kubelet[2770]: I0212 20:23:32.658441 2770 volume_manager.go:291] "Starting Kubelet Volume Manager" Feb 12 20:23:32.681301 kubelet[2770]: I0212 20:23:32.681260 2770 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 12 20:23:32.681927 kubelet[2770]: I0212 20:23:32.681906 2770 reconciler_new.go:29] "Reconciler: start to sync state" Feb 12 20:23:32.726266 kubelet[2770]: I0212 20:23:32.725451 2770 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Feb 12 20:23:32.751530 kubelet[2770]: I0212 20:23:32.751481 2770 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Feb 12 20:23:32.751817 kubelet[2770]: I0212 20:23:32.751760 2770 status_manager.go:217] "Starting to sync pod status with apiserver" Feb 12 20:23:32.752015 kubelet[2770]: I0212 20:23:32.751991 2770 kubelet.go:2303] "Starting kubelet main sync loop" Feb 12 20:23:32.753385 kubelet[2770]: E0212 20:23:32.753339 2770 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 12 20:23:32.802590 kubelet[2770]: I0212 20:23:32.802444 2770 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-21-82" Feb 12 20:23:32.846384 kubelet[2770]: I0212 20:23:32.846327 2770 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-21-82" Feb 12 20:23:32.846553 kubelet[2770]: I0212 20:23:32.846455 2770 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-21-82" Feb 12 20:23:32.854165 kubelet[2770]: E0212 20:23:32.854125 2770 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Feb 12 20:23:32.906156 kernel: kauditd_printk_skb: 268 callbacks suppressed Feb 12 20:23:32.906289 kernel: audit: type=1400 audit(1707769412.900:974): avc: denied { watch } for pid=2553 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 12 20:23:32.900000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 12 20:23:32.915104 kubelet[2770]: I0212 20:23:32.915070 2770 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 12 20:23:32.915404 kubelet[2770]: I0212 20:23:32.915381 2770 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 12 20:23:32.915534 kubelet[2770]: I0212 20:23:32.915513 2770 state_mem.go:36] "Initialized new in-memory state store" Feb 12 20:23:32.915895 kubelet[2770]: I0212 20:23:32.915867 2770 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 12 20:23:32.916132 kubelet[2770]: I0212 20:23:32.916108 2770 state_mem.go:96] "Updated CPUSet assignments" assignments={} Feb 12 20:23:32.916298 kubelet[2770]: I0212 20:23:32.916254 2770 policy_none.go:49] "None policy: Start" Feb 12 20:23:32.918277 kernel: audit: type=1300 audit(1707769412.900:974): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c1fd80 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:32.900000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c1fd80 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:32.918934 kubelet[2770]: I0212 20:23:32.918903 2770 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 12 20:23:32.919143 kubelet[2770]: I0212 20:23:32.919122 2770 state_mem.go:35] "Initializing new in-memory state store" Feb 12 20:23:32.919536 kubelet[2770]: I0212 20:23:32.919513 2770 state_mem.go:75] "Updated machine memory state" Feb 12 20:23:32.900000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:32.942337 kubelet[2770]: I0212 20:23:32.942298 2770 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 12 20:23:32.942781 kubelet[2770]: I0212 20:23:32.942760 2770 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 12 20:23:32.944759 kubelet[2770]: I0212 20:23:32.944729 2770 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 12 20:23:32.952138 kernel: audit: type=1327 audit(1707769412.900:974): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:32.940000 audit[2770]: AVC avc: denied { mac_admin } for pid=2770 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.964010 kernel: audit: type=1400 audit(1707769412.940:975): avc: denied { mac_admin } for pid=2770 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:32.940000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:23:32.974330 kernel: audit: type=1401 audit(1707769412.940:975): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 12 20:23:32.940000 audit[2770]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40012a06f0 a1=40012a63d8 a2=40012a06c0 a3=25 items=0 ppid=1 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:32.991497 kernel: audit: type=1300 audit(1707769412.940:975): arch=c00000b7 syscall=5 success=no exit=-22 a0=40012a06f0 a1=40012a63d8 a2=40012a06c0 a3=25 items=0 ppid=1 pid=2770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:32.940000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:23:33.010285 kernel: audit: type=1327 audit(1707769412.940:975): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 12 20:23:33.055083 kubelet[2770]: I0212 20:23:33.054963 2770 topology_manager.go:215] "Topology Admit Handler" podUID="a3f131dcca6648e20adfdc5b3b532de7" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-21-82" Feb 12 20:23:33.055466 kubelet[2770]: I0212 20:23:33.055432 2770 topology_manager.go:215] "Topology Admit Handler" podUID="194e59f21a736e33ab244f4b12817c01" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:33.056044 kubelet[2770]: I0212 20:23:33.056018 2770 topology_manager.go:215] "Topology Admit Handler" podUID="9e342a65e003f98b56fe3f08185b105d" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-21-82" Feb 12 20:23:33.092111 kubelet[2770]: I0212 20:23:33.092049 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/a3f131dcca6648e20adfdc5b3b532de7-ca-certs\") pod \"kube-apiserver-ip-172-31-21-82\" (UID: \"a3f131dcca6648e20adfdc5b3b532de7\") " pod="kube-system/kube-apiserver-ip-172-31-21-82" Feb 12 20:23:33.092300 kubelet[2770]: I0212 20:23:33.092134 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-k8s-certs\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:33.092300 kubelet[2770]: I0212 20:23:33.092183 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/9e342a65e003f98b56fe3f08185b105d-kubeconfig\") pod \"kube-scheduler-ip-172-31-21-82\" (UID: \"9e342a65e003f98b56fe3f08185b105d\") " pod="kube-system/kube-scheduler-ip-172-31-21-82" Feb 12 20:23:33.092300 kubelet[2770]: I0212 20:23:33.092225 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/a3f131dcca6648e20adfdc5b3b532de7-k8s-certs\") pod \"kube-apiserver-ip-172-31-21-82\" (UID: \"a3f131dcca6648e20adfdc5b3b532de7\") " pod="kube-system/kube-apiserver-ip-172-31-21-82" Feb 12 20:23:33.092505 kubelet[2770]: I0212 20:23:33.092306 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/a3f131dcca6648e20adfdc5b3b532de7-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-21-82\" (UID: \"a3f131dcca6648e20adfdc5b3b532de7\") " pod="kube-system/kube-apiserver-ip-172-31-21-82" Feb 12 20:23:33.092505 kubelet[2770]: I0212 20:23:33.092350 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-ca-certs\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:33.092505 kubelet[2770]: I0212 20:23:33.092395 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:33.092505 kubelet[2770]: I0212 20:23:33.092440 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-kubeconfig\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:33.092505 kubelet[2770]: I0212 20:23:33.092491 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/194e59f21a736e33ab244f4b12817c01-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-21-82\" (UID: \"194e59f21a736e33ab244f4b12817c01\") " pod="kube-system/kube-controller-manager-ip-172-31-21-82" Feb 12 20:23:33.587713 kubelet[2770]: I0212 20:23:33.587652 2770 apiserver.go:52] "Watching apiserver" Feb 12 20:23:33.663000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:33.663000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ef3260 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:33.691562 kernel: audit: type=1400 audit(1707769413.663:976): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:33.691688 kernel: audit: type=1300 audit(1707769413.663:976): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ef3260 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:33.691825 kubelet[2770]: I0212 20:23:33.691771 2770 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 12 20:23:33.663000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:33.709633 kernel: audit: type=1327 audit(1707769413.663:976): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:33.695000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:33.695000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001109020 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:33.695000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:33.696000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:33.696000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001109060 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:33.696000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:33.709000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:23:33.709000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001109180 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:23:33.709000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:23:33.859541 kubelet[2770]: I0212 20:23:33.859393 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-21-82" podStartSLOduration=0.859309313 podCreationTimestamp="2024-02-12 20:23:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:23:33.84596539 +0000 UTC m=+1.450638855" watchObservedRunningTime="2024-02-12 20:23:33.859309313 +0000 UTC m=+1.463982754" Feb 12 20:23:33.874223 kubelet[2770]: I0212 20:23:33.874159 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-21-82" podStartSLOduration=0.874100833 podCreationTimestamp="2024-02-12 20:23:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:23:33.861154654 +0000 UTC m=+1.465828131" watchObservedRunningTime="2024-02-12 20:23:33.874100833 +0000 UTC m=+1.478774286" Feb 12 20:23:33.899308 kubelet[2770]: I0212 20:23:33.899252 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-21-82" podStartSLOduration=0.899153298 podCreationTimestamp="2024-02-12 20:23:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:23:33.874959841 +0000 UTC m=+1.479633306" watchObservedRunningTime="2024-02-12 20:23:33.899153298 +0000 UTC m=+1.503826763" Feb 12 20:23:38.683699 amazon-ssm-agent[1671]: 2024-02-12 20:23:38 INFO [MessagingDeliveryService] [Association] Schedule manager refreshed with 0 associations, 0 new associations associated Feb 12 20:23:39.468462 sudo[1918]: pam_unix(sudo:session): session closed for user root Feb 12 20:23:39.469000 audit[1918]: USER_END pid=1918 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:23:39.480737 kernel: kauditd_printk_skb: 9 callbacks suppressed Feb 12 20:23:39.480852 kernel: audit: type=1106 audit(1707769419.469:980): pid=1918 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:23:39.480916 kernel: audit: type=1104 audit(1707769419.469:981): pid=1918 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:23:39.469000 audit[1918]: CRED_DISP pid=1918 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 12 20:23:39.499628 sshd[1915]: pam_unix(sshd:session): session closed for user core Feb 12 20:23:39.500000 audit[1915]: USER_END pid=1915 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:23:39.501000 audit[1915]: CRED_DISP pid=1915 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:23:39.515482 systemd[1]: sshd@6-172.31.21.82:22-147.75.109.163:33016.service: Deactivated successfully. Feb 12 20:23:39.516733 systemd[1]: session-7.scope: Deactivated successfully. Feb 12 20:23:39.517045 systemd[1]: session-7.scope: Consumed 12.331s CPU time. Feb 12 20:23:39.523843 kernel: audit: type=1106 audit(1707769419.500:982): pid=1915 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:23:39.523969 kernel: audit: type=1104 audit(1707769419.501:983): pid=1915 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:23:39.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.82:22-147.75.109.163:33016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:39.534425 kernel: audit: type=1131 audit(1707769419.515:984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.21.82:22-147.75.109.163:33016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:23:39.533635 systemd-logind[1634]: Session 7 logged out. Waiting for processes to exit. Feb 12 20:23:39.535121 systemd-logind[1634]: Removed session 7. Feb 12 20:23:45.393507 kubelet[2770]: I0212 20:23:45.393457 2770 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 12 20:23:45.394516 env[1658]: time="2024-02-12T20:23:45.394206514Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 12 20:23:45.395058 kubelet[2770]: I0212 20:23:45.394921 2770 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 12 20:23:46.118025 kubelet[2770]: I0212 20:23:46.117981 2770 topology_manager.go:215] "Topology Admit Handler" podUID="1a6c9527-3579-4d53-acfc-4596f393e4ba" podNamespace="kube-system" podName="kube-proxy-l2b9q" Feb 12 20:23:46.130473 systemd[1]: Created slice kubepods-besteffort-pod1a6c9527_3579_4d53_acfc_4596f393e4ba.slice. Feb 12 20:23:46.273645 kubelet[2770]: I0212 20:23:46.273524 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/1a6c9527-3579-4d53-acfc-4596f393e4ba-kube-proxy\") pod \"kube-proxy-l2b9q\" (UID: \"1a6c9527-3579-4d53-acfc-4596f393e4ba\") " pod="kube-system/kube-proxy-l2b9q" Feb 12 20:23:46.273832 kubelet[2770]: I0212 20:23:46.273691 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1a6c9527-3579-4d53-acfc-4596f393e4ba-xtables-lock\") pod \"kube-proxy-l2b9q\" (UID: \"1a6c9527-3579-4d53-acfc-4596f393e4ba\") " pod="kube-system/kube-proxy-l2b9q" Feb 12 20:23:46.273832 kubelet[2770]: I0212 20:23:46.273767 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1a6c9527-3579-4d53-acfc-4596f393e4ba-lib-modules\") pod \"kube-proxy-l2b9q\" (UID: \"1a6c9527-3579-4d53-acfc-4596f393e4ba\") " pod="kube-system/kube-proxy-l2b9q" Feb 12 20:23:46.273970 kubelet[2770]: I0212 20:23:46.273868 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z2mh8\" (UniqueName: \"kubernetes.io/projected/1a6c9527-3579-4d53-acfc-4596f393e4ba-kube-api-access-z2mh8\") pod \"kube-proxy-l2b9q\" (UID: \"1a6c9527-3579-4d53-acfc-4596f393e4ba\") " pod="kube-system/kube-proxy-l2b9q" Feb 12 20:23:46.319583 kubelet[2770]: I0212 20:23:46.319535 2770 topology_manager.go:215] "Topology Admit Handler" podUID="c6c1bca0-349a-458d-be80-c08d3c06f660" podNamespace="tigera-operator" podName="tigera-operator-55585899bf-sdxml" Feb 12 20:23:46.331658 systemd[1]: Created slice kubepods-besteffort-podc6c1bca0_349a_458d_be80_c08d3c06f660.slice. Feb 12 20:23:46.454784 env[1658]: time="2024-02-12T20:23:46.454721666Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-l2b9q,Uid:1a6c9527-3579-4d53-acfc-4596f393e4ba,Namespace:kube-system,Attempt:0,}" Feb 12 20:23:46.481736 kubelet[2770]: I0212 20:23:46.481677 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/c6c1bca0-349a-458d-be80-c08d3c06f660-var-lib-calico\") pod \"tigera-operator-55585899bf-sdxml\" (UID: \"c6c1bca0-349a-458d-be80-c08d3c06f660\") " pod="tigera-operator/tigera-operator-55585899bf-sdxml" Feb 12 20:23:46.482375 kubelet[2770]: I0212 20:23:46.481758 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z7gzn\" (UniqueName: \"kubernetes.io/projected/c6c1bca0-349a-458d-be80-c08d3c06f660-kube-api-access-z7gzn\") pod \"tigera-operator-55585899bf-sdxml\" (UID: \"c6c1bca0-349a-458d-be80-c08d3c06f660\") " pod="tigera-operator/tigera-operator-55585899bf-sdxml" Feb 12 20:23:46.487013 env[1658]: time="2024-02-12T20:23:46.486812446Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:23:46.487476 env[1658]: time="2024-02-12T20:23:46.486889581Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:23:46.487476 env[1658]: time="2024-02-12T20:23:46.487224770Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:23:46.487916 env[1658]: time="2024-02-12T20:23:46.487768048Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aa280a5f857e2521617dc6bfd88c68155db1552a8807461d4e8b8323c5366110 pid=2850 runtime=io.containerd.runc.v2 Feb 12 20:23:46.510502 systemd[1]: Started cri-containerd-aa280a5f857e2521617dc6bfd88c68155db1552a8807461d4e8b8323c5366110.scope. Feb 12 20:23:46.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569675 kernel: audit: type=1400 audit(1707769426.554:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569814 kernel: audit: type=1400 audit(1707769426.554:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.577749 kernel: audit: type=1400 audit(1707769426.554:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.589292 kernel: audit: type=1400 audit(1707769426.554:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.589412 kernel: audit: type=1400 audit(1707769426.554:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.605169 kernel: audit: type=1400 audit(1707769426.554:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.617345 kernel: audit: type=1400 audit(1707769426.554:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.629065 kernel: audit: type=1400 audit(1707769426.554:992): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.638780 kernel: audit: type=1400 audit(1707769426.554:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.646956 kernel: audit: type=1400 audit(1707769426.562:994): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.562000 audit: BPF prog-id=115 op=LOAD Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2850 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323830613566383537653235323136313764633662666438386336 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2850 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323830613566383537653235323136313764633662666438386336 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.569000 audit: BPF prog-id=116 op=LOAD Feb 12 20:23:46.569000 audit[2860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2850 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323830613566383537653235323136313764633662666438386336 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit: BPF prog-id=117 op=LOAD Feb 12 20:23:46.570000 audit[2860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2850 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323830613566383537653235323136313764633662666438386336 Feb 12 20:23:46.570000 audit: BPF prog-id=117 op=UNLOAD Feb 12 20:23:46.570000 audit: BPF prog-id=116 op=UNLOAD Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { perfmon } for pid=2860 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit[2860]: AVC avc: denied { bpf } for pid=2860 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.570000 audit: BPF prog-id=118 op=LOAD Feb 12 20:23:46.570000 audit[2860]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2850 pid=2860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161323830613566383537653235323136313764633662666438386336 Feb 12 20:23:46.654154 env[1658]: time="2024-02-12T20:23:46.654092860Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-l2b9q,Uid:1a6c9527-3579-4d53-acfc-4596f393e4ba,Namespace:kube-system,Attempt:0,} returns sandbox id \"aa280a5f857e2521617dc6bfd88c68155db1552a8807461d4e8b8323c5366110\"" Feb 12 20:23:46.662406 env[1658]: time="2024-02-12T20:23:46.662353382Z" level=info msg="CreateContainer within sandbox \"aa280a5f857e2521617dc6bfd88c68155db1552a8807461d4e8b8323c5366110\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 12 20:23:46.691970 env[1658]: time="2024-02-12T20:23:46.691881479Z" level=info msg="CreateContainer within sandbox \"aa280a5f857e2521617dc6bfd88c68155db1552a8807461d4e8b8323c5366110\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"227922f7e4396f394b8554fb989ce00a01b9e2c42407ab47a5f55ca9c09e45a7\"" Feb 12 20:23:46.693177 env[1658]: time="2024-02-12T20:23:46.693104136Z" level=info msg="StartContainer for \"227922f7e4396f394b8554fb989ce00a01b9e2c42407ab47a5f55ca9c09e45a7\"" Feb 12 20:23:46.723803 systemd[1]: Started cri-containerd-227922f7e4396f394b8554fb989ce00a01b9e2c42407ab47a5f55ca9c09e45a7.scope. Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2850 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373932326637653433393666333934623835353466623938396365 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit: BPF prog-id=119 op=LOAD Feb 12 20:23:46.772000 audit[2892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2850 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373932326637653433393666333934623835353466623938396365 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.772000 audit: BPF prog-id=120 op=LOAD Feb 12 20:23:46.772000 audit[2892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2850 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.772000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373932326637653433393666333934623835353466623938396365 Feb 12 20:23:46.773000 audit: BPF prog-id=120 op=UNLOAD Feb 12 20:23:46.773000 audit: BPF prog-id=119 op=UNLOAD Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { perfmon } for pid=2892 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit[2892]: AVC avc: denied { bpf } for pid=2892 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:46.773000 audit: BPF prog-id=121 op=LOAD Feb 12 20:23:46.773000 audit[2892]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2850 pid=2892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.773000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232373932326637653433393666333934623835353466623938396365 Feb 12 20:23:46.808280 env[1658]: time="2024-02-12T20:23:46.808195679Z" level=info msg="StartContainer for \"227922f7e4396f394b8554fb989ce00a01b9e2c42407ab47a5f55ca9c09e45a7\" returns successfully" Feb 12 20:23:46.940422 env[1658]: time="2024-02-12T20:23:46.940364323Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-55585899bf-sdxml,Uid:c6c1bca0-349a-458d-be80-c08d3c06f660,Namespace:tigera-operator,Attempt:0,}" Feb 12 20:23:46.966000 audit[2944]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:46.973395 env[1658]: time="2024-02-12T20:23:46.970140624Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:23:46.973395 env[1658]: time="2024-02-12T20:23:46.970309521Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:23:46.973395 env[1658]: time="2024-02-12T20:23:46.970340480Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:23:46.973395 env[1658]: time="2024-02-12T20:23:46.970589967Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/defa66508fc80e648e7257102d746a95ad29eb40cf57797cc09a21f402074e3e pid=2953 runtime=io.containerd.runc.v2 Feb 12 20:23:46.966000 audit[2944]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff6454d40 a2=0 a3=ffffa67286c0 items=0 ppid=2902 pid=2944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.966000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 12 20:23:46.978000 audit[2952]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2952 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:46.978000 audit[2952]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff56adf60 a2=0 a3=ffffab8256c0 items=0 ppid=2902 pid=2952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.978000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 12 20:23:46.992000 audit[2968]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2968 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:46.992000 audit[2968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1c0e380 a2=0 a3=ffffae77c6c0 items=0 ppid=2902 pid=2968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.992000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 12 20:23:46.993000 audit[2971]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2971 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:46.993000 audit[2971]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7554b20 a2=0 a3=ffffb629b6c0 items=0 ppid=2902 pid=2971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:46.993000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 12 20:23:47.001301 systemd[1]: Started cri-containerd-defa66508fc80e648e7257102d746a95ad29eb40cf57797cc09a21f402074e3e.scope. Feb 12 20:23:47.010000 audit[2974]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2974 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.010000 audit[2974]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe1c6b6a0 a2=0 a3=ffffa6b386c0 items=0 ppid=2902 pid=2974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.010000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 12 20:23:47.012000 audit[2975]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2975 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.012000 audit[2975]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd3c42320 a2=0 a3=ffffa2afc6c0 items=0 ppid=2902 pid=2975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.012000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.033000 audit: BPF prog-id=122 op=LOAD Feb 12 20:23:47.035000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.035000 audit[2960]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2953 pid=2960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.035000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465666136363530386663383065363438653732353731303264373436 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2953 pid=2960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465666136363530386663383065363438653732353731303264373436 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.036000 audit: BPF prog-id=123 op=LOAD Feb 12 20:23:47.036000 audit[2960]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2953 pid=2960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465666136363530386663383065363438653732353731303264373436 Feb 12 20:23:47.038000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.038000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.038000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.038000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.038000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.038000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.038000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.038000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.038000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.038000 audit: BPF prog-id=124 op=LOAD Feb 12 20:23:47.038000 audit[2960]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2953 pid=2960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.038000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465666136363530386663383065363438653732353731303264373436 Feb 12 20:23:47.040000 audit: BPF prog-id=124 op=UNLOAD Feb 12 20:23:47.040000 audit: BPF prog-id=123 op=UNLOAD Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { perfmon } for pid=2960 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit[2960]: AVC avc: denied { bpf } for pid=2960 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:47.040000 audit: BPF prog-id=125 op=LOAD Feb 12 20:23:47.040000 audit[2960]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2953 pid=2960 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465666136363530386663383065363438653732353731303264373436 Feb 12 20:23:47.059000 audit[2983]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2983 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.059000 audit[2983]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff42dd100 a2=0 a3=ffff9946e6c0 items=0 ppid=2902 pid=2983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.059000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 12 20:23:47.075000 audit[2988]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.075000 audit[2988]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff7591810 a2=0 a3=ffff821a46c0 items=0 ppid=2902 pid=2988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.075000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 12 20:23:47.088000 audit[2996]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2996 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.088000 audit[2996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe9f567d0 a2=0 a3=ffff9bd806c0 items=0 ppid=2902 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.088000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 12 20:23:47.092000 audit[2997]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.092000 audit[2997]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8bed720 a2=0 a3=ffff9cac56c0 items=0 ppid=2902 pid=2997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.092000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 12 20:23:47.095586 env[1658]: time="2024-02-12T20:23:47.095498861Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-55585899bf-sdxml,Uid:c6c1bca0-349a-458d-be80-c08d3c06f660,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"defa66508fc80e648e7257102d746a95ad29eb40cf57797cc09a21f402074e3e\"" Feb 12 20:23:47.102337 env[1658]: time="2024-02-12T20:23:47.102044091Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 12 20:23:47.103000 audit[2999]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.103000 audit[2999]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe753c530 a2=0 a3=ffffada1b6c0 items=0 ppid=2902 pid=2999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.103000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 12 20:23:47.108000 audit[3000]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3000 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.108000 audit[3000]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc29d4740 a2=0 a3=ffff858e46c0 items=0 ppid=2902 pid=3000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.108000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 12 20:23:47.114000 audit[3002]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3002 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.114000 audit[3002]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc6b132f0 a2=0 a3=ffffa958f6c0 items=0 ppid=2902 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.114000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 12 20:23:47.121000 audit[3005]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.121000 audit[3005]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd21ab3a0 a2=0 a3=ffff892656c0 items=0 ppid=2902 pid=3005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.121000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 12 20:23:47.125000 audit[3006]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3006 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.125000 audit[3006]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcc65e620 a2=0 a3=ffffb77ef6c0 items=0 ppid=2902 pid=3006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.125000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 12 20:23:47.139000 audit[3008]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3008 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.139000 audit[3008]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc7977ea0 a2=0 a3=ffffbde136c0 items=0 ppid=2902 pid=3008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.139000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 12 20:23:47.141000 audit[3009]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3009 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.141000 audit[3009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd17267d0 a2=0 a3=ffff919026c0 items=0 ppid=2902 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.141000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 12 20:23:47.146000 audit[3011]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3011 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.146000 audit[3011]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffaebddf0 a2=0 a3=ffff85e916c0 items=0 ppid=2902 pid=3011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.146000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 12 20:23:47.154000 audit[3014]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3014 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.154000 audit[3014]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffec939aa0 a2=0 a3=ffffab8d76c0 items=0 ppid=2902 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 12 20:23:47.164000 audit[3017]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3017 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.164000 audit[3017]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1771c40 a2=0 a3=ffffa58896c0 items=0 ppid=2902 pid=3017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.164000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 12 20:23:47.167000 audit[3018]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.167000 audit[3018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe99e7a10 a2=0 a3=ffff8567f6c0 items=0 ppid=2902 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.167000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 12 20:23:47.173000 audit[3020]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3020 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.173000 audit[3020]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe9871110 a2=0 a3=ffff97e3b6c0 items=0 ppid=2902 pid=3020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.173000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 20:23:47.183000 audit[3023]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3023 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.183000 audit[3023]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffed1b7080 a2=0 a3=ffffa22056c0 items=0 ppid=2902 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.183000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 20:23:47.186000 audit[3024]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3024 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.186000 audit[3024]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdebf0b50 a2=0 a3=ffff93dea6c0 items=0 ppid=2902 pid=3024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.186000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 12 20:23:47.194000 audit[3026]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3026 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 12 20:23:47.194000 audit[3026]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffc803bdd0 a2=0 a3=ffff9ea436c0 items=0 ppid=2902 pid=3026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.194000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 12 20:23:47.226000 audit[3032]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3032 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:47.226000 audit[3032]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffdc35d790 a2=0 a3=ffffa43106c0 items=0 ppid=2902 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:47.241000 audit[3032]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3032 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:47.241000 audit[3032]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffdc35d790 a2=0 a3=ffffa43106c0 items=0 ppid=2902 pid=3032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.241000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:47.251000 audit[3038]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3038 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.251000 audit[3038]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff92538d0 a2=0 a3=ffff9bfda6c0 items=0 ppid=2902 pid=3038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.251000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 12 20:23:47.258000 audit[3040]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3040 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.258000 audit[3040]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffdcbb0b70 a2=0 a3=ffffa82016c0 items=0 ppid=2902 pid=3040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.258000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 12 20:23:47.268000 audit[3043]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3043 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.268000 audit[3043]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc14b9f10 a2=0 a3=ffffb8b416c0 items=0 ppid=2902 pid=3043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.268000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 12 20:23:47.270000 audit[3044]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3044 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.270000 audit[3044]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe6c18820 a2=0 a3=ffffafe306c0 items=0 ppid=2902 pid=3044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.270000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 12 20:23:47.275000 audit[3046]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3046 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.275000 audit[3046]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe26076f0 a2=0 a3=ffff87e7e6c0 items=0 ppid=2902 pid=3046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.275000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 12 20:23:47.281000 audit[3047]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3047 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.281000 audit[3047]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc1b3b10 a2=0 a3=ffffa800d6c0 items=0 ppid=2902 pid=3047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.281000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 12 20:23:47.286000 audit[3049]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3049 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.286000 audit[3049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff1992d50 a2=0 a3=ffff82a5e6c0 items=0 ppid=2902 pid=3049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.286000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 12 20:23:47.293000 audit[3052]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3052 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.293000 audit[3052]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffea4584e0 a2=0 a3=ffffbc9db6c0 items=0 ppid=2902 pid=3052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.293000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 12 20:23:47.296000 audit[3053]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3053 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.296000 audit[3053]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd7c7e870 a2=0 a3=ffff8926a6c0 items=0 ppid=2902 pid=3053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.296000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 12 20:23:47.301000 audit[3055]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3055 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.301000 audit[3055]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcf5da140 a2=0 a3=ffffa32af6c0 items=0 ppid=2902 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.301000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 12 20:23:47.304000 audit[3056]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.304000 audit[3056]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea53db80 a2=0 a3=ffffbbc156c0 items=0 ppid=2902 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.304000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 12 20:23:47.309000 audit[3058]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3058 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.309000 audit[3058]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe78596f0 a2=0 a3=ffff8e5626c0 items=0 ppid=2902 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.309000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 12 20:23:47.316000 audit[3061]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3061 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.316000 audit[3061]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff2853300 a2=0 a3=ffffb81156c0 items=0 ppid=2902 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.316000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 12 20:23:47.323000 audit[3064]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3064 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.323000 audit[3064]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffcb87ea90 a2=0 a3=ffff895466c0 items=0 ppid=2902 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.323000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 12 20:23:47.326000 audit[3065]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3065 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.326000 audit[3065]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe37619b0 a2=0 a3=ffff9efbb6c0 items=0 ppid=2902 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.326000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 12 20:23:47.331000 audit[3067]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3067 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.331000 audit[3067]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe12fbab0 a2=0 a3=ffffb312c6c0 items=0 ppid=2902 pid=3067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.331000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 20:23:47.337000 audit[3070]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3070 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.337000 audit[3070]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffc445ecc0 a2=0 a3=ffffaa67f6c0 items=0 ppid=2902 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.337000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 12 20:23:47.340000 audit[3071]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3071 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.340000 audit[3071]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffa43c090 a2=0 a3=ffffa031e6c0 items=0 ppid=2902 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.340000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 12 20:23:47.345000 audit[3073]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3073 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.345000 audit[3073]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffd232a650 a2=0 a3=ffffa2d326c0 items=0 ppid=2902 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.345000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 12 20:23:47.347000 audit[3074]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3074 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.347000 audit[3074]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd8877b00 a2=0 a3=ffffa3ceb6c0 items=0 ppid=2902 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.347000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 12 20:23:47.353000 audit[3076]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3076 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.353000 audit[3076]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc5cec810 a2=0 a3=ffffa70736c0 items=0 ppid=2902 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.353000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 20:23:47.360000 audit[3079]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3079 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 12 20:23:47.360000 audit[3079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffed3da9f0 a2=0 a3=ffffb531a6c0 items=0 ppid=2902 pid=3079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.360000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 12 20:23:47.366000 audit[3081]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3081 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 12 20:23:47.366000 audit[3081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc54f5490 a2=0 a3=ffffa0dac6c0 items=0 ppid=2902 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.366000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:47.367000 audit[3081]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3081 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 12 20:23:47.367000 audit[3081]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffc54f5490 a2=0 a3=ffffa0dac6c0 items=0 ppid=2902 pid=3081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:47.367000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:49.079755 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1769445818.mount: Deactivated successfully. Feb 12 20:23:50.058506 env[1658]: time="2024-02-12T20:23:50.058421236Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:50.061399 env[1658]: time="2024-02-12T20:23:50.061334330Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:50.064561 env[1658]: time="2024-02-12T20:23:50.064512199Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:50.076814 env[1658]: time="2024-02-12T20:23:50.076758277Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:50.077682 env[1658]: time="2024-02-12T20:23:50.077635090Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f\"" Feb 12 20:23:50.084997 env[1658]: time="2024-02-12T20:23:50.084927208Z" level=info msg="CreateContainer within sandbox \"defa66508fc80e648e7257102d746a95ad29eb40cf57797cc09a21f402074e3e\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 12 20:23:50.103735 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2555195636.mount: Deactivated successfully. Feb 12 20:23:50.120929 env[1658]: time="2024-02-12T20:23:50.120867455Z" level=info msg="CreateContainer within sandbox \"defa66508fc80e648e7257102d746a95ad29eb40cf57797cc09a21f402074e3e\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c\"" Feb 12 20:23:50.130339 env[1658]: time="2024-02-12T20:23:50.130286273Z" level=info msg="StartContainer for \"5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c\"" Feb 12 20:23:50.177542 systemd[1]: Started cri-containerd-5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c.scope. Feb 12 20:23:50.206000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.207000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.207000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.208000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.208000 audit: BPF prog-id=126 op=LOAD Feb 12 20:23:50.209000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.209000 audit[3090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2953 pid=3090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:50.209000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653737393237633439343362613935643732363738333737663336 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2953 pid=3090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:50.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653737393237633439343362613935643732363738333737663336 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.210000 audit: BPF prog-id=127 op=LOAD Feb 12 20:23:50.210000 audit[3090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2953 pid=3090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:50.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653737393237633439343362613935643732363738333737663336 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit: BPF prog-id=128 op=LOAD Feb 12 20:23:50.212000 audit[3090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2953 pid=3090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:50.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653737393237633439343362613935643732363738333737663336 Feb 12 20:23:50.212000 audit: BPF prog-id=128 op=UNLOAD Feb 12 20:23:50.212000 audit: BPF prog-id=127 op=UNLOAD Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { perfmon } for pid=3090 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit[3090]: AVC avc: denied { bpf } for pid=3090 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:50.212000 audit: BPF prog-id=129 op=LOAD Feb 12 20:23:50.212000 audit[3090]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2953 pid=3090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:50.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653737393237633439343362613935643732363738333737663336 Feb 12 20:23:50.240923 env[1658]: time="2024-02-12T20:23:50.240771999Z" level=info msg="StartContainer for \"5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c\" returns successfully" Feb 12 20:23:50.871448 kubelet[2770]: I0212 20:23:50.871406 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-l2b9q" podStartSLOduration=4.871351976 podCreationTimestamp="2024-02-12 20:23:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:23:46.866880469 +0000 UTC m=+14.471553934" watchObservedRunningTime="2024-02-12 20:23:50.871351976 +0000 UTC m=+18.476025417" Feb 12 20:23:50.872359 kubelet[2770]: I0212 20:23:50.872332 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-55585899bf-sdxml" podStartSLOduration=1.891042522 podCreationTimestamp="2024-02-12 20:23:46 +0000 UTC" firstStartedPulling="2024-02-12 20:23:47.097436297 +0000 UTC m=+14.702109738" lastFinishedPulling="2024-02-12 20:23:50.078674128 +0000 UTC m=+17.683347581" observedRunningTime="2024-02-12 20:23:50.871151508 +0000 UTC m=+18.475824973" watchObservedRunningTime="2024-02-12 20:23:50.872280365 +0000 UTC m=+18.476953854" Feb 12 20:23:51.099502 systemd[1]: run-containerd-runc-k8s.io-5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c-runc.mgfTXV.mount: Deactivated successfully. Feb 12 20:23:52.968305 kernel: kauditd_printk_skb: 357 callbacks suppressed Feb 12 20:23:52.968492 kernel: audit: type=1325 audit(1707769432.958:1096): table=filter:89 family=2 entries=15 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:52.958000 audit[3121]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:52.958000 audit[3121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=fffffae56dd0 a2=0 a3=ffffbe6416c0 items=0 ppid=2902 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:52.980776 kernel: audit: type=1300 audit(1707769432.958:1096): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=fffffae56dd0 a2=0 a3=ffffbe6416c0 items=0 ppid=2902 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:52.980964 kernel: audit: type=1327 audit(1707769432.958:1096): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:52.958000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:52.968000 audit[3121]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:52.968000 audit[3121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=fffffae56dd0 a2=0 a3=ffffbe6416c0 items=0 ppid=2902 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.007497 kernel: audit: type=1325 audit(1707769432.968:1097): table=nat:90 family=2 entries=12 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:53.007632 kernel: audit: type=1300 audit(1707769432.968:1097): arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=fffffae56dd0 a2=0 a3=ffffbe6416c0 items=0 ppid=2902 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:52.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:53.013591 kernel: audit: type=1327 audit(1707769432.968:1097): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:53.010000 audit[3123]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:53.010000 audit[3123]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc7e9a410 a2=0 a3=ffff9a2ca6c0 items=0 ppid=2902 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.022425 kernel: audit: type=1325 audit(1707769433.010:1098): table=filter:91 family=2 entries=16 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:53.010000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:53.040252 kernel: audit: type=1300 audit(1707769433.010:1098): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc7e9a410 a2=0 a3=ffff9a2ca6c0 items=0 ppid=2902 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.040349 kernel: audit: type=1327 audit(1707769433.010:1098): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:53.016000 audit[3123]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:53.047335 kernel: audit: type=1325 audit(1707769433.016:1099): table=nat:92 family=2 entries=12 op=nft_register_rule pid=3123 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:53.016000 audit[3123]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffc7e9a410 a2=0 a3=ffff9a2ca6c0 items=0 ppid=2902 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:53.121616 kubelet[2770]: I0212 20:23:53.121563 2770 topology_manager.go:215] "Topology Admit Handler" podUID="a0e9ba0b-4c9d-478f-aa92-f489086aeec2" podNamespace="calico-system" podName="calico-typha-6d76d88d66-6dm9x" Feb 12 20:23:53.128552 kubelet[2770]: I0212 20:23:53.128517 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/a0e9ba0b-4c9d-478f-aa92-f489086aeec2-typha-certs\") pod \"calico-typha-6d76d88d66-6dm9x\" (UID: \"a0e9ba0b-4c9d-478f-aa92-f489086aeec2\") " pod="calico-system/calico-typha-6d76d88d66-6dm9x" Feb 12 20:23:53.128838 kubelet[2770]: I0212 20:23:53.128803 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z7652\" (UniqueName: \"kubernetes.io/projected/a0e9ba0b-4c9d-478f-aa92-f489086aeec2-kube-api-access-z7652\") pod \"calico-typha-6d76d88d66-6dm9x\" (UID: \"a0e9ba0b-4c9d-478f-aa92-f489086aeec2\") " pod="calico-system/calico-typha-6d76d88d66-6dm9x" Feb 12 20:23:53.129026 kubelet[2770]: I0212 20:23:53.128993 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a0e9ba0b-4c9d-478f-aa92-f489086aeec2-tigera-ca-bundle\") pod \"calico-typha-6d76d88d66-6dm9x\" (UID: \"a0e9ba0b-4c9d-478f-aa92-f489086aeec2\") " pod="calico-system/calico-typha-6d76d88d66-6dm9x" Feb 12 20:23:53.133342 systemd[1]: Created slice kubepods-besteffort-poda0e9ba0b_4c9d_478f_aa92_f489086aeec2.slice. Feb 12 20:23:53.336663 kubelet[2770]: I0212 20:23:53.336498 2770 topology_manager.go:215] "Topology Admit Handler" podUID="260832f8-1c6f-46eb-91e2-4e731e9995c5" podNamespace="calico-system" podName="calico-node-qqbzl" Feb 12 20:23:53.347920 systemd[1]: Created slice kubepods-besteffort-pod260832f8_1c6f_46eb_91e2_4e731e9995c5.slice. Feb 12 20:23:53.431645 kubelet[2770]: I0212 20:23:53.431585 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/260832f8-1c6f-46eb-91e2-4e731e9995c5-var-lib-calico\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.431820 kubelet[2770]: I0212 20:23:53.431669 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/260832f8-1c6f-46eb-91e2-4e731e9995c5-lib-modules\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.431820 kubelet[2770]: I0212 20:23:53.431714 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/260832f8-1c6f-46eb-91e2-4e731e9995c5-node-certs\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.431820 kubelet[2770]: I0212 20:23:53.431760 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/260832f8-1c6f-46eb-91e2-4e731e9995c5-policysync\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.431820 kubelet[2770]: I0212 20:23:53.431803 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zsqhl\" (UniqueName: \"kubernetes.io/projected/260832f8-1c6f-46eb-91e2-4e731e9995c5-kube-api-access-zsqhl\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.432120 kubelet[2770]: I0212 20:23:53.431847 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/260832f8-1c6f-46eb-91e2-4e731e9995c5-xtables-lock\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.432120 kubelet[2770]: I0212 20:23:53.431890 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/260832f8-1c6f-46eb-91e2-4e731e9995c5-var-run-calico\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.432120 kubelet[2770]: I0212 20:23:53.431931 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/260832f8-1c6f-46eb-91e2-4e731e9995c5-cni-bin-dir\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.432120 kubelet[2770]: I0212 20:23:53.431997 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/260832f8-1c6f-46eb-91e2-4e731e9995c5-cni-log-dir\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.432120 kubelet[2770]: I0212 20:23:53.432045 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/260832f8-1c6f-46eb-91e2-4e731e9995c5-flexvol-driver-host\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.432438 kubelet[2770]: I0212 20:23:53.432087 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/260832f8-1c6f-46eb-91e2-4e731e9995c5-cni-net-dir\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.432438 kubelet[2770]: I0212 20:23:53.432131 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/260832f8-1c6f-46eb-91e2-4e731e9995c5-tigera-ca-bundle\") pod \"calico-node-qqbzl\" (UID: \"260832f8-1c6f-46eb-91e2-4e731e9995c5\") " pod="calico-system/calico-node-qqbzl" Feb 12 20:23:53.443337 env[1658]: time="2024-02-12T20:23:53.442623178Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6d76d88d66-6dm9x,Uid:a0e9ba0b-4c9d-478f-aa92-f489086aeec2,Namespace:calico-system,Attempt:0,}" Feb 12 20:23:53.479329 env[1658]: time="2024-02-12T20:23:53.479021122Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:23:53.479329 env[1658]: time="2024-02-12T20:23:53.479109549Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:23:53.479329 env[1658]: time="2024-02-12T20:23:53.479136873Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:23:53.479660 env[1658]: time="2024-02-12T20:23:53.479406292Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8d1dbc1bdad373a23ade282d30b80936d94714e30d3ee74752e0d992a19d2b4a pid=3135 runtime=io.containerd.runc.v2 Feb 12 20:23:53.503097 kubelet[2770]: I0212 20:23:53.503023 2770 topology_manager.go:215] "Topology Admit Handler" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" podNamespace="calico-system" podName="csi-node-driver-fnk8l" Feb 12 20:23:53.503526 kubelet[2770]: E0212 20:23:53.503477 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fnk8l" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" Feb 12 20:23:53.524142 systemd[1]: Started cri-containerd-8d1dbc1bdad373a23ade282d30b80936d94714e30d3ee74752e0d992a19d2b4a.scope. Feb 12 20:23:53.536766 kubelet[2770]: I0212 20:23:53.536654 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/d3b19469-1423-4b17-a2ba-26ee2310cd0f-registration-dir\") pod \"csi-node-driver-fnk8l\" (UID: \"d3b19469-1423-4b17-a2ba-26ee2310cd0f\") " pod="calico-system/csi-node-driver-fnk8l" Feb 12 20:23:53.537477 kubelet[2770]: I0212 20:23:53.537422 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7n54w\" (UniqueName: \"kubernetes.io/projected/d3b19469-1423-4b17-a2ba-26ee2310cd0f-kube-api-access-7n54w\") pod \"csi-node-driver-fnk8l\" (UID: \"d3b19469-1423-4b17-a2ba-26ee2310cd0f\") " pod="calico-system/csi-node-driver-fnk8l" Feb 12 20:23:53.537615 kubelet[2770]: I0212 20:23:53.537598 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/d3b19469-1423-4b17-a2ba-26ee2310cd0f-varrun\") pod \"csi-node-driver-fnk8l\" (UID: \"d3b19469-1423-4b17-a2ba-26ee2310cd0f\") " pod="calico-system/csi-node-driver-fnk8l" Feb 12 20:23:53.537792 kubelet[2770]: I0212 20:23:53.537732 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/d3b19469-1423-4b17-a2ba-26ee2310cd0f-kubelet-dir\") pod \"csi-node-driver-fnk8l\" (UID: \"d3b19469-1423-4b17-a2ba-26ee2310cd0f\") " pod="calico-system/csi-node-driver-fnk8l" Feb 12 20:23:53.537792 kubelet[2770]: I0212 20:23:53.537791 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/d3b19469-1423-4b17-a2ba-26ee2310cd0f-socket-dir\") pod \"csi-node-driver-fnk8l\" (UID: \"d3b19469-1423-4b17-a2ba-26ee2310cd0f\") " pod="calico-system/csi-node-driver-fnk8l" Feb 12 20:23:53.559684 kubelet[2770]: E0212 20:23:53.559632 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.559684 kubelet[2770]: W0212 20:23:53.559672 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.559918 kubelet[2770]: E0212 20:23:53.559712 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.578052 kubelet[2770]: E0212 20:23:53.578003 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.578052 kubelet[2770]: W0212 20:23:53.578046 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.578363 kubelet[2770]: E0212 20:23:53.578088 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.640792 kubelet[2770]: E0212 20:23:53.640740 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.640792 kubelet[2770]: W0212 20:23:53.640778 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.641006 kubelet[2770]: E0212 20:23:53.640818 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.643488 kubelet[2770]: E0212 20:23:53.643435 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.643488 kubelet[2770]: W0212 20:23:53.643474 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.643749 kubelet[2770]: E0212 20:23:53.643522 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.644110 kubelet[2770]: E0212 20:23:53.644070 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.644110 kubelet[2770]: W0212 20:23:53.644102 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.644345 kubelet[2770]: E0212 20:23:53.644145 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.644695 kubelet[2770]: E0212 20:23:53.644652 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.644695 kubelet[2770]: W0212 20:23:53.644685 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.645003 kubelet[2770]: E0212 20:23:53.644853 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.645082 kubelet[2770]: E0212 20:23:53.645061 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.645082 kubelet[2770]: W0212 20:23:53.645077 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.645260 kubelet[2770]: E0212 20:23:53.645213 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.645491 kubelet[2770]: E0212 20:23:53.645456 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.645491 kubelet[2770]: W0212 20:23:53.645484 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.645677 kubelet[2770]: E0212 20:23:53.645643 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.645896 kubelet[2770]: E0212 20:23:53.645857 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.645896 kubelet[2770]: W0212 20:23:53.645888 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.646083 kubelet[2770]: E0212 20:23:53.646030 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.646294 kubelet[2770]: E0212 20:23:53.646260 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.646294 kubelet[2770]: W0212 20:23:53.646286 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.646577 kubelet[2770]: E0212 20:23:53.646322 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.646791 kubelet[2770]: E0212 20:23:53.646717 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.646791 kubelet[2770]: W0212 20:23:53.646750 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.646950 kubelet[2770]: E0212 20:23:53.646902 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.649544 kubelet[2770]: E0212 20:23:53.649493 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.649544 kubelet[2770]: W0212 20:23:53.649532 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.649788 kubelet[2770]: E0212 20:23:53.649730 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.650023 kubelet[2770]: E0212 20:23:53.649985 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.650023 kubelet[2770]: W0212 20:23:53.650013 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.650191 kubelet[2770]: E0212 20:23:53.650175 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.650433 kubelet[2770]: E0212 20:23:53.650400 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.650433 kubelet[2770]: W0212 20:23:53.650426 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.650604 kubelet[2770]: E0212 20:23:53.650574 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.650801 kubelet[2770]: E0212 20:23:53.650767 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.650801 kubelet[2770]: W0212 20:23:53.650794 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.650968 kubelet[2770]: E0212 20:23:53.650936 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.651169 kubelet[2770]: E0212 20:23:53.651134 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.651169 kubelet[2770]: W0212 20:23:53.651160 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.651350 kubelet[2770]: E0212 20:23:53.651330 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.651556 kubelet[2770]: E0212 20:23:53.651522 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.651556 kubelet[2770]: W0212 20:23:53.651549 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.651713 kubelet[2770]: E0212 20:23:53.651690 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.653492 kubelet[2770]: E0212 20:23:53.652544 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.653492 kubelet[2770]: W0212 20:23:53.652581 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.653492 kubelet[2770]: E0212 20:23:53.652756 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.654418 env[1658]: time="2024-02-12T20:23:53.654338432Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qqbzl,Uid:260832f8-1c6f-46eb-91e2-4e731e9995c5,Namespace:calico-system,Attempt:0,}" Feb 12 20:23:53.656025 kubelet[2770]: E0212 20:23:53.655949 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.656025 kubelet[2770]: W0212 20:23:53.655999 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.657394 kubelet[2770]: E0212 20:23:53.656810 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.657394 kubelet[2770]: W0212 20:23:53.656841 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.657394 kubelet[2770]: E0212 20:23:53.657156 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.657394 kubelet[2770]: W0212 20:23:53.657174 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.658789 kubelet[2770]: E0212 20:23:53.658740 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.658992 kubelet[2770]: E0212 20:23:53.658956 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.659096 kubelet[2770]: E0212 20:23:53.659056 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.662301 kubelet[2770]: E0212 20:23:53.662055 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.662301 kubelet[2770]: W0212 20:23:53.662096 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.662650 kubelet[2770]: E0212 20:23:53.662375 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.662731 kubelet[2770]: E0212 20:23:53.662681 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.662731 kubelet[2770]: W0212 20:23:53.662699 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.662928 kubelet[2770]: E0212 20:23:53.662890 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.664285 kubelet[2770]: E0212 20:23:53.663134 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.664285 kubelet[2770]: W0212 20:23:53.663161 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.664285 kubelet[2770]: E0212 20:23:53.663393 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.664285 kubelet[2770]: E0212 20:23:53.663632 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.664285 kubelet[2770]: W0212 20:23:53.663651 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.664285 kubelet[2770]: E0212 20:23:53.663802 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.664285 kubelet[2770]: E0212 20:23:53.664038 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.664285 kubelet[2770]: W0212 20:23:53.664057 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.664285 kubelet[2770]: E0212 20:23:53.664277 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.667952 kubelet[2770]: E0212 20:23:53.667893 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.667952 kubelet[2770]: W0212 20:23:53.667933 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.668210 kubelet[2770]: E0212 20:23:53.667991 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.690479 env[1658]: time="2024-02-12T20:23:53.690366602Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:23:53.690760 env[1658]: time="2024-02-12T20:23:53.690694268Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:23:53.690959 env[1658]: time="2024-02-12T20:23:53.690894557Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:23:53.692498 env[1658]: time="2024-02-12T20:23:53.692401913Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2a4d55c79d32e7310e134db94a3adda83e9f56b5beb9932e134a9789d7bbc12a pid=3198 runtime=io.containerd.runc.v2 Feb 12 20:23:53.705482 kubelet[2770]: E0212 20:23:53.705423 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:53.705482 kubelet[2770]: W0212 20:23:53.705468 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:53.705721 kubelet[2770]: E0212 20:23:53.705511 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:53.741093 systemd[1]: Started cri-containerd-2a4d55c79d32e7310e134db94a3adda83e9f56b5beb9932e134a9789d7bbc12a.scope. Feb 12 20:23:53.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.745000 audit: BPF prog-id=130 op=LOAD Feb 12 20:23:53.746000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.746000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3135 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316462633162646164333733613233616465323832643330623830 Feb 12 20:23:53.746000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.746000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3135 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316462633162646164333733613233616465323832643330623830 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit: BPF prog-id=131 op=LOAD Feb 12 20:23:53.747000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3135 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316462633162646164333733613233616465323832643330623830 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit: BPF prog-id=132 op=LOAD Feb 12 20:23:53.747000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3135 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316462633162646164333733613233616465323832643330623830 Feb 12 20:23:53.747000 audit: BPF prog-id=132 op=UNLOAD Feb 12 20:23:53.747000 audit: BPF prog-id=131 op=UNLOAD Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { perfmon } for pid=3145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit[3145]: AVC avc: denied { bpf } for pid=3145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.747000 audit: BPF prog-id=133 op=LOAD Feb 12 20:23:53.747000 audit[3145]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3135 pid=3145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316462633162646164333733613233616465323832643330623830 Feb 12 20:23:53.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.830000 audit: BPF prog-id=134 op=LOAD Feb 12 20:23:53.833000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.833000 audit[3208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3198 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261346435356337396433326537333130653133346462393461336164 Feb 12 20:23:53.833000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.833000 audit[3208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3198 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.833000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261346435356337396433326537333130653133346462393461336164 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.834000 audit: BPF prog-id=135 op=LOAD Feb 12 20:23:53.834000 audit[3208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3198 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261346435356337396433326537333130653133346462393461336164 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit: BPF prog-id=136 op=LOAD Feb 12 20:23:53.838000 audit[3208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3198 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261346435356337396433326537333130653133346462393461336164 Feb 12 20:23:53.838000 audit: BPF prog-id=136 op=UNLOAD Feb 12 20:23:53.838000 audit: BPF prog-id=135 op=UNLOAD Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { perfmon } for pid=3208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit[3208]: AVC avc: denied { bpf } for pid=3208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:53.838000 audit: BPF prog-id=137 op=LOAD Feb 12 20:23:53.838000 audit[3208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3198 pid=3208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:53.838000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261346435356337396433326537333130653133346462393461336164 Feb 12 20:23:53.846488 env[1658]: time="2024-02-12T20:23:53.846429232Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6d76d88d66-6dm9x,Uid:a0e9ba0b-4c9d-478f-aa92-f489086aeec2,Namespace:calico-system,Attempt:0,} returns sandbox id \"8d1dbc1bdad373a23ade282d30b80936d94714e30d3ee74752e0d992a19d2b4a\"" Feb 12 20:23:53.854404 env[1658]: time="2024-02-12T20:23:53.854353066Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 12 20:23:53.884924 env[1658]: time="2024-02-12T20:23:53.884868127Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-qqbzl,Uid:260832f8-1c6f-46eb-91e2-4e731e9995c5,Namespace:calico-system,Attempt:0,} returns sandbox id \"2a4d55c79d32e7310e134db94a3adda83e9f56b5beb9932e134a9789d7bbc12a\"" Feb 12 20:23:54.049000 audit[3244]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=3244 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:54.049000 audit[3244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffd76ed240 a2=0 a3=ffffa6fc66c0 items=0 ppid=2902 pid=3244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:54.049000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:54.065000 audit[3244]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=3244 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:23:54.065000 audit[3244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffd76ed240 a2=0 a3=ffffa6fc66c0 items=0 ppid=2902 pid=3244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:54.065000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:23:54.754650 kubelet[2770]: E0212 20:23:54.754588 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fnk8l" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" Feb 12 20:23:55.082056 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3164797005.mount: Deactivated successfully. Feb 12 20:23:56.326280 env[1658]: time="2024-02-12T20:23:56.326190775Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:56.330969 env[1658]: time="2024-02-12T20:23:56.330895307Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:56.335393 env[1658]: time="2024-02-12T20:23:56.335319030Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:56.339211 env[1658]: time="2024-02-12T20:23:56.339146506Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:56.340571 env[1658]: time="2024-02-12T20:23:56.340500566Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969\"" Feb 12 20:23:56.357953 env[1658]: time="2024-02-12T20:23:56.357885169Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 12 20:23:56.375936 env[1658]: time="2024-02-12T20:23:56.375847298Z" level=info msg="CreateContainer within sandbox \"8d1dbc1bdad373a23ade282d30b80936d94714e30d3ee74752e0d992a19d2b4a\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 12 20:23:56.412624 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1987462753.mount: Deactivated successfully. Feb 12 20:23:56.416841 env[1658]: time="2024-02-12T20:23:56.416758169Z" level=info msg="CreateContainer within sandbox \"8d1dbc1bdad373a23ade282d30b80936d94714e30d3ee74752e0d992a19d2b4a\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"043ca96e65f8e28b54151ba56ac8dcda3b9622d0996c753c9024defc5c2db33f\"" Feb 12 20:23:56.417913 env[1658]: time="2024-02-12T20:23:56.417824738Z" level=info msg="StartContainer for \"043ca96e65f8e28b54151ba56ac8dcda3b9622d0996c753c9024defc5c2db33f\"" Feb 12 20:23:56.471561 systemd[1]: Started cri-containerd-043ca96e65f8e28b54151ba56ac8dcda3b9622d0996c753c9024defc5c2db33f.scope. Feb 12 20:23:56.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.527000 audit: BPF prog-id=138 op=LOAD Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3135 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:56.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034336361393665363566386532386235343135316261353661633864 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3135 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:56.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034336361393665363566386532386235343135316261353661633864 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit: BPF prog-id=139 op=LOAD Feb 12 20:23:56.528000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3135 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:56.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034336361393665363566386532386235343135316261353661633864 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit: BPF prog-id=140 op=LOAD Feb 12 20:23:56.528000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3135 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:56.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034336361393665363566386532386235343135316261353661633864 Feb 12 20:23:56.528000 audit: BPF prog-id=140 op=UNLOAD Feb 12 20:23:56.528000 audit: BPF prog-id=139 op=UNLOAD Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { perfmon } for pid=3256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit[3256]: AVC avc: denied { bpf } for pid=3256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:56.528000 audit: BPF prog-id=141 op=LOAD Feb 12 20:23:56.528000 audit[3256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3135 pid=3256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:56.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034336361393665363566386532386235343135316261353661633864 Feb 12 20:23:56.578845 env[1658]: time="2024-02-12T20:23:56.578679017Z" level=info msg="StartContainer for \"043ca96e65f8e28b54151ba56ac8dcda3b9622d0996c753c9024defc5c2db33f\" returns successfully" Feb 12 20:23:56.754268 kubelet[2770]: E0212 20:23:56.752556 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fnk8l" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" Feb 12 20:23:56.961788 kubelet[2770]: E0212 20:23:56.961737 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.961962 kubelet[2770]: W0212 20:23:56.961800 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.961962 kubelet[2770]: E0212 20:23:56.961841 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.962367 kubelet[2770]: E0212 20:23:56.962314 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.962367 kubelet[2770]: W0212 20:23:56.962358 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.962548 kubelet[2770]: E0212 20:23:56.962392 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.962866 kubelet[2770]: E0212 20:23:56.962817 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.962866 kubelet[2770]: W0212 20:23:56.962846 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.963005 kubelet[2770]: E0212 20:23:56.962875 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.963268 kubelet[2770]: E0212 20:23:56.963208 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.963268 kubelet[2770]: W0212 20:23:56.963247 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.963429 kubelet[2770]: E0212 20:23:56.963306 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.963690 kubelet[2770]: E0212 20:23:56.963652 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.963767 kubelet[2770]: W0212 20:23:56.963691 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.963767 kubelet[2770]: E0212 20:23:56.963718 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.964126 kubelet[2770]: E0212 20:23:56.964079 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.964126 kubelet[2770]: W0212 20:23:56.964107 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.964315 kubelet[2770]: E0212 20:23:56.964134 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.964503 kubelet[2770]: E0212 20:23:56.964469 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.964503 kubelet[2770]: W0212 20:23:56.964496 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.964653 kubelet[2770]: E0212 20:23:56.964524 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.966120 kubelet[2770]: E0212 20:23:56.966070 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.966120 kubelet[2770]: W0212 20:23:56.966113 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.966415 kubelet[2770]: E0212 20:23:56.966151 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.966735 kubelet[2770]: E0212 20:23:56.966696 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.966735 kubelet[2770]: W0212 20:23:56.966726 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.966868 kubelet[2770]: E0212 20:23:56.966757 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.967079 kubelet[2770]: E0212 20:23:56.967046 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.967079 kubelet[2770]: W0212 20:23:56.967072 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.967332 kubelet[2770]: E0212 20:23:56.967103 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.967519 kubelet[2770]: E0212 20:23:56.967483 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.967595 kubelet[2770]: W0212 20:23:56.967551 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.967595 kubelet[2770]: E0212 20:23:56.967582 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.967926 kubelet[2770]: E0212 20:23:56.967880 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.967926 kubelet[2770]: W0212 20:23:56.967920 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.968098 kubelet[2770]: E0212 20:23:56.967948 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.968394 kubelet[2770]: E0212 20:23:56.968356 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.968394 kubelet[2770]: W0212 20:23:56.968386 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.968550 kubelet[2770]: E0212 20:23:56.968415 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.968801 kubelet[2770]: E0212 20:23:56.968763 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.968801 kubelet[2770]: W0212 20:23:56.968791 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.968948 kubelet[2770]: E0212 20:23:56.968819 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.969142 kubelet[2770]: E0212 20:23:56.969110 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.969142 kubelet[2770]: W0212 20:23:56.969136 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.969301 kubelet[2770]: E0212 20:23:56.969165 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.981738 kubelet[2770]: E0212 20:23:56.981697 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.981738 kubelet[2770]: W0212 20:23:56.981732 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.982512 kubelet[2770]: E0212 20:23:56.981766 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.982512 kubelet[2770]: E0212 20:23:56.982158 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.982512 kubelet[2770]: W0212 20:23:56.982177 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.982512 kubelet[2770]: E0212 20:23:56.982215 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.983136 kubelet[2770]: E0212 20:23:56.982835 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.983136 kubelet[2770]: W0212 20:23:56.982866 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.983136 kubelet[2770]: E0212 20:23:56.982925 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.983626 kubelet[2770]: E0212 20:23:56.983512 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.983626 kubelet[2770]: W0212 20:23:56.983540 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.983626 kubelet[2770]: E0212 20:23:56.983587 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.983965 kubelet[2770]: E0212 20:23:56.983936 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.984078 kubelet[2770]: W0212 20:23:56.983964 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.984078 kubelet[2770]: E0212 20:23:56.984007 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.984614 kubelet[2770]: E0212 20:23:56.984581 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.984832 kubelet[2770]: W0212 20:23:56.984612 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.984832 kubelet[2770]: E0212 20:23:56.984737 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.985031 kubelet[2770]: E0212 20:23:56.984953 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.985031 kubelet[2770]: W0212 20:23:56.984968 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.985400 kubelet[2770]: E0212 20:23:56.985181 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.985529 kubelet[2770]: E0212 20:23:56.985497 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.985529 kubelet[2770]: W0212 20:23:56.985517 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.985801 kubelet[2770]: E0212 20:23:56.985581 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.985883 kubelet[2770]: E0212 20:23:56.985831 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.985883 kubelet[2770]: W0212 20:23:56.985862 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.986013 kubelet[2770]: E0212 20:23:56.985903 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.988412 kubelet[2770]: E0212 20:23:56.988346 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.988412 kubelet[2770]: W0212 20:23:56.988400 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.988798 kubelet[2770]: E0212 20:23:56.988451 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.988917 kubelet[2770]: E0212 20:23:56.988862 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.988917 kubelet[2770]: W0212 20:23:56.988881 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.989895 kubelet[2770]: E0212 20:23:56.989088 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.990063 kubelet[2770]: E0212 20:23:56.989952 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.990063 kubelet[2770]: W0212 20:23:56.989979 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.990327 kubelet[2770]: E0212 20:23:56.990273 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.990433 kubelet[2770]: E0212 20:23:56.990339 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.990433 kubelet[2770]: W0212 20:23:56.990355 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.991112 kubelet[2770]: E0212 20:23:56.990589 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.993285 kubelet[2770]: E0212 20:23:56.992396 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.993285 kubelet[2770]: W0212 20:23:56.992431 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.993285 kubelet[2770]: E0212 20:23:56.992480 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.993285 kubelet[2770]: E0212 20:23:56.992975 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.993285 kubelet[2770]: W0212 20:23:56.992999 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.993285 kubelet[2770]: E0212 20:23:56.993040 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.995594 kubelet[2770]: E0212 20:23:56.994607 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.995594 kubelet[2770]: W0212 20:23:56.994637 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.995594 kubelet[2770]: E0212 20:23:56.994825 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:56.996710 kubelet[2770]: E0212 20:23:56.996388 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:56.996710 kubelet[2770]: W0212 20:23:56.996418 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:56.996710 kubelet[2770]: E0212 20:23:56.996465 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.002652 kubelet[2770]: E0212 20:23:56.999347 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.002652 kubelet[2770]: W0212 20:23:56.999389 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.002652 kubelet[2770]: E0212 20:23:56.999442 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.883413 kubelet[2770]: I0212 20:23:57.883381 2770 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 12 20:23:57.978977 kubelet[2770]: E0212 20:23:57.978943 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.979197 kubelet[2770]: W0212 20:23:57.979168 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.979385 kubelet[2770]: E0212 20:23:57.979362 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.979821 kubelet[2770]: E0212 20:23:57.979796 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.979983 kubelet[2770]: W0212 20:23:57.979957 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.980108 kubelet[2770]: E0212 20:23:57.980086 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.981417 kubelet[2770]: E0212 20:23:57.981383 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.981622 kubelet[2770]: W0212 20:23:57.981593 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.981764 kubelet[2770]: E0212 20:23:57.981743 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.983437 kubelet[2770]: E0212 20:23:57.983403 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.983624 kubelet[2770]: W0212 20:23:57.983596 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.983771 kubelet[2770]: E0212 20:23:57.983748 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.985434 kubelet[2770]: E0212 20:23:57.985400 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.985617 kubelet[2770]: W0212 20:23:57.985589 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.985768 kubelet[2770]: E0212 20:23:57.985746 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.987438 kubelet[2770]: E0212 20:23:57.987405 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.987643 kubelet[2770]: W0212 20:23:57.987615 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.987796 kubelet[2770]: E0212 20:23:57.987774 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.989355 kubelet[2770]: E0212 20:23:57.989323 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.989565 kubelet[2770]: W0212 20:23:57.989537 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.989704 kubelet[2770]: E0212 20:23:57.989682 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.994539 kubelet[2770]: E0212 20:23:57.994502 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.994759 kubelet[2770]: W0212 20:23:57.994730 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.994915 kubelet[2770]: E0212 20:23:57.994892 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:57.997467 kubelet[2770]: E0212 20:23:57.997433 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:57.997656 kubelet[2770]: W0212 20:23:57.997628 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:57.997835 kubelet[2770]: E0212 20:23:57.997785 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.005118 kubelet[2770]: E0212 20:23:58.005046 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.005388 kubelet[2770]: W0212 20:23:58.005349 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.005587 kubelet[2770]: E0212 20:23:58.005563 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.007683 kubelet[2770]: E0212 20:23:58.007620 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.007941 kubelet[2770]: W0212 20:23:58.007898 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.008142 kubelet[2770]: E0212 20:23:58.008104 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.008921 kubelet[2770]: E0212 20:23:58.008864 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.009104 kubelet[2770]: W0212 20:23:58.009077 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.009317 kubelet[2770]: E0212 20:23:58.009294 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.012526 kubelet[2770]: E0212 20:23:58.012489 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.012772 kubelet[2770]: W0212 20:23:58.012743 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.012951 kubelet[2770]: E0212 20:23:58.012929 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.021350 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3135876873.mount: Deactivated successfully. Feb 12 20:23:58.023193 kubelet[2770]: E0212 20:23:58.023161 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.023422 kubelet[2770]: W0212 20:23:58.023394 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.023626 kubelet[2770]: E0212 20:23:58.023578 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.024429 kubelet[2770]: E0212 20:23:58.024397 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.024603 kubelet[2770]: W0212 20:23:58.024576 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.024731 kubelet[2770]: E0212 20:23:58.024706 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.029448 kubelet[2770]: E0212 20:23:58.029399 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.029661 kubelet[2770]: W0212 20:23:58.029632 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.029791 kubelet[2770]: E0212 20:23:58.029769 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.032646 kubelet[2770]: E0212 20:23:58.032547 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.032646 kubelet[2770]: W0212 20:23:58.032586 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.032646 kubelet[2770]: E0212 20:23:58.032639 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.034307 kubelet[2770]: E0212 20:23:58.033062 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.034307 kubelet[2770]: W0212 20:23:58.033090 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.034648 kubelet[2770]: E0212 20:23:58.034614 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.035928 kubelet[2770]: E0212 20:23:58.035483 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.035928 kubelet[2770]: W0212 20:23:58.035521 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.035928 kubelet[2770]: E0212 20:23:58.035930 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.036285 kubelet[2770]: W0212 20:23:58.035952 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.040373 kubelet[2770]: E0212 20:23:58.036289 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.040373 kubelet[2770]: W0212 20:23:58.036306 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.040373 kubelet[2770]: E0212 20:23:58.036335 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.040373 kubelet[2770]: E0212 20:23:58.036381 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.040373 kubelet[2770]: E0212 20:23:58.036432 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.040373 kubelet[2770]: E0212 20:23:58.036708 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.040373 kubelet[2770]: W0212 20:23:58.036727 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.040373 kubelet[2770]: E0212 20:23:58.036767 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.040373 kubelet[2770]: E0212 20:23:58.038400 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.040373 kubelet[2770]: W0212 20:23:58.038428 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.041012 kubelet[2770]: E0212 20:23:58.038478 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.041012 kubelet[2770]: E0212 20:23:58.038873 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.041012 kubelet[2770]: W0212 20:23:58.038891 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.041012 kubelet[2770]: E0212 20:23:58.038948 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.041589 kubelet[2770]: E0212 20:23:58.041557 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.041740 kubelet[2770]: W0212 20:23:58.041713 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.049666 kubelet[2770]: E0212 20:23:58.049634 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.049883 kubelet[2770]: W0212 20:23:58.049855 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.055530 kubelet[2770]: E0212 20:23:58.055469 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.055758 kubelet[2770]: W0212 20:23:58.055730 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.056514 kubelet[2770]: E0212 20:23:58.055873 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.056514 kubelet[2770]: E0212 20:23:58.055971 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.056801 kubelet[2770]: E0212 20:23:58.056778 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.056942 kubelet[2770]: W0212 20:23:58.056916 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.057096 kubelet[2770]: E0212 20:23:58.057075 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.059930 kubelet[2770]: E0212 20:23:58.059895 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.061663 kubelet[2770]: E0212 20:23:58.061618 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.062188 kubelet[2770]: W0212 20:23:58.062157 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.066545 kubelet[2770]: E0212 20:23:58.063346 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.066545 kubelet[2770]: E0212 20:23:58.064158 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.066545 kubelet[2770]: W0212 20:23:58.064181 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.066545 kubelet[2770]: E0212 20:23:58.064349 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.066545 kubelet[2770]: E0212 20:23:58.064591 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.066545 kubelet[2770]: W0212 20:23:58.064609 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.066545 kubelet[2770]: E0212 20:23:58.064634 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.066545 kubelet[2770]: E0212 20:23:58.064933 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.066545 kubelet[2770]: W0212 20:23:58.064949 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.066545 kubelet[2770]: E0212 20:23:58.064978 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.067168 kubelet[2770]: E0212 20:23:58.065883 2770 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 12 20:23:58.067168 kubelet[2770]: W0212 20:23:58.065907 2770 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 12 20:23:58.067168 kubelet[2770]: E0212 20:23:58.065940 2770 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 12 20:23:58.200617 env[1658]: time="2024-02-12T20:23:58.200473036Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:58.207134 env[1658]: time="2024-02-12T20:23:58.207079773Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:58.210331 env[1658]: time="2024-02-12T20:23:58.210259813Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:58.224301 env[1658]: time="2024-02-12T20:23:58.224219015Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:23:58.225070 env[1658]: time="2024-02-12T20:23:58.224994961Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57\"" Feb 12 20:23:58.233537 env[1658]: time="2024-02-12T20:23:58.233472687Z" level=info msg="CreateContainer within sandbox \"2a4d55c79d32e7310e134db94a3adda83e9f56b5beb9932e134a9789d7bbc12a\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 12 20:23:58.270940 env[1658]: time="2024-02-12T20:23:58.270848438Z" level=info msg="CreateContainer within sandbox \"2a4d55c79d32e7310e134db94a3adda83e9f56b5beb9932e134a9789d7bbc12a\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"6b428fd758cc8789bc6da6bbd71449128fd85c3794a3c68914d5e1020d55e7af\"" Feb 12 20:23:58.272420 env[1658]: time="2024-02-12T20:23:58.272344289Z" level=info msg="StartContainer for \"6b428fd758cc8789bc6da6bbd71449128fd85c3794a3c68914d5e1020d55e7af\"" Feb 12 20:23:58.329027 systemd[1]: Started cri-containerd-6b428fd758cc8789bc6da6bbd71449128fd85c3794a3c68914d5e1020d55e7af.scope. Feb 12 20:23:58.400798 kernel: kauditd_printk_skb: 179 callbacks suppressed Feb 12 20:23:58.400913 kernel: audit: type=1400 audit(1707769438.389:1156): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.389000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.389000 audit[3362]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3198 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:58.415306 kernel: audit: type=1300 audit(1707769438.389:1156): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3198 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:58.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662343238666437353863633837383962633664613662626437313434 Feb 12 20:23:58.429276 kernel: audit: type=1327 audit(1707769438.389:1156): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662343238666437353863633837383962633664613662626437313434 Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.446305 kernel: audit: type=1400 audit(1707769438.390:1157): avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.464303 kernel: audit: type=1400 audit(1707769438.390:1157): avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.464439 kernel: audit: type=1400 audit(1707769438.390:1157): avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.472778 kernel: audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.492761 kernel: audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.492882 kernel: audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.502416 env[1658]: time="2024-02-12T20:23:58.502355749Z" level=info msg="StartContainer for \"6b428fd758cc8789bc6da6bbd71449128fd85c3794a3c68914d5e1020d55e7af\" returns successfully" Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.390000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.390000 audit: BPF prog-id=142 op=LOAD Feb 12 20:23:58.390000 audit[3362]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3198 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:58.390000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662343238666437353863633837383962633664613662626437313434 Feb 12 20:23:58.392000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.392000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.504320 kernel: audit: type=1400 audit(1707769438.390:1157): avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.392000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.392000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.392000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.392000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.392000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.392000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.392000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.392000 audit: BPF prog-id=143 op=LOAD Feb 12 20:23:58.392000 audit[3362]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3198 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:58.392000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662343238666437353863633837383962633664613662626437313434 Feb 12 20:23:58.403000 audit: BPF prog-id=143 op=UNLOAD Feb 12 20:23:58.403000 audit: BPF prog-id=142 op=UNLOAD Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { perfmon } for pid=3362 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit[3362]: AVC avc: denied { bpf } for pid=3362 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:23:58.403000 audit: BPF prog-id=144 op=LOAD Feb 12 20:23:58.403000 audit[3362]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3198 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:23:58.403000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662343238666437353863633837383962633664613662626437313434 Feb 12 20:23:58.575292 systemd[1]: cri-containerd-6b428fd758cc8789bc6da6bbd71449128fd85c3794a3c68914d5e1020d55e7af.scope: Deactivated successfully. Feb 12 20:23:58.579000 audit: BPF prog-id=144 op=UNLOAD Feb 12 20:23:58.627270 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6b428fd758cc8789bc6da6bbd71449128fd85c3794a3c68914d5e1020d55e7af-rootfs.mount: Deactivated successfully. Feb 12 20:23:58.754510 kubelet[2770]: E0212 20:23:58.754268 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fnk8l" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" Feb 12 20:23:58.915453 kubelet[2770]: I0212 20:23:58.915404 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-6d76d88d66-6dm9x" podStartSLOduration=3.426851543 podCreationTimestamp="2024-02-12 20:23:53 +0000 UTC" firstStartedPulling="2024-02-12 20:23:53.853469148 +0000 UTC m=+21.458142589" lastFinishedPulling="2024-02-12 20:23:56.341965061 +0000 UTC m=+23.946638574" observedRunningTime="2024-02-12 20:23:56.917763875 +0000 UTC m=+24.522437424" watchObservedRunningTime="2024-02-12 20:23:58.915347528 +0000 UTC m=+26.520020981" Feb 12 20:23:58.919194 env[1658]: time="2024-02-12T20:23:58.918690178Z" level=info msg="shim disconnected" id=6b428fd758cc8789bc6da6bbd71449128fd85c3794a3c68914d5e1020d55e7af Feb 12 20:23:58.919194 env[1658]: time="2024-02-12T20:23:58.918804392Z" level=warning msg="cleaning up after shim disconnected" id=6b428fd758cc8789bc6da6bbd71449128fd85c3794a3c68914d5e1020d55e7af namespace=k8s.io Feb 12 20:23:58.919194 env[1658]: time="2024-02-12T20:23:58.918827852Z" level=info msg="cleaning up dead shim" Feb 12 20:23:58.933728 env[1658]: time="2024-02-12T20:23:58.933645691Z" level=warning msg="cleanup warnings time=\"2024-02-12T20:23:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3399 runtime=io.containerd.runc.v2\n" Feb 12 20:23:59.895417 env[1658]: time="2024-02-12T20:23:59.895352936Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 12 20:24:00.756771 kubelet[2770]: E0212 20:24:00.756724 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fnk8l" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" Feb 12 20:24:01.283443 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3102532957.mount: Deactivated successfully. Feb 12 20:24:02.755430 kubelet[2770]: E0212 20:24:02.753588 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fnk8l" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" Feb 12 20:24:04.754887 kubelet[2770]: E0212 20:24:04.754828 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-fnk8l" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" Feb 12 20:24:05.152620 env[1658]: time="2024-02-12T20:24:05.152556274Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:05.155640 env[1658]: time="2024-02-12T20:24:05.155575152Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:05.158537 env[1658]: time="2024-02-12T20:24:05.158468294Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:05.161353 env[1658]: time="2024-02-12T20:24:05.161280666Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:05.163000 env[1658]: time="2024-02-12T20:24:05.162929051Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b\"" Feb 12 20:24:05.171321 env[1658]: time="2024-02-12T20:24:05.171265138Z" level=info msg="CreateContainer within sandbox \"2a4d55c79d32e7310e134db94a3adda83e9f56b5beb9932e134a9789d7bbc12a\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 12 20:24:05.207568 env[1658]: time="2024-02-12T20:24:05.207440521Z" level=info msg="CreateContainer within sandbox \"2a4d55c79d32e7310e134db94a3adda83e9f56b5beb9932e134a9789d7bbc12a\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"3f94536b21cc6c83a7a041075abef77adb5f213e36ebf6371ca43d1ad0566f36\"" Feb 12 20:24:05.210987 env[1658]: time="2024-02-12T20:24:05.210853713Z" level=info msg="StartContainer for \"3f94536b21cc6c83a7a041075abef77adb5f213e36ebf6371ca43d1ad0566f36\"" Feb 12 20:24:05.260878 systemd[1]: Started cri-containerd-3f94536b21cc6c83a7a041075abef77adb5f213e36ebf6371ca43d1ad0566f36.scope. Feb 12 20:24:05.319438 kernel: kauditd_printk_skb: 34 callbacks suppressed Feb 12 20:24:05.319659 kernel: audit: type=1400 audit(1707769445.308:1163): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3198 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:05.333987 kernel: audit: type=1300 audit(1707769445.308:1163): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=3198 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:05.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366393435333662323163633663383361376130343130373561626566 Feb 12 20:24:05.348526 kernel: audit: type=1327 audit(1707769445.308:1163): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366393435333662323163633663383361376130343130373561626566 Feb 12 20:24:05.348663 kernel: audit: type=1400 audit(1707769445.308:1164): avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.366612 kernel: audit: type=1400 audit(1707769445.308:1164): avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.366708 kernel: audit: type=1400 audit(1707769445.308:1164): avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.374273 kernel: audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.389052 kernel: audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.389165 kernel: audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.404073 env[1658]: time="2024-02-12T20:24:05.402886620Z" level=info msg="StartContainer for \"3f94536b21cc6c83a7a041075abef77adb5f213e36ebf6371ca43d1ad0566f36\" returns successfully" Feb 12 20:24:05.410987 kernel: audit: type=1400 audit(1707769445.308:1164): avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.308000 audit: BPF prog-id=145 op=LOAD Feb 12 20:24:05.308000 audit[3424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=3198 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:05.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366393435333662323163633663383361376130343130373561626566 Feb 12 20:24:05.310000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.310000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.310000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.310000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.310000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.310000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.310000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.310000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.310000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.310000 audit: BPF prog-id=146 op=LOAD Feb 12 20:24:05.310000 audit[3424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=3198 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:05.310000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366393435333662323163633663383361376130343130373561626566 Feb 12 20:24:05.318000 audit: BPF prog-id=146 op=UNLOAD Feb 12 20:24:05.318000 audit: BPF prog-id=145 op=UNLOAD Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { perfmon } for pid=3424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit[3424]: AVC avc: denied { bpf } for pid=3424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:05.318000 audit: BPF prog-id=147 op=LOAD Feb 12 20:24:05.318000 audit[3424]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=3198 pid=3424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:05.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3366393435333662323163633663383361376130343130373561626566 Feb 12 20:24:06.662432 env[1658]: time="2024-02-12T20:24:06.662285194Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 12 20:24:06.668288 systemd[1]: cri-containerd-3f94536b21cc6c83a7a041075abef77adb5f213e36ebf6371ca43d1ad0566f36.scope: Deactivated successfully. Feb 12 20:24:06.672000 audit: BPF prog-id=147 op=UNLOAD Feb 12 20:24:06.703756 kubelet[2770]: I0212 20:24:06.703681 2770 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 12 20:24:06.714156 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3f94536b21cc6c83a7a041075abef77adb5f213e36ebf6371ca43d1ad0566f36-rootfs.mount: Deactivated successfully. Feb 12 20:24:06.744975 kubelet[2770]: I0212 20:24:06.744859 2770 topology_manager.go:215] "Topology Admit Handler" podUID="25850ecf-3dfe-4867-be3a-0409d16888a5" podNamespace="kube-system" podName="coredns-5dd5756b68-kxh78" Feb 12 20:24:06.761733 systemd[1]: Created slice kubepods-burstable-pod25850ecf_3dfe_4867_be3a_0409d16888a5.slice. Feb 12 20:24:06.772645 systemd[1]: Created slice kubepods-besteffort-podd3b19469_1423_4b17_a2ba_26ee2310cd0f.slice. Feb 12 20:24:06.789757 kubelet[2770]: I0212 20:24:06.789719 2770 topology_manager.go:215] "Topology Admit Handler" podUID="46bdc67e-765a-4fd6-b6c9-3528e9d0efc6" podNamespace="kube-system" podName="coredns-5dd5756b68-bfbcn" Feb 12 20:24:06.796022 kubelet[2770]: I0212 20:24:06.795981 2770 topology_manager.go:215] "Topology Admit Handler" podUID="d565c299-4caa-4ebf-8023-58ec6ac3a196" podNamespace="calico-system" podName="calico-kube-controllers-55685b7698-cwmxq" Feb 12 20:24:06.808047 env[1658]: time="2024-02-12T20:24:06.807523459Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-fnk8l,Uid:d3b19469-1423-4b17-a2ba-26ee2310cd0f,Namespace:calico-system,Attempt:0,}" Feb 12 20:24:06.813396 kubelet[2770]: I0212 20:24:06.813225 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-r7kms\" (UniqueName: \"kubernetes.io/projected/46bdc67e-765a-4fd6-b6c9-3528e9d0efc6-kube-api-access-r7kms\") pod \"coredns-5dd5756b68-bfbcn\" (UID: \"46bdc67e-765a-4fd6-b6c9-3528e9d0efc6\") " pod="kube-system/coredns-5dd5756b68-bfbcn" Feb 12 20:24:06.818225 kubelet[2770]: I0212 20:24:06.818176 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wkzt5\" (UniqueName: \"kubernetes.io/projected/25850ecf-3dfe-4867-be3a-0409d16888a5-kube-api-access-wkzt5\") pod \"coredns-5dd5756b68-kxh78\" (UID: \"25850ecf-3dfe-4867-be3a-0409d16888a5\") " pod="kube-system/coredns-5dd5756b68-kxh78" Feb 12 20:24:06.821014 kubelet[2770]: I0212 20:24:06.818650 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/46bdc67e-765a-4fd6-b6c9-3528e9d0efc6-config-volume\") pod \"coredns-5dd5756b68-bfbcn\" (UID: \"46bdc67e-765a-4fd6-b6c9-3528e9d0efc6\") " pod="kube-system/coredns-5dd5756b68-bfbcn" Feb 12 20:24:06.821014 kubelet[2770]: I0212 20:24:06.818802 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/25850ecf-3dfe-4867-be3a-0409d16888a5-config-volume\") pod \"coredns-5dd5756b68-kxh78\" (UID: \"25850ecf-3dfe-4867-be3a-0409d16888a5\") " pod="kube-system/coredns-5dd5756b68-kxh78" Feb 12 20:24:06.825969 systemd[1]: Created slice kubepods-burstable-pod46bdc67e_765a_4fd6_b6c9_3528e9d0efc6.slice. Feb 12 20:24:06.838979 systemd[1]: Created slice kubepods-besteffort-podd565c299_4caa_4ebf_8023_58ec6ac3a196.slice. Feb 12 20:24:06.928304 kubelet[2770]: I0212 20:24:06.928148 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d565c299-4caa-4ebf-8023-58ec6ac3a196-tigera-ca-bundle\") pod \"calico-kube-controllers-55685b7698-cwmxq\" (UID: \"d565c299-4caa-4ebf-8023-58ec6ac3a196\") " pod="calico-system/calico-kube-controllers-55685b7698-cwmxq" Feb 12 20:24:06.928607 kubelet[2770]: I0212 20:24:06.928580 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bm652\" (UniqueName: \"kubernetes.io/projected/d565c299-4caa-4ebf-8023-58ec6ac3a196-kube-api-access-bm652\") pod \"calico-kube-controllers-55685b7698-cwmxq\" (UID: \"d565c299-4caa-4ebf-8023-58ec6ac3a196\") " pod="calico-system/calico-kube-controllers-55685b7698-cwmxq" Feb 12 20:24:07.095659 env[1658]: time="2024-02-12T20:24:07.095583435Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-kxh78,Uid:25850ecf-3dfe-4867-be3a-0409d16888a5,Namespace:kube-system,Attempt:0,}" Feb 12 20:24:07.104816 env[1658]: time="2024-02-12T20:24:07.104726135Z" level=error msg="Failed to destroy network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.105658 env[1658]: time="2024-02-12T20:24:07.105595417Z" level=error msg="encountered an error cleaning up failed sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.105920 env[1658]: time="2024-02-12T20:24:07.105868318Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-fnk8l,Uid:d3b19469-1423-4b17-a2ba-26ee2310cd0f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.106525 kubelet[2770]: E0212 20:24:07.106457 2770 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.106734 kubelet[2770]: E0212 20:24:07.106568 2770 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-fnk8l" Feb 12 20:24:07.106734 kubelet[2770]: E0212 20:24:07.106609 2770 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-fnk8l" Feb 12 20:24:07.106734 kubelet[2770]: E0212 20:24:07.106710 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-fnk8l_calico-system(d3b19469-1423-4b17-a2ba-26ee2310cd0f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-fnk8l_calico-system(d3b19469-1423-4b17-a2ba-26ee2310cd0f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-fnk8l" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" Feb 12 20:24:07.137000 env[1658]: time="2024-02-12T20:24:07.136944965Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-bfbcn,Uid:46bdc67e-765a-4fd6-b6c9-3528e9d0efc6,Namespace:kube-system,Attempt:0,}" Feb 12 20:24:07.169929 env[1658]: time="2024-02-12T20:24:07.169852396Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55685b7698-cwmxq,Uid:d565c299-4caa-4ebf-8023-58ec6ac3a196,Namespace:calico-system,Attempt:0,}" Feb 12 20:24:07.626573 env[1658]: time="2024-02-12T20:24:07.626468203Z" level=info msg="shim disconnected" id=3f94536b21cc6c83a7a041075abef77adb5f213e36ebf6371ca43d1ad0566f36 Feb 12 20:24:07.626573 env[1658]: time="2024-02-12T20:24:07.626571570Z" level=warning msg="cleaning up after shim disconnected" id=3f94536b21cc6c83a7a041075abef77adb5f213e36ebf6371ca43d1ad0566f36 namespace=k8s.io Feb 12 20:24:07.626826 env[1658]: time="2024-02-12T20:24:07.626594466Z" level=info msg="cleaning up dead shim" Feb 12 20:24:07.658124 env[1658]: time="2024-02-12T20:24:07.658053585Z" level=warning msg="cleanup warnings time=\"2024-02-12T20:24:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3506 runtime=io.containerd.runc.v2\n" Feb 12 20:24:07.738525 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2-shm.mount: Deactivated successfully. Feb 12 20:24:07.824593 env[1658]: time="2024-02-12T20:24:07.824510981Z" level=error msg="Failed to destroy network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.828080 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e-shm.mount: Deactivated successfully. Feb 12 20:24:07.830891 env[1658]: time="2024-02-12T20:24:07.830796548Z" level=error msg="encountered an error cleaning up failed sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.831080 env[1658]: time="2024-02-12T20:24:07.830916535Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55685b7698-cwmxq,Uid:d565c299-4caa-4ebf-8023-58ec6ac3a196,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.831418 kubelet[2770]: E0212 20:24:07.831374 2770 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.834307 kubelet[2770]: E0212 20:24:07.831477 2770 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-55685b7698-cwmxq" Feb 12 20:24:07.834307 kubelet[2770]: E0212 20:24:07.831543 2770 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-55685b7698-cwmxq" Feb 12 20:24:07.834307 kubelet[2770]: E0212 20:24:07.832092 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-55685b7698-cwmxq_calico-system(d565c299-4caa-4ebf-8023-58ec6ac3a196)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-55685b7698-cwmxq_calico-system(d565c299-4caa-4ebf-8023-58ec6ac3a196)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-55685b7698-cwmxq" podUID="d565c299-4caa-4ebf-8023-58ec6ac3a196" Feb 12 20:24:07.843524 env[1658]: time="2024-02-12T20:24:07.843432326Z" level=error msg="Failed to destroy network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.847078 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847-shm.mount: Deactivated successfully. Feb 12 20:24:07.850991 env[1658]: time="2024-02-12T20:24:07.848702512Z" level=error msg="encountered an error cleaning up failed sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.850991 env[1658]: time="2024-02-12T20:24:07.848810546Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-kxh78,Uid:25850ecf-3dfe-4867-be3a-0409d16888a5,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.854301 kubelet[2770]: E0212 20:24:07.851648 2770 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.854301 kubelet[2770]: E0212 20:24:07.851791 2770 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-kxh78" Feb 12 20:24:07.854301 kubelet[2770]: E0212 20:24:07.851831 2770 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-kxh78" Feb 12 20:24:07.854619 kubelet[2770]: E0212 20:24:07.851966 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-kxh78_kube-system(25850ecf-3dfe-4867-be3a-0409d16888a5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-kxh78_kube-system(25850ecf-3dfe-4867-be3a-0409d16888a5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-kxh78" podUID="25850ecf-3dfe-4867-be3a-0409d16888a5" Feb 12 20:24:07.855048 env[1658]: time="2024-02-12T20:24:07.854979739Z" level=error msg="Failed to destroy network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.859761 env[1658]: time="2024-02-12T20:24:07.859663347Z" level=error msg="encountered an error cleaning up failed sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.860030 env[1658]: time="2024-02-12T20:24:07.859977696Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-bfbcn,Uid:46bdc67e-765a-4fd6-b6c9-3528e9d0efc6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.863438 kubelet[2770]: E0212 20:24:07.861550 2770 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:07.863438 kubelet[2770]: E0212 20:24:07.861622 2770 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-bfbcn" Feb 12 20:24:07.863438 kubelet[2770]: E0212 20:24:07.861660 2770 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-bfbcn" Feb 12 20:24:07.862610 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06-shm.mount: Deactivated successfully. Feb 12 20:24:07.863894 kubelet[2770]: E0212 20:24:07.861738 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-bfbcn_kube-system(46bdc67e-765a-4fd6-b6c9-3528e9d0efc6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-bfbcn_kube-system(46bdc67e-765a-4fd6-b6c9-3528e9d0efc6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-bfbcn" podUID="46bdc67e-765a-4fd6-b6c9-3528e9d0efc6" Feb 12 20:24:07.933597 kubelet[2770]: I0212 20:24:07.933549 2770 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:07.937488 env[1658]: time="2024-02-12T20:24:07.937422902Z" level=info msg="StopPodSandbox for \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\"" Feb 12 20:24:07.941137 kubelet[2770]: I0212 20:24:07.941090 2770 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:07.945199 env[1658]: time="2024-02-12T20:24:07.945055370Z" level=info msg="StopPodSandbox for \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\"" Feb 12 20:24:07.946581 kubelet[2770]: I0212 20:24:07.946006 2770 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:07.949424 env[1658]: time="2024-02-12T20:24:07.947784704Z" level=info msg="StopPodSandbox for \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\"" Feb 12 20:24:07.957291 env[1658]: time="2024-02-12T20:24:07.956772785Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 12 20:24:07.959602 kubelet[2770]: I0212 20:24:07.958506 2770 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:07.961305 env[1658]: time="2024-02-12T20:24:07.960692938Z" level=info msg="StopPodSandbox for \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\"" Feb 12 20:24:08.067493 env[1658]: time="2024-02-12T20:24:08.067404185Z" level=error msg="StopPodSandbox for \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\" failed" error="failed to destroy network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:08.067881 kubelet[2770]: E0212 20:24:08.067806 2770 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:08.068021 kubelet[2770]: E0212 20:24:08.067932 2770 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06"} Feb 12 20:24:08.068021 kubelet[2770]: E0212 20:24:08.067997 2770 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"46bdc67e-765a-4fd6-b6c9-3528e9d0efc6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 20:24:08.068321 kubelet[2770]: E0212 20:24:08.068050 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"46bdc67e-765a-4fd6-b6c9-3528e9d0efc6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-bfbcn" podUID="46bdc67e-765a-4fd6-b6c9-3528e9d0efc6" Feb 12 20:24:08.080346 env[1658]: time="2024-02-12T20:24:08.080206044Z" level=error msg="StopPodSandbox for \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\" failed" error="failed to destroy network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:08.080632 kubelet[2770]: E0212 20:24:08.080583 2770 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:08.080745 kubelet[2770]: E0212 20:24:08.080649 2770 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847"} Feb 12 20:24:08.080745 kubelet[2770]: E0212 20:24:08.080711 2770 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"25850ecf-3dfe-4867-be3a-0409d16888a5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 20:24:08.080980 kubelet[2770]: E0212 20:24:08.080767 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"25850ecf-3dfe-4867-be3a-0409d16888a5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-kxh78" podUID="25850ecf-3dfe-4867-be3a-0409d16888a5" Feb 12 20:24:08.105700 env[1658]: time="2024-02-12T20:24:08.105603868Z" level=error msg="StopPodSandbox for \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\" failed" error="failed to destroy network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:08.105990 kubelet[2770]: E0212 20:24:08.105949 2770 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:08.106140 kubelet[2770]: E0212 20:24:08.106016 2770 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2"} Feb 12 20:24:08.106140 kubelet[2770]: E0212 20:24:08.106092 2770 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d3b19469-1423-4b17-a2ba-26ee2310cd0f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 20:24:08.106385 kubelet[2770]: E0212 20:24:08.106152 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d3b19469-1423-4b17-a2ba-26ee2310cd0f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-fnk8l" podUID="d3b19469-1423-4b17-a2ba-26ee2310cd0f" Feb 12 20:24:08.114589 env[1658]: time="2024-02-12T20:24:08.114498209Z" level=error msg="StopPodSandbox for \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\" failed" error="failed to destroy network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 12 20:24:08.114882 kubelet[2770]: E0212 20:24:08.114841 2770 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:08.115113 kubelet[2770]: E0212 20:24:08.114905 2770 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e"} Feb 12 20:24:08.115113 kubelet[2770]: E0212 20:24:08.114974 2770 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d565c299-4caa-4ebf-8023-58ec6ac3a196\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 12 20:24:08.115113 kubelet[2770]: E0212 20:24:08.115068 2770 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d565c299-4caa-4ebf-8023-58ec6ac3a196\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-55685b7698-cwmxq" podUID="d565c299-4caa-4ebf-8023-58ec6ac3a196" Feb 12 20:24:10.621338 kubelet[2770]: I0212 20:24:10.621285 2770 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 12 20:24:10.726675 kernel: kauditd_printk_skb: 34 callbacks suppressed Feb 12 20:24:10.726834 kernel: audit: type=1325 audit(1707769450.717:1170): table=filter:95 family=2 entries=15 op=nft_register_rule pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:10.717000 audit[3689]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:10.717000 audit[3689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe9bf7020 a2=0 a3=ffff8f3a56c0 items=0 ppid=2902 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:10.741101 kernel: audit: type=1300 audit(1707769450.717:1170): arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe9bf7020 a2=0 a3=ffff8f3a56c0 items=0 ppid=2902 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:10.717000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:10.747926 kernel: audit: type=1327 audit(1707769450.717:1170): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:10.740000 audit[3689]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:10.754604 kernel: audit: type=1325 audit(1707769450.740:1171): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:10.740000 audit[3689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6068 a0=3 a1=ffffe9bf7020 a2=0 a3=ffff8f3a56c0 items=0 ppid=2902 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:10.767557 kernel: audit: type=1300 audit(1707769450.740:1171): arch=c00000b7 syscall=211 success=yes exit=6068 a0=3 a1=ffffe9bf7020 a2=0 a3=ffff8f3a56c0 items=0 ppid=2902 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:10.776319 kernel: audit: type=1327 audit(1707769450.740:1171): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:10.740000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:16.284719 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2018530616.mount: Deactivated successfully. Feb 12 20:24:16.375561 env[1658]: time="2024-02-12T20:24:16.375501981Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:16.378135 env[1658]: time="2024-02-12T20:24:16.378085198Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:16.380448 env[1658]: time="2024-02-12T20:24:16.380387150Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:16.382889 env[1658]: time="2024-02-12T20:24:16.382842424Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:16.383906 env[1658]: time="2024-02-12T20:24:16.383856379Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774\"" Feb 12 20:24:16.417446 env[1658]: time="2024-02-12T20:24:16.417381395Z" level=info msg="CreateContainer within sandbox \"2a4d55c79d32e7310e134db94a3adda83e9f56b5beb9932e134a9789d7bbc12a\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 12 20:24:16.444061 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3983472320.mount: Deactivated successfully. Feb 12 20:24:16.451750 env[1658]: time="2024-02-12T20:24:16.451667421Z" level=info msg="CreateContainer within sandbox \"2a4d55c79d32e7310e134db94a3adda83e9f56b5beb9932e134a9789d7bbc12a\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"b4eb01e1bb3ef72dbe690a3f296fa89b332a17afc4446eb1f510f426c4a9c4bd\"" Feb 12 20:24:16.453045 env[1658]: time="2024-02-12T20:24:16.452995569Z" level=info msg="StartContainer for \"b4eb01e1bb3ef72dbe690a3f296fa89b332a17afc4446eb1f510f426c4a9c4bd\"" Feb 12 20:24:16.488835 systemd[1]: Started cri-containerd-b4eb01e1bb3ef72dbe690a3f296fa89b332a17afc4446eb1f510f426c4a9c4bd.scope. Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3198 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.555922 kernel: audit: type=1400 audit(1707769456.534:1172): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.556101 kernel: audit: type=1300 audit(1707769456.534:1172): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3198 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.556179 kernel: audit: type=1327 audit(1707769456.534:1172): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656230316531626233656637326462653639306133663239366661 Feb 12 20:24:16.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656230316531626233656637326462653639306133663239366661 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.574680 kernel: audit: type=1400 audit(1707769456.534:1173): avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.585650 kernel: audit: type=1400 audit(1707769456.534:1173): avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.594867 kernel: audit: type=1400 audit(1707769456.534:1173): avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.608191 kernel: audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.616748 kernel: audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.617930 env[1658]: time="2024-02-12T20:24:16.617852190Z" level=info msg="StartContainer for \"b4eb01e1bb3ef72dbe690a3f296fa89b332a17afc4446eb1f510f426c4a9c4bd\" returns successfully" Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.625670 kernel: audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.634024 kernel: audit: type=1400 audit(1707769456.534:1173): avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit: BPF prog-id=148 op=LOAD Feb 12 20:24:16.534000 audit[3701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3198 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656230316531626233656637326462653639306133663239366661 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit: BPF prog-id=149 op=LOAD Feb 12 20:24:16.534000 audit[3701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3198 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656230316531626233656637326462653639306133663239366661 Feb 12 20:24:16.534000 audit: BPF prog-id=149 op=UNLOAD Feb 12 20:24:16.534000 audit: BPF prog-id=148 op=UNLOAD Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:16.534000 audit: BPF prog-id=150 op=LOAD Feb 12 20:24:16.534000 audit[3701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3198 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:16.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234656230316531626233656637326462653639306133663239366661 Feb 12 20:24:16.753409 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 12 20:24:16.753566 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 12 20:24:18.027774 systemd[1]: run-containerd-runc-k8s.io-b4eb01e1bb3ef72dbe690a3f296fa89b332a17afc4446eb1f510f426c4a9c4bd-runc.l8thbv.mount: Deactivated successfully. Feb 12 20:24:18.468000 audit[3834]: AVC avc: denied { write } for pid=3834 comm="tee" name="fd" dev="proc" ino=20347 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:24:18.468000 audit[3834]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd0a81983 a2=241 a3=1b6 items=1 ppid=3815 pid=3834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:18.468000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 12 20:24:18.468000 audit: PATH item=0 name="/dev/fd/63" inode=20342 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:18.468000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:24:18.508000 audit[3849]: AVC avc: denied { write } for pid=3849 comm="tee" name="fd" dev="proc" ino=20962 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:24:18.508000 audit[3849]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc9f46985 a2=241 a3=1b6 items=1 ppid=3813 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:18.508000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 12 20:24:18.508000 audit: PATH item=0 name="/dev/fd/63" inode=20353 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:18.508000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:24:18.532000 audit[3860]: AVC avc: denied { write } for pid=3860 comm="tee" name="fd" dev="proc" ino=20973 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:24:18.532000 audit[3860]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff2fa0974 a2=241 a3=1b6 items=1 ppid=3818 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:18.532000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 12 20:24:18.532000 audit: PATH item=0 name="/dev/fd/63" inode=20362 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:18.532000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:24:18.543000 audit[3864]: AVC avc: denied { write } for pid=3864 comm="tee" name="fd" dev="proc" ino=20980 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:24:18.543000 audit[3864]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd5010984 a2=241 a3=1b6 items=1 ppid=3812 pid=3864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:18.543000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 12 20:24:18.543000 audit: PATH item=0 name="/dev/fd/63" inode=20964 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:18.543000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:24:18.562000 audit[3874]: AVC avc: denied { write } for pid=3874 comm="tee" name="fd" dev="proc" ino=20984 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:24:18.562000 audit[3874]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffee17e983 a2=241 a3=1b6 items=1 ppid=3822 pid=3874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:18.562000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 12 20:24:18.562000 audit: PATH item=0 name="/dev/fd/63" inode=20369 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:18.562000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:24:18.587000 audit[3876]: AVC avc: denied { write } for pid=3876 comm="tee" name="fd" dev="proc" ino=20375 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:24:18.587000 audit[3876]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe8709983 a2=241 a3=1b6 items=1 ppid=3816 pid=3876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:18.587000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 12 20:24:18.587000 audit: PATH item=0 name="/dev/fd/63" inode=20370 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:18.587000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:24:18.593000 audit[3878]: AVC avc: denied { write } for pid=3878 comm="tee" name="fd" dev="proc" ino=20379 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 12 20:24:18.593000 audit[3878]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd5348973 a2=241 a3=1b6 items=1 ppid=3819 pid=3878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:18.593000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 12 20:24:18.593000 audit: PATH item=0 name="/dev/fd/63" inode=20371 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 12 20:24:18.593000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 12 20:24:18.754778 env[1658]: time="2024-02-12T20:24:18.754614655Z" level=info msg="StopPodSandbox for \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\"" Feb 12 20:24:18.926062 kubelet[2770]: I0212 20:24:18.925389 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-qqbzl" podStartSLOduration=3.431054376 podCreationTimestamp="2024-02-12 20:23:53 +0000 UTC" firstStartedPulling="2024-02-12 20:23:53.890003902 +0000 UTC m=+21.494677343" lastFinishedPulling="2024-02-12 20:24:16.384279447 +0000 UTC m=+43.988952900" observedRunningTime="2024-02-12 20:24:17.044366511 +0000 UTC m=+44.649040000" watchObservedRunningTime="2024-02-12 20:24:18.925329933 +0000 UTC m=+46.530003398" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:18.927 [INFO][3904] k8s.go 578: Cleaning up netns ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:18.928 [INFO][3904] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" iface="eth0" netns="/var/run/netns/cni-9179d0c2-2b54-d38d-1b8e-7751217f4f87" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:18.929 [INFO][3904] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" iface="eth0" netns="/var/run/netns/cni-9179d0c2-2b54-d38d-1b8e-7751217f4f87" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:18.930 [INFO][3904] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" iface="eth0" netns="/var/run/netns/cni-9179d0c2-2b54-d38d-1b8e-7751217f4f87" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:18.930 [INFO][3904] k8s.go 585: Releasing IP address(es) ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:18.930 [INFO][3904] utils.go 188: Calico CNI releasing IP address ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:19.012 [INFO][3910] ipam_plugin.go 415: Releasing address using handleID ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" HandleID="k8s-pod-network.1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:19.013 [INFO][3910] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:19.013 [INFO][3910] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:19.029 [WARNING][3910] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" HandleID="k8s-pod-network.1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:19.029 [INFO][3910] ipam_plugin.go 443: Releasing address using workloadID ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" HandleID="k8s-pod-network.1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:19.032 [INFO][3910] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:19.037904 env[1658]: 2024-02-12 20:24:19.035 [INFO][3904] k8s.go 591: Teardown processing complete. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:19.042073 env[1658]: time="2024-02-12T20:24:19.042002294Z" level=info msg="TearDown network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\" successfully" Feb 12 20:24:19.042376 env[1658]: time="2024-02-12T20:24:19.042329903Z" level=info msg="StopPodSandbox for \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\" returns successfully" Feb 12 20:24:19.046224 env[1658]: time="2024-02-12T20:24:19.043484474Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-kxh78,Uid:25850ecf-3dfe-4867-be3a-0409d16888a5,Namespace:kube-system,Attempt:1,}" Feb 12 20:24:19.044851 systemd[1]: run-netns-cni\x2d9179d0c2\x2d2b54\x2dd38d\x2d1b8e\x2d7751217f4f87.mount: Deactivated successfully. Feb 12 20:24:19.643000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.643000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.643000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.643000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.643000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.643000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.643000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.643000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.643000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.643000 audit: BPF prog-id=151 op=LOAD Feb 12 20:24:19.643000 audit[3996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb997118 a2=70 a3=0 items=0 ppid=3817 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:19.643000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:24:19.643000 audit: BPF prog-id=151 op=UNLOAD Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit: BPF prog-id=152 op=LOAD Feb 12 20:24:19.644000 audit[3996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffb997118 a2=70 a3=4a174c items=0 ppid=3817 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:19.644000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:24:19.644000 audit: BPF prog-id=152 op=UNLOAD Feb 12 20:24:19.644000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.644000 audit[3996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffffb997148 a2=70 a3=3bbd373f items=0 ppid=3817 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:19.644000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:24:19.647392 (udev-worker)[3997]: Network interface NamePolicy= disabled on kernel command line. Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { perfmon } for pid=3996 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit[3996]: AVC avc: denied { bpf } for pid=3996 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.648000 audit: BPF prog-id=153 op=LOAD Feb 12 20:24:19.648000 audit[3996]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=fffffb997098 a2=70 a3=3bbd3759 items=0 ppid=3817 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:19.648000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 12 20:24:19.657680 (udev-worker)[3998]: Network interface NamePolicy= disabled on kernel command line. Feb 12 20:24:19.661000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.661000 audit[4002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd9e8a7a8 a2=70 a3=0 items=0 ppid=3817 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:19.661000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 12 20:24:19.661000 audit[4002]: AVC avc: denied { bpf } for pid=4002 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:19.661000 audit[4002]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd9e8a688 a2=70 a3=2 items=0 ppid=3817 pid=4002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:19.661000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 12 20:24:19.673000 audit: BPF prog-id=153 op=UNLOAD Feb 12 20:24:19.755528 env[1658]: time="2024-02-12T20:24:19.754967520Z" level=info msg="StopPodSandbox for \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\"" Feb 12 20:24:19.806912 systemd-networkd[1454]: calib2d0e29d6a4: Link UP Feb 12 20:24:19.813866 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib2d0e29d6a4: link becomes ready Feb 12 20:24:19.812473 systemd-networkd[1454]: calib2d0e29d6a4: Gained carrier Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.561 [INFO][3963] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0 coredns-5dd5756b68- kube-system 25850ecf-3dfe-4867-be3a-0409d16888a5 715 0 2024-02-12 20:23:46 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-21-82 coredns-5dd5756b68-kxh78 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calib2d0e29d6a4 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Namespace="kube-system" Pod="coredns-5dd5756b68-kxh78" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.568 [INFO][3963] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Namespace="kube-system" Pod="coredns-5dd5756b68-kxh78" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.680 [INFO][3981] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" HandleID="k8s-pod-network.8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.720 [INFO][3981] ipam_plugin.go 268: Auto assigning IP ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" HandleID="k8s-pod-network.8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002b27c0), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-21-82", "pod":"coredns-5dd5756b68-kxh78", "timestamp":"2024-02-12 20:24:19.680870434 +0000 UTC"}, Hostname:"ip-172-31-21-82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.722 [INFO][3981] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.723 [INFO][3981] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.723 [INFO][3981] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-82' Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.727 [INFO][3981] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" host="ip-172-31-21-82" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.739 [INFO][3981] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-82" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.748 [INFO][3981] ipam.go 489: Trying affinity for 192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.752 [INFO][3981] ipam.go 155: Attempting to load block cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.763 [INFO][3981] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.763 [INFO][3981] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.8.128/26 handle="k8s-pod-network.8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" host="ip-172-31-21-82" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.766 [INFO][3981] ipam.go 1682: Creating new handle: k8s-pod-network.8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193 Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.778 [INFO][3981] ipam.go 1203: Writing block in order to claim IPs block=192.168.8.128/26 handle="k8s-pod-network.8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" host="ip-172-31-21-82" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.791 [INFO][3981] ipam.go 1216: Successfully claimed IPs: [192.168.8.129/26] block=192.168.8.128/26 handle="k8s-pod-network.8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" host="ip-172-31-21-82" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.791 [INFO][3981] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.8.129/26] handle="k8s-pod-network.8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" host="ip-172-31-21-82" Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.791 [INFO][3981] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:19.854100 env[1658]: 2024-02-12 20:24:19.792 [INFO][3981] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.8.129/26] IPv6=[] ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" HandleID="k8s-pod-network.8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.856270 env[1658]: 2024-02-12 20:24:19.802 [INFO][3963] k8s.go 385: Populated endpoint ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Namespace="kube-system" Pod="coredns-5dd5756b68-kxh78" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"25850ecf-3dfe-4867-be3a-0409d16888a5", ResourceVersion:"715", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"", Pod:"coredns-5dd5756b68-kxh78", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.8.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib2d0e29d6a4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:19.856270 env[1658]: 2024-02-12 20:24:19.802 [INFO][3963] k8s.go 386: Calico CNI using IPs: [192.168.8.129/32] ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Namespace="kube-system" Pod="coredns-5dd5756b68-kxh78" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.856270 env[1658]: 2024-02-12 20:24:19.802 [INFO][3963] dataplane_linux.go 68: Setting the host side veth name to calib2d0e29d6a4 ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Namespace="kube-system" Pod="coredns-5dd5756b68-kxh78" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.856270 env[1658]: 2024-02-12 20:24:19.820 [INFO][3963] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Namespace="kube-system" Pod="coredns-5dd5756b68-kxh78" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.856270 env[1658]: 2024-02-12 20:24:19.822 [INFO][3963] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Namespace="kube-system" Pod="coredns-5dd5756b68-kxh78" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"25850ecf-3dfe-4867-be3a-0409d16888a5", ResourceVersion:"715", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193", Pod:"coredns-5dd5756b68-kxh78", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.8.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib2d0e29d6a4", MAC:"1a:ab:5f:40:71:bd", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:19.856270 env[1658]: 2024-02-12 20:24:19.849 [INFO][3963] k8s.go 491: Wrote updated endpoint to datastore ContainerID="8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193" Namespace="kube-system" Pod="coredns-5dd5756b68-kxh78" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:19.933487 env[1658]: time="2024-02-12T20:24:19.933224876Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:19.933487 env[1658]: time="2024-02-12T20:24:19.933409207Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:19.933746 env[1658]: time="2024-02-12T20:24:19.933473694Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:19.937504 env[1658]: time="2024-02-12T20:24:19.934100497Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193 pid=4058 runtime=io.containerd.runc.v2 Feb 12 20:24:19.981764 systemd[1]: Started cri-containerd-8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193.scope. Feb 12 20:24:20.043661 systemd[1]: run-containerd-runc-k8s.io-8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193-runc.kt4IXr.mount: Deactivated successfully. Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:19.984 [INFO][4029] k8s.go 578: Cleaning up netns ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:19.984 [INFO][4029] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" iface="eth0" netns="/var/run/netns/cni-a741a7e3-9cc4-0a82-7ac0-8099b684690f" Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:19.984 [INFO][4029] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" iface="eth0" netns="/var/run/netns/cni-a741a7e3-9cc4-0a82-7ac0-8099b684690f" Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:19.985 [INFO][4029] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" iface="eth0" netns="/var/run/netns/cni-a741a7e3-9cc4-0a82-7ac0-8099b684690f" Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:19.985 [INFO][4029] k8s.go 585: Releasing IP address(es) ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:19.985 [INFO][4029] utils.go 188: Calico CNI releasing IP address ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:20.081 [INFO][4079] ipam_plugin.go 415: Releasing address using handleID ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" HandleID="k8s-pod-network.e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:20.081 [INFO][4079] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:20.081 [INFO][4079] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:20.109 [WARNING][4079] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" HandleID="k8s-pod-network.e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:20.109 [INFO][4079] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" HandleID="k8s-pod-network.e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:20.112 [INFO][4079] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:20.119029 env[1658]: 2024-02-12 20:24:20.114 [INFO][4029] k8s.go 591: Teardown processing complete. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:20.125439 env[1658]: time="2024-02-12T20:24:20.124881117Z" level=info msg="TearDown network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\" successfully" Feb 12 20:24:20.125439 env[1658]: time="2024-02-12T20:24:20.124934517Z" level=info msg="StopPodSandbox for \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\" returns successfully" Feb 12 20:24:20.122891 systemd[1]: run-netns-cni\x2da741a7e3\x2d9cc4\x2d0a82\x2d7ac0\x2d8099b684690f.mount: Deactivated successfully. Feb 12 20:24:20.126008 env[1658]: time="2024-02-12T20:24:20.125849245Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55685b7698-cwmxq,Uid:d565c299-4caa-4ebf-8023-58ec6ac3a196,Namespace:calico-system,Attempt:1,}" Feb 12 20:24:20.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.184000 audit: BPF prog-id=154 op=LOAD Feb 12 20:24:20.186000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.186000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4058 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.186000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864313437316333646233373233623063663336616662353565653434 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4058 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864313437316333646233373233623063663336616662353565653434 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit: BPF prog-id=155 op=LOAD Feb 12 20:24:20.194000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4058 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864313437316333646233373233623063663336616662353565653434 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.194000 audit: BPF prog-id=156 op=LOAD Feb 12 20:24:20.194000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4058 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864313437316333646233373233623063663336616662353565653434 Feb 12 20:24:20.195000 audit: BPF prog-id=156 op=UNLOAD Feb 12 20:24:20.195000 audit: BPF prog-id=155 op=UNLOAD Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { perfmon } for pid=4069 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit[4069]: AVC avc: denied { bpf } for pid=4069 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.195000 audit: BPF prog-id=157 op=LOAD Feb 12 20:24:20.195000 audit[4069]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4058 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864313437316333646233373233623063663336616662353565653434 Feb 12 20:24:20.251000 audit[4108]: NETFILTER_CFG table=raw:97 family=2 entries=19 op=nft_register_chain pid=4108 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:20.251000 audit[4108]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=ffffda21ba30 a2=0 a3=ffff88005fa8 items=0 ppid=3817 pid=4108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.251000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:20.275131 env[1658]: time="2024-02-12T20:24:20.275033785Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-kxh78,Uid:25850ecf-3dfe-4867-be3a-0409d16888a5,Namespace:kube-system,Attempt:1,} returns sandbox id \"8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193\"" Feb 12 20:24:20.284807 env[1658]: time="2024-02-12T20:24:20.284719999Z" level=info msg="CreateContainer within sandbox \"8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 12 20:24:20.287000 audit[4114]: NETFILTER_CFG table=nat:98 family=2 entries=16 op=nft_register_chain pid=4114 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:20.287000 audit[4114]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=ffffe86d47e0 a2=0 a3=ffffb6798fa8 items=0 ppid=3817 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.287000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:20.290000 audit[4107]: NETFILTER_CFG table=mangle:99 family=2 entries=19 op=nft_register_chain pid=4107 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:20.290000 audit[4107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=ffffd2480d50 a2=0 a3=ffffbd00ffa8 items=0 ppid=3817 pid=4107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.290000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:20.327000 audit[4121]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=4121 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:20.327000 audit[4121]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18472 a0=3 a1=fffffb398160 a2=0 a3=ffffbd150fa8 items=0 ppid=3817 pid=4121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.327000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:20.359432 systemd-networkd[1454]: vxlan.calico: Link UP Feb 12 20:24:20.359452 systemd-networkd[1454]: vxlan.calico: Gained carrier Feb 12 20:24:20.366336 env[1658]: time="2024-02-12T20:24:20.366274102Z" level=info msg="CreateContainer within sandbox \"8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"41b111296c8e7acfbd0d5b4dfdeddf7d4df7f0522298ee39f16fdf66d98ce59f\"" Feb 12 20:24:20.375254 env[1658]: time="2024-02-12T20:24:20.375169739Z" level=info msg="StartContainer for \"41b111296c8e7acfbd0d5b4dfdeddf7d4df7f0522298ee39f16fdf66d98ce59f\"" Feb 12 20:24:20.453369 systemd[1]: Started cri-containerd-41b111296c8e7acfbd0d5b4dfdeddf7d4df7f0522298ee39f16fdf66d98ce59f.scope. Feb 12 20:24:20.464000 audit[4148]: NETFILTER_CFG table=filter:101 family=2 entries=36 op=nft_register_chain pid=4148 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:20.464000 audit[4148]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19908 a0=3 a1=ffffe8a4f760 a2=0 a3=ffff8ff07fa8 items=0 ppid=3817 pid=4148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.464000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:20.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.527000 audit: BPF prog-id=158 op=LOAD Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4058 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431623131313239366338653761636662643064356234646664656464 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4058 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431623131313239366338653761636662643064356234646664656464 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit: BPF prog-id=159 op=LOAD Feb 12 20:24:20.529000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4058 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431623131313239366338653761636662643064356234646664656464 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.529000 audit: BPF prog-id=160 op=LOAD Feb 12 20:24:20.529000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4058 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431623131313239366338653761636662643064356234646664656464 Feb 12 20:24:20.529000 audit: BPF prog-id=160 op=UNLOAD Feb 12 20:24:20.530000 audit: BPF prog-id=159 op=UNLOAD Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.530000 audit: BPF prog-id=161 op=LOAD Feb 12 20:24:20.530000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4058 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431623131313239366338653761636662643064356234646664656464 Feb 12 20:24:20.570575 env[1658]: time="2024-02-12T20:24:20.570486491Z" level=info msg="StartContainer for \"41b111296c8e7acfbd0d5b4dfdeddf7d4df7f0522298ee39f16fdf66d98ce59f\" returns successfully" Feb 12 20:24:20.596318 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid26096dfee6: link becomes ready Feb 12 20:24:20.594047 systemd-networkd[1454]: calid26096dfee6: Link UP Feb 12 20:24:20.596722 systemd-networkd[1454]: calid26096dfee6: Gained carrier Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.299 [INFO][4095] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0 calico-kube-controllers-55685b7698- calico-system d565c299-4caa-4ebf-8023-58ec6ac3a196 722 0 2024-02-12 20:23:53 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:55685b7698 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ip-172-31-21-82 calico-kube-controllers-55685b7698-cwmxq eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calid26096dfee6 [] []}} ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Namespace="calico-system" Pod="calico-kube-controllers-55685b7698-cwmxq" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.299 [INFO][4095] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Namespace="calico-system" Pod="calico-kube-controllers-55685b7698-cwmxq" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.477 [INFO][4125] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" HandleID="k8s-pod-network.c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.505 [INFO][4125] ipam_plugin.go 268: Auto assigning IP ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" HandleID="k8s-pod-network.c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400025eae0), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-21-82", "pod":"calico-kube-controllers-55685b7698-cwmxq", "timestamp":"2024-02-12 20:24:20.477268745 +0000 UTC"}, Hostname:"ip-172-31-21-82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.505 [INFO][4125] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.505 [INFO][4125] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.505 [INFO][4125] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-82' Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.508 [INFO][4125] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" host="ip-172-31-21-82" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.519 [INFO][4125] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-82" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.532 [INFO][4125] ipam.go 489: Trying affinity for 192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.540 [INFO][4125] ipam.go 155: Attempting to load block cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.549 [INFO][4125] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.549 [INFO][4125] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.8.128/26 handle="k8s-pod-network.c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" host="ip-172-31-21-82" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.552 [INFO][4125] ipam.go 1682: Creating new handle: k8s-pod-network.c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2 Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.559 [INFO][4125] ipam.go 1203: Writing block in order to claim IPs block=192.168.8.128/26 handle="k8s-pod-network.c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" host="ip-172-31-21-82" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.577 [INFO][4125] ipam.go 1216: Successfully claimed IPs: [192.168.8.130/26] block=192.168.8.128/26 handle="k8s-pod-network.c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" host="ip-172-31-21-82" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.577 [INFO][4125] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.8.130/26] handle="k8s-pod-network.c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" host="ip-172-31-21-82" Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.577 [INFO][4125] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:20.631018 env[1658]: 2024-02-12 20:24:20.577 [INFO][4125] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.8.130/26] IPv6=[] ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" HandleID="k8s-pod-network.c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.632414 env[1658]: 2024-02-12 20:24:20.584 [INFO][4095] k8s.go 385: Populated endpoint ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Namespace="calico-system" Pod="calico-kube-controllers-55685b7698-cwmxq" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0", GenerateName:"calico-kube-controllers-55685b7698-", Namespace:"calico-system", SelfLink:"", UID:"d565c299-4caa-4ebf-8023-58ec6ac3a196", ResourceVersion:"722", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55685b7698", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"", Pod:"calico-kube-controllers-55685b7698-cwmxq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.8.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid26096dfee6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:20.632414 env[1658]: 2024-02-12 20:24:20.585 [INFO][4095] k8s.go 386: Calico CNI using IPs: [192.168.8.130/32] ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Namespace="calico-system" Pod="calico-kube-controllers-55685b7698-cwmxq" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.632414 env[1658]: 2024-02-12 20:24:20.585 [INFO][4095] dataplane_linux.go 68: Setting the host side veth name to calid26096dfee6 ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Namespace="calico-system" Pod="calico-kube-controllers-55685b7698-cwmxq" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.632414 env[1658]: 2024-02-12 20:24:20.598 [INFO][4095] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Namespace="calico-system" Pod="calico-kube-controllers-55685b7698-cwmxq" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.632414 env[1658]: 2024-02-12 20:24:20.601 [INFO][4095] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Namespace="calico-system" Pod="calico-kube-controllers-55685b7698-cwmxq" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0", GenerateName:"calico-kube-controllers-55685b7698-", Namespace:"calico-system", SelfLink:"", UID:"d565c299-4caa-4ebf-8023-58ec6ac3a196", ResourceVersion:"722", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55685b7698", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2", Pod:"calico-kube-controllers-55685b7698-cwmxq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.8.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid26096dfee6", MAC:"3e:13:3e:e3:15:2a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:20.632414 env[1658]: 2024-02-12 20:24:20.628 [INFO][4095] k8s.go 491: Wrote updated endpoint to datastore ContainerID="c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2" Namespace="calico-system" Pod="calico-kube-controllers-55685b7698-cwmxq" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:20.659946 env[1658]: time="2024-02-12T20:24:20.659830572Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:20.660442 env[1658]: time="2024-02-12T20:24:20.660379867Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:20.660721 env[1658]: time="2024-02-12T20:24:20.660630761Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:20.661211 env[1658]: time="2024-02-12T20:24:20.661138633Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2 pid=4188 runtime=io.containerd.runc.v2 Feb 12 20:24:20.692659 systemd[1]: Started cri-containerd-c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2.scope. Feb 12 20:24:20.741000 audit[4222]: NETFILTER_CFG table=filter:102 family=2 entries=40 op=nft_register_chain pid=4222 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:20.741000 audit[4222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21096 a0=3 a1=ffffe7913630 a2=0 a3=ffff8e16efa8 items=0 ppid=3817 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.741000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.751000 audit: BPF prog-id=162 op=LOAD Feb 12 20:24:20.756276 env[1658]: time="2024-02-12T20:24:20.756198004Z" level=info msg="StopPodSandbox for \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\"" Feb 12 20:24:20.758000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.758000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4188 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333306131343862303262623433323933366437333236306436653631 Feb 12 20:24:20.758000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.758000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4188 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333306131343862303262623433323933366437333236306436653631 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.759000 audit: BPF prog-id=163 op=LOAD Feb 12 20:24:20.759000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4188 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.759000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333306131343862303262623433323933366437333236306436653631 Feb 12 20:24:20.761000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.761000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.761000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.761000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.761000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.761000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.761000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.761000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.761000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.761000 audit: BPF prog-id=164 op=LOAD Feb 12 20:24:20.761000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4188 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333306131343862303262623433323933366437333236306436653631 Feb 12 20:24:20.762000 audit: BPF prog-id=164 op=UNLOAD Feb 12 20:24:20.763000 audit: BPF prog-id=163 op=UNLOAD Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { perfmon } for pid=4198 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit[4198]: AVC avc: denied { bpf } for pid=4198 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:20.763000 audit: BPF prog-id=165 op=LOAD Feb 12 20:24:20.763000 audit[4198]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4188 pid=4198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:20.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333306131343862303262623433323933366437333236306436653631 Feb 12 20:24:20.874432 env[1658]: time="2024-02-12T20:24:20.874342645Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55685b7698-cwmxq,Uid:d565c299-4caa-4ebf-8023-58ec6ac3a196,Namespace:calico-system,Attempt:1,} returns sandbox id \"c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2\"" Feb 12 20:24:20.877774 env[1658]: time="2024-02-12T20:24:20.877708210Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.890 [INFO][4239] k8s.go 578: Cleaning up netns ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.890 [INFO][4239] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" iface="eth0" netns="/var/run/netns/cni-7e2f19fe-2be9-0dc4-026a-7aebf9a90b04" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.891 [INFO][4239] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" iface="eth0" netns="/var/run/netns/cni-7e2f19fe-2be9-0dc4-026a-7aebf9a90b04" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.891 [INFO][4239] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" iface="eth0" netns="/var/run/netns/cni-7e2f19fe-2be9-0dc4-026a-7aebf9a90b04" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.891 [INFO][4239] k8s.go 585: Releasing IP address(es) ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.891 [INFO][4239] utils.go 188: Calico CNI releasing IP address ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.946 [INFO][4252] ipam_plugin.go 415: Releasing address using handleID ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" HandleID="k8s-pod-network.cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.946 [INFO][4252] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.947 [INFO][4252] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.960 [WARNING][4252] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" HandleID="k8s-pod-network.cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.960 [INFO][4252] ipam_plugin.go 443: Releasing address using workloadID ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" HandleID="k8s-pod-network.cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.962 [INFO][4252] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:20.967999 env[1658]: 2024-02-12 20:24:20.965 [INFO][4239] k8s.go 591: Teardown processing complete. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:20.969316 env[1658]: time="2024-02-12T20:24:20.969263753Z" level=info msg="TearDown network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\" successfully" Feb 12 20:24:20.969473 env[1658]: time="2024-02-12T20:24:20.969439324Z" level=info msg="StopPodSandbox for \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\" returns successfully" Feb 12 20:24:20.970580 env[1658]: time="2024-02-12T20:24:20.970525171Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-fnk8l,Uid:d3b19469-1423-4b17-a2ba-26ee2310cd0f,Namespace:calico-system,Attempt:1,}" Feb 12 20:24:21.049957 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3646260651.mount: Deactivated successfully. Feb 12 20:24:21.056576 systemd[1]: run-netns-cni\x2d7e2f19fe\x2d2be9\x2d0dc4\x2d026a\x2d7aebf9a90b04.mount: Deactivated successfully. Feb 12 20:24:21.068845 kubelet[2770]: I0212 20:24:21.068761 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-kxh78" podStartSLOduration=35.068683349 podCreationTimestamp="2024-02-12 20:23:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:24:21.027739612 +0000 UTC m=+48.632413089" watchObservedRunningTime="2024-02-12 20:24:21.068683349 +0000 UTC m=+48.673356826" Feb 12 20:24:21.108592 systemd-networkd[1454]: calib2d0e29d6a4: Gained IPv6LL Feb 12 20:24:21.110000 audit[4270]: NETFILTER_CFG table=filter:103 family=2 entries=14 op=nft_register_rule pid=4270 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:21.110000 audit[4270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffccc5b4a0 a2=0 a3=ffffbc1296c0 items=0 ppid=2902 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.110000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:21.112000 audit[4270]: NETFILTER_CFG table=nat:104 family=2 entries=14 op=nft_register_rule pid=4270 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:21.112000 audit[4270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3300 a0=3 a1=ffffccc5b4a0 a2=0 a3=ffffbc1296c0 items=0 ppid=2902 pid=4270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.112000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:21.143000 audit[4273]: NETFILTER_CFG table=filter:105 family=2 entries=11 op=nft_register_rule pid=4273 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:21.143000 audit[4273]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffef242c60 a2=0 a3=ffffa6e646c0 items=0 ppid=2902 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.143000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:21.150000 audit[4273]: NETFILTER_CFG table=nat:106 family=2 entries=35 op=nft_register_chain pid=4273 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:21.150000 audit[4273]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13788 a0=3 a1=ffffef242c60 a2=0 a3=ffffa6e646c0 items=0 ppid=2902 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.150000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:21.280563 systemd-networkd[1454]: califcf7a05c26f: Link UP Feb 12 20:24:21.286837 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 20:24:21.287038 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califcf7a05c26f: link becomes ready Feb 12 20:24:21.287215 systemd-networkd[1454]: califcf7a05c26f: Gained carrier Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.139 [INFO][4258] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0 csi-node-driver- calico-system d3b19469-1423-4b17-a2ba-26ee2310cd0f 732 0 2024-02-12 20:23:53 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:676488fcc9 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ip-172-31-21-82 csi-node-driver-fnk8l eth0 default [] [] [kns.calico-system ksa.calico-system.default] califcf7a05c26f [] []}} ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Namespace="calico-system" Pod="csi-node-driver-fnk8l" WorkloadEndpoint="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.140 [INFO][4258] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Namespace="calico-system" Pod="csi-node-driver-fnk8l" WorkloadEndpoint="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.204 [INFO][4275] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" HandleID="k8s-pod-network.05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.223 [INFO][4275] ipam_plugin.go 268: Auto assigning IP ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" HandleID="k8s-pod-network.05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002fd800), Attrs:map[string]string{"namespace":"calico-system", "node":"ip-172-31-21-82", "pod":"csi-node-driver-fnk8l", "timestamp":"2024-02-12 20:24:21.204402833 +0000 UTC"}, Hostname:"ip-172-31-21-82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.223 [INFO][4275] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.223 [INFO][4275] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.223 [INFO][4275] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-82' Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.226 [INFO][4275] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" host="ip-172-31-21-82" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.234 [INFO][4275] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-82" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.243 [INFO][4275] ipam.go 489: Trying affinity for 192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.246 [INFO][4275] ipam.go 155: Attempting to load block cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.250 [INFO][4275] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.250 [INFO][4275] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.8.128/26 handle="k8s-pod-network.05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" host="ip-172-31-21-82" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.253 [INFO][4275] ipam.go 1682: Creating new handle: k8s-pod-network.05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16 Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.259 [INFO][4275] ipam.go 1203: Writing block in order to claim IPs block=192.168.8.128/26 handle="k8s-pod-network.05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" host="ip-172-31-21-82" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.268 [INFO][4275] ipam.go 1216: Successfully claimed IPs: [192.168.8.131/26] block=192.168.8.128/26 handle="k8s-pod-network.05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" host="ip-172-31-21-82" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.269 [INFO][4275] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.8.131/26] handle="k8s-pod-network.05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" host="ip-172-31-21-82" Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.269 [INFO][4275] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:21.317813 env[1658]: 2024-02-12 20:24:21.269 [INFO][4275] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.8.131/26] IPv6=[] ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" HandleID="k8s-pod-network.05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:21.319123 env[1658]: 2024-02-12 20:24:21.272 [INFO][4258] k8s.go 385: Populated endpoint ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Namespace="calico-system" Pod="csi-node-driver-fnk8l" WorkloadEndpoint="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d3b19469-1423-4b17-a2ba-26ee2310cd0f", ResourceVersion:"732", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"", Pod:"csi-node-driver-fnk8l", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.8.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califcf7a05c26f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:21.319123 env[1658]: 2024-02-12 20:24:21.273 [INFO][4258] k8s.go 386: Calico CNI using IPs: [192.168.8.131/32] ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Namespace="calico-system" Pod="csi-node-driver-fnk8l" WorkloadEndpoint="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:21.319123 env[1658]: 2024-02-12 20:24:21.273 [INFO][4258] dataplane_linux.go 68: Setting the host side veth name to califcf7a05c26f ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Namespace="calico-system" Pod="csi-node-driver-fnk8l" WorkloadEndpoint="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:21.319123 env[1658]: 2024-02-12 20:24:21.288 [INFO][4258] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Namespace="calico-system" Pod="csi-node-driver-fnk8l" WorkloadEndpoint="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:21.319123 env[1658]: 2024-02-12 20:24:21.289 [INFO][4258] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Namespace="calico-system" Pod="csi-node-driver-fnk8l" WorkloadEndpoint="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d3b19469-1423-4b17-a2ba-26ee2310cd0f", ResourceVersion:"732", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16", Pod:"csi-node-driver-fnk8l", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.8.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califcf7a05c26f", MAC:"fe:8e:f4:17:80:31", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:21.319123 env[1658]: 2024-02-12 20:24:21.308 [INFO][4258] k8s.go 491: Wrote updated endpoint to datastore ContainerID="05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16" Namespace="calico-system" Pod="csi-node-driver-fnk8l" WorkloadEndpoint="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:21.346739 env[1658]: time="2024-02-12T20:24:21.346626698Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:21.346997 env[1658]: time="2024-02-12T20:24:21.346731325Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:21.346997 env[1658]: time="2024-02-12T20:24:21.346758565Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:21.348136 env[1658]: time="2024-02-12T20:24:21.348045639Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16 pid=4302 runtime=io.containerd.runc.v2 Feb 12 20:24:21.384642 systemd[1]: run-containerd-runc-k8s.io-05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16-runc.fyQuHR.mount: Deactivated successfully. Feb 12 20:24:21.398541 systemd[1]: Started cri-containerd-05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16.scope. Feb 12 20:24:21.429000 audit[4332]: NETFILTER_CFG table=filter:107 family=2 entries=38 op=nft_register_chain pid=4332 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:21.429000 audit[4332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19508 a0=3 a1=fffff1e58310 a2=0 a3=ffffba2ecfa8 items=0 ppid=3817 pid=4332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.429000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:21.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.438000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.438000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.439000 audit: BPF prog-id=166 op=LOAD Feb 12 20:24:21.441000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.441000 audit[4312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656363646566623935643436343938356663306239386561313561 Feb 12 20:24:21.441000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.441000 audit[4312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656363646566623935643436343938356663306239386561313561 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.442000 audit: BPF prog-id=167 op=LOAD Feb 12 20:24:21.442000 audit[4312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656363646566623935643436343938356663306239386561313561 Feb 12 20:24:21.443000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.443000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.443000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.443000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.443000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.443000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.443000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.443000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.443000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.443000 audit: BPF prog-id=168 op=LOAD Feb 12 20:24:21.443000 audit[4312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656363646566623935643436343938356663306239386561313561 Feb 12 20:24:21.444000 audit: BPF prog-id=168 op=UNLOAD Feb 12 20:24:21.445000 audit: BPF prog-id=167 op=UNLOAD Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { perfmon } for pid=4312 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit[4312]: AVC avc: denied { bpf } for pid=4312 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:21.445000 audit: BPF prog-id=169 op=LOAD Feb 12 20:24:21.445000 audit[4312]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4302 pid=4312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:21.445000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035656363646566623935643436343938356663306239386561313561 Feb 12 20:24:21.473763 env[1658]: time="2024-02-12T20:24:21.473709178Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-fnk8l,Uid:d3b19469-1423-4b17-a2ba-26ee2310cd0f,Namespace:calico-system,Attempt:1,} returns sandbox id \"05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16\"" Feb 12 20:24:21.754291 env[1658]: time="2024-02-12T20:24:21.754002985Z" level=info msg="StopPodSandbox for \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\"" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.840 [INFO][4354] k8s.go 578: Cleaning up netns ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.841 [INFO][4354] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" iface="eth0" netns="/var/run/netns/cni-fcfd9dfa-b026-7ca9-6496-466047967e58" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.845 [INFO][4354] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" iface="eth0" netns="/var/run/netns/cni-fcfd9dfa-b026-7ca9-6496-466047967e58" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.845 [INFO][4354] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" iface="eth0" netns="/var/run/netns/cni-fcfd9dfa-b026-7ca9-6496-466047967e58" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.846 [INFO][4354] k8s.go 585: Releasing IP address(es) ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.846 [INFO][4354] utils.go 188: Calico CNI releasing IP address ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.884 [INFO][4360] ipam_plugin.go 415: Releasing address using handleID ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" HandleID="k8s-pod-network.c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.884 [INFO][4360] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.884 [INFO][4360] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.903 [WARNING][4360] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" HandleID="k8s-pod-network.c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.903 [INFO][4360] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" HandleID="k8s-pod-network.c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.907 [INFO][4360] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:21.913628 env[1658]: 2024-02-12 20:24:21.910 [INFO][4354] k8s.go 591: Teardown processing complete. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:21.917875 systemd[1]: run-netns-cni\x2dfcfd9dfa\x2db026\x2d7ca9\x2d6496\x2d466047967e58.mount: Deactivated successfully. Feb 12 20:24:21.920429 env[1658]: time="2024-02-12T20:24:21.920369951Z" level=info msg="TearDown network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\" successfully" Feb 12 20:24:21.920610 env[1658]: time="2024-02-12T20:24:21.920576350Z" level=info msg="StopPodSandbox for \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\" returns successfully" Feb 12 20:24:21.922472 env[1658]: time="2024-02-12T20:24:21.922404283Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-bfbcn,Uid:46bdc67e-765a-4fd6-b6c9-3528e9d0efc6,Namespace:kube-system,Attempt:1,}" Feb 12 20:24:22.181812 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount731515109.mount: Deactivated successfully. Feb 12 20:24:22.298606 systemd-networkd[1454]: cali6beea11f2f0: Link UP Feb 12 20:24:22.305609 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 20:24:22.305786 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6beea11f2f0: link becomes ready Feb 12 20:24:22.305706 systemd-networkd[1454]: cali6beea11f2f0: Gained carrier Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.056 [INFO][4366] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0 coredns-5dd5756b68- kube-system 46bdc67e-765a-4fd6-b6c9-3528e9d0efc6 748 0 2024-02-12 20:23:46 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ip-172-31-21-82 coredns-5dd5756b68-bfbcn eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali6beea11f2f0 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Namespace="kube-system" Pod="coredns-5dd5756b68-bfbcn" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.057 [INFO][4366] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Namespace="kube-system" Pod="coredns-5dd5756b68-bfbcn" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.193 [INFO][4379] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" HandleID="k8s-pod-network.58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.222 [INFO][4379] ipam_plugin.go 268: Auto assigning IP ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" HandleID="k8s-pod-network.58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400028a620), Attrs:map[string]string{"namespace":"kube-system", "node":"ip-172-31-21-82", "pod":"coredns-5dd5756b68-bfbcn", "timestamp":"2024-02-12 20:24:22.192967088 +0000 UTC"}, Hostname:"ip-172-31-21-82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.222 [INFO][4379] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.222 [INFO][4379] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.222 [INFO][4379] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-82' Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.229 [INFO][4379] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" host="ip-172-31-21-82" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.237 [INFO][4379] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-82" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.248 [INFO][4379] ipam.go 489: Trying affinity for 192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.252 [INFO][4379] ipam.go 155: Attempting to load block cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.258 [INFO][4379] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.258 [INFO][4379] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.8.128/26 handle="k8s-pod-network.58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" host="ip-172-31-21-82" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.262 [INFO][4379] ipam.go 1682: Creating new handle: k8s-pod-network.58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199 Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.269 [INFO][4379] ipam.go 1203: Writing block in order to claim IPs block=192.168.8.128/26 handle="k8s-pod-network.58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" host="ip-172-31-21-82" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.281 [INFO][4379] ipam.go 1216: Successfully claimed IPs: [192.168.8.132/26] block=192.168.8.128/26 handle="k8s-pod-network.58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" host="ip-172-31-21-82" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.281 [INFO][4379] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.8.132/26] handle="k8s-pod-network.58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" host="ip-172-31-21-82" Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.281 [INFO][4379] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:22.342450 env[1658]: 2024-02-12 20:24:22.281 [INFO][4379] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.8.132/26] IPv6=[] ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" HandleID="k8s-pod-network.58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:22.343942 env[1658]: 2024-02-12 20:24:22.284 [INFO][4366] k8s.go 385: Populated endpoint ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Namespace="kube-system" Pod="coredns-5dd5756b68-bfbcn" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"46bdc67e-765a-4fd6-b6c9-3528e9d0efc6", ResourceVersion:"748", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"", Pod:"coredns-5dd5756b68-bfbcn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.8.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6beea11f2f0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:22.343942 env[1658]: 2024-02-12 20:24:22.284 [INFO][4366] k8s.go 386: Calico CNI using IPs: [192.168.8.132/32] ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Namespace="kube-system" Pod="coredns-5dd5756b68-bfbcn" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:22.343942 env[1658]: 2024-02-12 20:24:22.285 [INFO][4366] dataplane_linux.go 68: Setting the host side veth name to cali6beea11f2f0 ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Namespace="kube-system" Pod="coredns-5dd5756b68-bfbcn" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:22.343942 env[1658]: 2024-02-12 20:24:22.307 [INFO][4366] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Namespace="kube-system" Pod="coredns-5dd5756b68-bfbcn" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:22.343942 env[1658]: 2024-02-12 20:24:22.312 [INFO][4366] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Namespace="kube-system" Pod="coredns-5dd5756b68-bfbcn" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"46bdc67e-765a-4fd6-b6c9-3528e9d0efc6", ResourceVersion:"748", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199", Pod:"coredns-5dd5756b68-bfbcn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.8.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6beea11f2f0", MAC:"6a:75:3b:b7:04:42", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:22.343942 env[1658]: 2024-02-12 20:24:22.329 [INFO][4366] k8s.go 491: Wrote updated endpoint to datastore ContainerID="58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199" Namespace="kube-system" Pod="coredns-5dd5756b68-bfbcn" WorkloadEndpoint="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:22.388523 systemd-networkd[1454]: vxlan.calico: Gained IPv6LL Feb 12 20:24:22.400000 audit[4403]: NETFILTER_CFG table=filter:108 family=2 entries=38 op=nft_register_chain pid=4403 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:22.404654 kernel: kauditd_printk_skb: 378 callbacks suppressed Feb 12 20:24:22.404799 kernel: audit: type=1325 audit(1707769462.400:1277): table=filter:108 family=2 entries=38 op=nft_register_chain pid=4403 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:22.400000 audit[4403]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19088 a0=3 a1=ffffe871eb90 a2=0 a3=ffff923b9fa8 items=0 ppid=3817 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.419572 env[1658]: time="2024-02-12T20:24:22.419450777Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:22.419845 env[1658]: time="2024-02-12T20:24:22.419796350Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:22.420005 env[1658]: time="2024-02-12T20:24:22.419960173Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:22.420462 env[1658]: time="2024-02-12T20:24:22.420408909Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199 pid=4406 runtime=io.containerd.runc.v2 Feb 12 20:24:22.426260 kernel: audit: type=1300 audit(1707769462.400:1277): arch=c00000b7 syscall=211 success=yes exit=19088 a0=3 a1=ffffe871eb90 a2=0 a3=ffff923b9fa8 items=0 ppid=3817 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.426424 kernel: audit: type=1327 audit(1707769462.400:1277): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:22.400000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:22.452461 systemd-networkd[1454]: calid26096dfee6: Gained IPv6LL Feb 12 20:24:22.478682 systemd[1]: Started cri-containerd-58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199.scope. Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.545771 kernel: audit: type=1400 audit(1707769462.527:1278): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.545909 kernel: audit: type=1400 audit(1707769462.527:1279): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.559742 kernel: audit: type=1400 audit(1707769462.527:1280): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.571676 kernel: audit: type=1400 audit(1707769462.527:1281): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.585673 kernel: audit: type=1400 audit(1707769462.527:1282): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.596766 kernel: audit: type=1400 audit(1707769462.527:1283): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.606638 kernel: audit: type=1400 audit(1707769462.527:1284): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.527000 audit: BPF prog-id=170 op=LOAD Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4406 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626539333932323433343230656663623532626566346532633534 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4406 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626539333932323433343230656663623532626566346532633534 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit: BPF prog-id=171 op=LOAD Feb 12 20:24:22.535000 audit[4417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4406 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626539333932323433343230656663623532626566346532633534 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit: BPF prog-id=172 op=LOAD Feb 12 20:24:22.535000 audit[4417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4406 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626539333932323433343230656663623532626566346532633534 Feb 12 20:24:22.535000 audit: BPF prog-id=172 op=UNLOAD Feb 12 20:24:22.535000 audit: BPF prog-id=171 op=UNLOAD Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { perfmon } for pid=4417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit[4417]: AVC avc: denied { bpf } for pid=4417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.535000 audit: BPF prog-id=173 op=LOAD Feb 12 20:24:22.535000 audit[4417]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4406 pid=4417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3538626539333932323433343230656663623532626566346532633534 Feb 12 20:24:22.629198 env[1658]: time="2024-02-12T20:24:22.629142971Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-bfbcn,Uid:46bdc67e-765a-4fd6-b6c9-3528e9d0efc6,Namespace:kube-system,Attempt:1,} returns sandbox id \"58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199\"" Feb 12 20:24:22.637224 env[1658]: time="2024-02-12T20:24:22.637168797Z" level=info msg="CreateContainer within sandbox \"58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 12 20:24:22.663869 env[1658]: time="2024-02-12T20:24:22.663794180Z" level=info msg="CreateContainer within sandbox \"58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"0cb0c829c351fbe0562df42e8608583be4f89c0f2b52d9ec85b914c3005e518e\"" Feb 12 20:24:22.667023 env[1658]: time="2024-02-12T20:24:22.665610402Z" level=info msg="StartContainer for \"0cb0c829c351fbe0562df42e8608583be4f89c0f2b52d9ec85b914c3005e518e\"" Feb 12 20:24:22.711223 systemd[1]: Started cri-containerd-0cb0c829c351fbe0562df42e8608583be4f89c0f2b52d9ec85b914c3005e518e.scope. Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.758000 audit: BPF prog-id=174 op=LOAD Feb 12 20:24:22.761000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.761000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4406 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623063383239633335316662653035363264663432653836303835 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4406 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623063383239633335316662653035363264663432653836303835 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.762000 audit: BPF prog-id=175 op=LOAD Feb 12 20:24:22.762000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4406 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623063383239633335316662653035363264663432653836303835 Feb 12 20:24:22.764000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.764000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.764000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.764000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.764000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.764000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.764000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.764000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.764000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.764000 audit: BPF prog-id=176 op=LOAD Feb 12 20:24:22.764000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4406 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.764000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623063383239633335316662653035363264663432653836303835 Feb 12 20:24:22.765000 audit: BPF prog-id=176 op=UNLOAD Feb 12 20:24:22.765000 audit: BPF prog-id=175 op=UNLOAD Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { perfmon } for pid=4447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit[4447]: AVC avc: denied { bpf } for pid=4447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:22.766000 audit: BPF prog-id=177 op=LOAD Feb 12 20:24:22.766000 audit[4447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4406 pid=4447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:22.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063623063383239633335316662653035363264663432653836303835 Feb 12 20:24:22.811335 env[1658]: time="2024-02-12T20:24:22.811271917Z" level=info msg="StartContainer for \"0cb0c829c351fbe0562df42e8608583be4f89c0f2b52d9ec85b914c3005e518e\" returns successfully" Feb 12 20:24:23.079976 kubelet[2770]: I0212 20:24:23.079812 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-bfbcn" podStartSLOduration=37.079730961 podCreationTimestamp="2024-02-12 20:23:46 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-12 20:24:23.05356049 +0000 UTC m=+50.658233955" watchObservedRunningTime="2024-02-12 20:24:23.079730961 +0000 UTC m=+50.684404414" Feb 12 20:24:23.092864 systemd-networkd[1454]: califcf7a05c26f: Gained IPv6LL Feb 12 20:24:23.196000 audit[4480]: NETFILTER_CFG table=filter:109 family=2 entries=8 op=nft_register_rule pid=4480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:23.196000 audit[4480]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffee3db2f0 a2=0 a3=ffffba0c86c0 items=0 ppid=2902 pid=4480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:23.196000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:23.226000 audit[4480]: NETFILTER_CFG table=nat:110 family=2 entries=44 op=nft_register_rule pid=4480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:23.226000 audit[4480]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13788 a0=3 a1=ffffee3db2f0 a2=0 a3=ffffba0c86c0 items=0 ppid=2902 pid=4480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:23.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:23.278000 audit[4482]: NETFILTER_CFG table=filter:111 family=2 entries=8 op=nft_register_rule pid=4482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:23.278000 audit[4482]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffd8eb5cf0 a2=0 a3=ffff8958d6c0 items=0 ppid=2902 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:23.278000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:23.295000 audit[4482]: NETFILTER_CFG table=nat:112 family=2 entries=56 op=nft_register_chain pid=4482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:23.295000 audit[4482]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19452 a0=3 a1=ffffd8eb5cf0 a2=0 a3=ffff8958d6c0 items=0 ppid=2902 pid=4482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:23.295000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:23.798150 env[1658]: time="2024-02-12T20:24:23.798069278Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:23.803140 env[1658]: time="2024-02-12T20:24:23.803060004Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:23.807406 env[1658]: time="2024-02-12T20:24:23.807334756Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:23.811541 env[1658]: time="2024-02-12T20:24:23.811441605Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:23.812847 env[1658]: time="2024-02-12T20:24:23.812788091Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8\"" Feb 12 20:24:23.814611 env[1658]: time="2024-02-12T20:24:23.814559409Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 12 20:24:23.844826 env[1658]: time="2024-02-12T20:24:23.844744294Z" level=info msg="CreateContainer within sandbox \"c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 12 20:24:23.875850 env[1658]: time="2024-02-12T20:24:23.875766017Z" level=info msg="CreateContainer within sandbox \"c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"bb81f9aa5586040b7b99fac3856647b242548274dabcfa92fb815425f19bb703\"" Feb 12 20:24:23.877459 env[1658]: time="2024-02-12T20:24:23.877410136Z" level=info msg="StartContainer for \"bb81f9aa5586040b7b99fac3856647b242548274dabcfa92fb815425f19bb703\"" Feb 12 20:24:23.928536 systemd[1]: Started cri-containerd-bb81f9aa5586040b7b99fac3856647b242548274dabcfa92fb815425f19bb703.scope. Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.973000 audit: BPF prog-id=178 op=LOAD Feb 12 20:24:23.975000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.975000 audit[4495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4188 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:23.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262383166396161353538363034306237623939666163333835363634 Feb 12 20:24:23.975000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.975000 audit[4495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4188 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:23.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262383166396161353538363034306237623939666163333835363634 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.976000 audit: BPF prog-id=179 op=LOAD Feb 12 20:24:23.976000 audit[4495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4188 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:23.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262383166396161353538363034306237623939666163333835363634 Feb 12 20:24:23.978000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.978000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.978000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.978000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.978000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.978000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.978000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.978000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.978000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.978000 audit: BPF prog-id=180 op=LOAD Feb 12 20:24:23.978000 audit[4495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4188 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:23.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262383166396161353538363034306237623939666163333835363634 Feb 12 20:24:23.979000 audit: BPF prog-id=180 op=UNLOAD Feb 12 20:24:23.979000 audit: BPF prog-id=179 op=UNLOAD Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { perfmon } for pid=4495 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit[4495]: AVC avc: denied { bpf } for pid=4495 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:23.979000 audit: BPF prog-id=181 op=LOAD Feb 12 20:24:23.979000 audit[4495]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4188 pid=4495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:23.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262383166396161353538363034306237623939666163333835363634 Feb 12 20:24:24.028683 env[1658]: time="2024-02-12T20:24:24.028595227Z" level=info msg="StartContainer for \"bb81f9aa5586040b7b99fac3856647b242548274dabcfa92fb815425f19bb703\" returns successfully" Feb 12 20:24:24.116476 systemd-networkd[1454]: cali6beea11f2f0: Gained IPv6LL Feb 12 20:24:25.188133 kubelet[2770]: I0212 20:24:25.188053 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-55685b7698-cwmxq" podStartSLOduration=29.2504705 podCreationTimestamp="2024-02-12 20:23:53 +0000 UTC" firstStartedPulling="2024-02-12 20:24:20.876843629 +0000 UTC m=+48.481517082" lastFinishedPulling="2024-02-12 20:24:23.814344683 +0000 UTC m=+51.419018148" observedRunningTime="2024-02-12 20:24:24.070029194 +0000 UTC m=+51.674702671" watchObservedRunningTime="2024-02-12 20:24:25.187971566 +0000 UTC m=+52.792645031" Feb 12 20:24:25.594767 env[1658]: time="2024-02-12T20:24:25.594583848Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:25.605422 env[1658]: time="2024-02-12T20:24:25.605368422Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:25.613125 env[1658]: time="2024-02-12T20:24:25.613049219Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:25.626369 env[1658]: time="2024-02-12T20:24:25.626270423Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:25.627701 env[1658]: time="2024-02-12T20:24:25.627621518Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8\"" Feb 12 20:24:25.636417 env[1658]: time="2024-02-12T20:24:25.636361607Z" level=info msg="CreateContainer within sandbox \"05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 12 20:24:25.673775 env[1658]: time="2024-02-12T20:24:25.673680378Z" level=info msg="CreateContainer within sandbox \"05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"1ad2ac0062880a7e2eb7a0e0a01c41a2364f7878bffe95aab4a2072973daa800\"" Feb 12 20:24:25.675657 env[1658]: time="2024-02-12T20:24:25.675592444Z" level=info msg="StartContainer for \"1ad2ac0062880a7e2eb7a0e0a01c41a2364f7878bffe95aab4a2072973daa800\"" Feb 12 20:24:25.741963 systemd[1]: Started cri-containerd-1ad2ac0062880a7e2eb7a0e0a01c41a2364f7878bffe95aab4a2072973daa800.scope. Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4302 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:25.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161643261633030363238383061376532656237613065306130316334 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.890000 audit: BPF prog-id=182 op=LOAD Feb 12 20:24:25.890000 audit[4573]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4302 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:25.890000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161643261633030363238383061376532656237613065306130316334 Feb 12 20:24:25.892000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.892000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.892000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.892000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.892000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.892000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.892000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.892000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.892000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.892000 audit: BPF prog-id=183 op=LOAD Feb 12 20:24:25.892000 audit[4573]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4302 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:25.892000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161643261633030363238383061376532656237613065306130316334 Feb 12 20:24:25.893000 audit: BPF prog-id=183 op=UNLOAD Feb 12 20:24:25.893000 audit: BPF prog-id=182 op=UNLOAD Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { perfmon } for pid=4573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit[4573]: AVC avc: denied { bpf } for pid=4573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:25.893000 audit: BPF prog-id=184 op=LOAD Feb 12 20:24:25.893000 audit[4573]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4302 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:25.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161643261633030363238383061376532656237613065306130316334 Feb 12 20:24:25.935136 env[1658]: time="2024-02-12T20:24:25.934990002Z" level=info msg="StartContainer for \"1ad2ac0062880a7e2eb7a0e0a01c41a2364f7878bffe95aab4a2072973daa800\" returns successfully" Feb 12 20:24:25.938538 env[1658]: time="2024-02-12T20:24:25.938481473Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 12 20:24:26.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.82:22-147.75.109.163:53852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:26.015500 systemd[1]: Started sshd@7-172.31.21.82:22-147.75.109.163:53852.service. Feb 12 20:24:26.090116 systemd[1]: run-containerd-runc-k8s.io-1ad2ac0062880a7e2eb7a0e0a01c41a2364f7878bffe95aab4a2072973daa800-runc.uKzR2W.mount: Deactivated successfully. Feb 12 20:24:26.208000 audit[4605]: USER_ACCT pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:26.209911 sshd[4605]: Accepted publickey for core from 147.75.109.163 port 53852 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:24:26.211000 audit[4605]: CRED_ACQ pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:26.211000 audit[4605]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb806790 a2=3 a3=1 items=0 ppid=1 pid=4605 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:26.211000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:26.214536 sshd[4605]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:26.224805 systemd[1]: Started session-8.scope. Feb 12 20:24:26.229765 systemd-logind[1634]: New session 8 of user core. Feb 12 20:24:26.246000 audit[4605]: USER_START pid=4605 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:26.249000 audit[4607]: CRED_ACQ pid=4607 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:26.558762 sshd[4605]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:26.560000 audit[4605]: USER_END pid=4605 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:26.561000 audit[4605]: CRED_DISP pid=4605 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:26.565362 systemd-logind[1634]: Session 8 logged out. Waiting for processes to exit. Feb 12 20:24:26.567000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.21.82:22-147.75.109.163:53852 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:26.566511 systemd[1]: session-8.scope: Deactivated successfully. Feb 12 20:24:26.567780 systemd[1]: sshd@7-172.31.21.82:22-147.75.109.163:53852.service: Deactivated successfully. Feb 12 20:24:26.570679 systemd-logind[1634]: Removed session 8. Feb 12 20:24:27.673000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:27.676639 kernel: kauditd_printk_skb: 230 callbacks suppressed Feb 12 20:24:27.676752 kernel: audit: type=1400 audit(1707769467.673:1351): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:27.673000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40018361b0 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:27.701515 kernel: audit: type=1300 audit(1707769467.673:1351): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40018361b0 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:27.673000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:27.712242 kernel: audit: type=1327 audit(1707769467.673:1351): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:27.673000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:27.722095 kernel: audit: type=1400 audit(1707769467.673:1352): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:27.673000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a63e20 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:27.735956 kernel: audit: type=1300 audit(1707769467.673:1352): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000a63e20 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:27.673000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:27.747194 kernel: audit: type=1327 audit(1707769467.673:1352): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:27.754421 env[1658]: time="2024-02-12T20:24:27.754365154Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:27.759905 env[1658]: time="2024-02-12T20:24:27.759852884Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:27.764205 env[1658]: time="2024-02-12T20:24:27.764149251Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:27.768690 env[1658]: time="2024-02-12T20:24:27.768632120Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:24:27.772297 env[1658]: time="2024-02-12T20:24:27.770418751Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43\"" Feb 12 20:24:27.778078 env[1658]: time="2024-02-12T20:24:27.778010967Z" level=info msg="CreateContainer within sandbox \"05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 12 20:24:27.819984 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3761912728.mount: Deactivated successfully. Feb 12 20:24:27.826488 env[1658]: time="2024-02-12T20:24:27.826405625Z" level=info msg="CreateContainer within sandbox \"05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"d6b96a9c361b7274194d5407e562a2c71eacac83fc74e02a7d9af0df623fba1c\"" Feb 12 20:24:27.828057 env[1658]: time="2024-02-12T20:24:27.828007362Z" level=info msg="StartContainer for \"d6b96a9c361b7274194d5407e562a2c71eacac83fc74e02a7d9af0df623fba1c\"" Feb 12 20:24:27.878028 systemd[1]: Started cri-containerd-d6b96a9c361b7274194d5407e562a2c71eacac83fc74e02a7d9af0df623fba1c.scope. Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4302 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:27.965670 kernel: audit: type=1400 audit(1707769467.945:1353): avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.965869 kernel: audit: type=1300 audit(1707769467.945:1353): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4302 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:27.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436623936613963333631623732373431393464353430376535363261 Feb 12 20:24:27.980386 kernel: audit: type=1327 audit(1707769467.945:1353): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436623936613963333631623732373431393464353430376535363261 Feb 12 20:24:27.980548 kernel: audit: type=1400 audit(1707769467.945:1354): avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.945000 audit: BPF prog-id=185 op=LOAD Feb 12 20:24:27.945000 audit[4626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4302 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:27.945000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436623936613963333631623732373431393464353430376535363261 Feb 12 20:24:27.953000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.953000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.953000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.953000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.953000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.953000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.953000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.953000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.953000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.953000 audit: BPF prog-id=186 op=LOAD Feb 12 20:24:27.953000 audit[4626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4302 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:27.953000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436623936613963333631623732373431393464353430376535363261 Feb 12 20:24:27.964000 audit: BPF prog-id=186 op=UNLOAD Feb 12 20:24:27.964000 audit: BPF prog-id=185 op=UNLOAD Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { perfmon } for pid=4626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit[4626]: AVC avc: denied { bpf } for pid=4626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:27.964000 audit: BPF prog-id=187 op=LOAD Feb 12 20:24:27.964000 audit[4626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4302 pid=4626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:27.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436623936613963333631623732373431393464353430376535363261 Feb 12 20:24:28.018995 env[1658]: time="2024-02-12T20:24:28.018925842Z" level=info msg="StartContainer for \"d6b96a9c361b7274194d5407e562a2c71eacac83fc74e02a7d9af0df623fba1c\" returns successfully" Feb 12 20:24:28.342000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:28.342000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=400c6015c0 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:24:28.342000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:24:28.352000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:28.352000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=400c601680 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:24:28.352000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:24:28.362000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:28.362000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=400c7362a0 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:24:28.362000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:24:28.363000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:28.363000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4006c49860 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:24:28.363000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:24:28.517000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:28.517000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=4003932460 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:24:28.517000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:24:28.519000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:28.519000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=69 a1=400c8c30b0 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:24:28.519000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:24:28.986119 kubelet[2770]: I0212 20:24:28.986066 2770 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 12 20:24:28.986839 kubelet[2770]: I0212 20:24:28.986144 2770 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 12 20:24:31.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.82:22-147.75.109.163:53856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:31.588341 systemd[1]: Started sshd@8-172.31.21.82:22-147.75.109.163:53856.service. Feb 12 20:24:31.763000 audit[4664]: USER_ACCT pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:31.765418 sshd[4664]: Accepted publickey for core from 147.75.109.163 port 53856 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:24:31.766000 audit[4664]: CRED_ACQ pid=4664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:31.766000 audit[4664]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdb1092a0 a2=3 a3=1 items=0 ppid=1 pid=4664 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:31.766000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:31.768832 sshd[4664]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:31.776888 systemd-logind[1634]: New session 9 of user core. Feb 12 20:24:31.778123 systemd[1]: Started session-9.scope. Feb 12 20:24:31.787000 audit[4664]: USER_START pid=4664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:31.789000 audit[4666]: CRED_ACQ pid=4666 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:32.039608 sshd[4664]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:32.040000 audit[4664]: USER_END pid=4664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:32.040000 audit[4664]: CRED_DISP pid=4664 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:32.043997 systemd[1]: session-9.scope: Deactivated successfully. Feb 12 20:24:32.045220 systemd-logind[1634]: Session 9 logged out. Waiting for processes to exit. Feb 12 20:24:32.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.21.82:22-147.75.109.163:53856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:32.045620 systemd[1]: sshd@8-172.31.21.82:22-147.75.109.163:53856.service: Deactivated successfully. Feb 12 20:24:32.048942 systemd-logind[1634]: Removed session 9. Feb 12 20:24:32.702121 env[1658]: time="2024-02-12T20:24:32.702058910Z" level=info msg="StopPodSandbox for \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\"" Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.771 [WARNING][4691] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0", GenerateName:"calico-kube-controllers-55685b7698-", Namespace:"calico-system", SelfLink:"", UID:"d565c299-4caa-4ebf-8023-58ec6ac3a196", ResourceVersion:"783", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55685b7698", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2", Pod:"calico-kube-controllers-55685b7698-cwmxq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.8.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid26096dfee6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.772 [INFO][4691] k8s.go 578: Cleaning up netns ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.772 [INFO][4691] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" iface="eth0" netns="" Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.772 [INFO][4691] k8s.go 585: Releasing IP address(es) ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.772 [INFO][4691] utils.go 188: Calico CNI releasing IP address ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.810 [INFO][4698] ipam_plugin.go 415: Releasing address using handleID ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" HandleID="k8s-pod-network.e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.810 [INFO][4698] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.811 [INFO][4698] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.825 [WARNING][4698] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" HandleID="k8s-pod-network.e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.825 [INFO][4698] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" HandleID="k8s-pod-network.e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.827 [INFO][4698] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:32.832460 env[1658]: 2024-02-12 20:24:32.830 [INFO][4691] k8s.go 591: Teardown processing complete. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:32.833395 env[1658]: time="2024-02-12T20:24:32.832490009Z" level=info msg="TearDown network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\" successfully" Feb 12 20:24:32.833395 env[1658]: time="2024-02-12T20:24:32.832536497Z" level=info msg="StopPodSandbox for \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\" returns successfully" Feb 12 20:24:32.833395 env[1658]: time="2024-02-12T20:24:32.833354903Z" level=info msg="RemovePodSandbox for \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\"" Feb 12 20:24:32.833581 env[1658]: time="2024-02-12T20:24:32.833409515Z" level=info msg="Forcibly stopping sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\"" Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.899 [WARNING][4719] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0", GenerateName:"calico-kube-controllers-55685b7698-", Namespace:"calico-system", SelfLink:"", UID:"d565c299-4caa-4ebf-8023-58ec6ac3a196", ResourceVersion:"783", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55685b7698", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"c30a148b02bb432936d73260d6e611234718c1d8bae72d1520ff5ea50211dde2", Pod:"calico-kube-controllers-55685b7698-cwmxq", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.8.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calid26096dfee6", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.899 [INFO][4719] k8s.go 578: Cleaning up netns ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.899 [INFO][4719] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" iface="eth0" netns="" Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.900 [INFO][4719] k8s.go 585: Releasing IP address(es) ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.900 [INFO][4719] utils.go 188: Calico CNI releasing IP address ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.938 [INFO][4726] ipam_plugin.go 415: Releasing address using handleID ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" HandleID="k8s-pod-network.e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.938 [INFO][4726] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.939 [INFO][4726] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.954 [WARNING][4726] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" HandleID="k8s-pod-network.e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.954 [INFO][4726] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" HandleID="k8s-pod-network.e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Workload="ip--172--31--21--82-k8s-calico--kube--controllers--55685b7698--cwmxq-eth0" Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.960 [INFO][4726] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:32.970207 env[1658]: 2024-02-12 20:24:32.964 [INFO][4719] k8s.go 591: Teardown processing complete. ContainerID="e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e" Feb 12 20:24:32.971359 env[1658]: time="2024-02-12T20:24:32.970160879Z" level=info msg="TearDown network for sandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\" successfully" Feb 12 20:24:32.977010 env[1658]: time="2024-02-12T20:24:32.976892885Z" level=info msg="RemovePodSandbox \"e6a45a1fccc1bd1c3fd254f8f3dce2bb7599da54f93e20ca762a5835dd52d91e\" returns successfully" Feb 12 20:24:32.978136 env[1658]: time="2024-02-12T20:24:32.978076654Z" level=info msg="StopPodSandbox for \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\"" Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.058 [WARNING][4744] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d3b19469-1423-4b17-a2ba-26ee2310cd0f", ResourceVersion:"831", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16", Pod:"csi-node-driver-fnk8l", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.8.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califcf7a05c26f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.058 [INFO][4744] k8s.go 578: Cleaning up netns ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.059 [INFO][4744] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" iface="eth0" netns="" Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.059 [INFO][4744] k8s.go 585: Releasing IP address(es) ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.059 [INFO][4744] utils.go 188: Calico CNI releasing IP address ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.101 [INFO][4750] ipam_plugin.go 415: Releasing address using handleID ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" HandleID="k8s-pod-network.cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.102 [INFO][4750] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.102 [INFO][4750] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.115 [WARNING][4750] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" HandleID="k8s-pod-network.cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.116 [INFO][4750] ipam_plugin.go 443: Releasing address using workloadID ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" HandleID="k8s-pod-network.cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.118 [INFO][4750] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:33.122845 env[1658]: 2024-02-12 20:24:33.120 [INFO][4744] k8s.go 591: Teardown processing complete. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:33.124314 env[1658]: time="2024-02-12T20:24:33.124210510Z" level=info msg="TearDown network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\" successfully" Feb 12 20:24:33.124491 env[1658]: time="2024-02-12T20:24:33.124454600Z" level=info msg="StopPodSandbox for \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\" returns successfully" Feb 12 20:24:33.125210 env[1658]: time="2024-02-12T20:24:33.125167780Z" level=info msg="RemovePodSandbox for \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\"" Feb 12 20:24:33.125511 env[1658]: time="2024-02-12T20:24:33.125434046Z" level=info msg="Forcibly stopping sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\"" Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.196 [WARNING][4769] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"d3b19469-1423-4b17-a2ba-26ee2310cd0f", ResourceVersion:"831", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"05eccdefb95d464985fc0b98ea15aa3536a76a9913352ee2feca08f8b4c5cf16", Pod:"csi-node-driver-fnk8l", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.8.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"califcf7a05c26f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.197 [INFO][4769] k8s.go 578: Cleaning up netns ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.197 [INFO][4769] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" iface="eth0" netns="" Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.197 [INFO][4769] k8s.go 585: Releasing IP address(es) ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.197 [INFO][4769] utils.go 188: Calico CNI releasing IP address ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.233 [INFO][4776] ipam_plugin.go 415: Releasing address using handleID ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" HandleID="k8s-pod-network.cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.233 [INFO][4776] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.233 [INFO][4776] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.248 [WARNING][4776] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" HandleID="k8s-pod-network.cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.248 [INFO][4776] ipam_plugin.go 443: Releasing address using workloadID ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" HandleID="k8s-pod-network.cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Workload="ip--172--31--21--82-k8s-csi--node--driver--fnk8l-eth0" Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.251 [INFO][4776] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:33.266743 env[1658]: 2024-02-12 20:24:33.263 [INFO][4769] k8s.go 591: Teardown processing complete. ContainerID="cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2" Feb 12 20:24:33.267858 env[1658]: time="2024-02-12T20:24:33.267794529Z" level=info msg="TearDown network for sandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\" successfully" Feb 12 20:24:33.277334 env[1658]: time="2024-02-12T20:24:33.277197959Z" level=info msg="RemovePodSandbox \"cf472815322dba9494d7e7b350f677db7b4a1885e80b3437d4e75814ceb90ff2\" returns successfully" Feb 12 20:24:33.278644 env[1658]: time="2024-02-12T20:24:33.278561235Z" level=info msg="StopPodSandbox for \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\"" Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.370 [WARNING][4796] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"46bdc67e-765a-4fd6-b6c9-3528e9d0efc6", ResourceVersion:"761", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199", Pod:"coredns-5dd5756b68-bfbcn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.8.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6beea11f2f0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.371 [INFO][4796] k8s.go 578: Cleaning up netns ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.371 [INFO][4796] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" iface="eth0" netns="" Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.371 [INFO][4796] k8s.go 585: Releasing IP address(es) ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.371 [INFO][4796] utils.go 188: Calico CNI releasing IP address ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.408 [INFO][4802] ipam_plugin.go 415: Releasing address using handleID ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" HandleID="k8s-pod-network.c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.408 [INFO][4802] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.408 [INFO][4802] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.421 [WARNING][4802] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" HandleID="k8s-pod-network.c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.422 [INFO][4802] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" HandleID="k8s-pod-network.c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.424 [INFO][4802] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:33.430576 env[1658]: 2024-02-12 20:24:33.427 [INFO][4796] k8s.go 591: Teardown processing complete. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:33.431737 env[1658]: time="2024-02-12T20:24:33.431673256Z" level=info msg="TearDown network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\" successfully" Feb 12 20:24:33.431876 env[1658]: time="2024-02-12T20:24:33.431843486Z" level=info msg="StopPodSandbox for \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\" returns successfully" Feb 12 20:24:33.432775 env[1658]: time="2024-02-12T20:24:33.432731181Z" level=info msg="RemovePodSandbox for \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\"" Feb 12 20:24:33.433346 env[1658]: time="2024-02-12T20:24:33.433253478Z" level=info msg="Forcibly stopping sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\"" Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.498 [WARNING][4820] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"46bdc67e-765a-4fd6-b6c9-3528e9d0efc6", ResourceVersion:"761", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"58be9392243420efcb52bef4e2c54db69ab6a448d2d6d354efaa1204ef631199", Pod:"coredns-5dd5756b68-bfbcn", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.8.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali6beea11f2f0", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.498 [INFO][4820] k8s.go 578: Cleaning up netns ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.498 [INFO][4820] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" iface="eth0" netns="" Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.498 [INFO][4820] k8s.go 585: Releasing IP address(es) ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.498 [INFO][4820] utils.go 188: Calico CNI releasing IP address ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.535 [INFO][4826] ipam_plugin.go 415: Releasing address using handleID ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" HandleID="k8s-pod-network.c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.535 [INFO][4826] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.536 [INFO][4826] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.548 [WARNING][4826] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" HandleID="k8s-pod-network.c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.548 [INFO][4826] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" HandleID="k8s-pod-network.c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--bfbcn-eth0" Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.551 [INFO][4826] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:33.555682 env[1658]: 2024-02-12 20:24:33.553 [INFO][4820] k8s.go 591: Teardown processing complete. ContainerID="c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06" Feb 12 20:24:33.556817 env[1658]: time="2024-02-12T20:24:33.556750123Z" level=info msg="TearDown network for sandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\" successfully" Feb 12 20:24:33.562333 env[1658]: time="2024-02-12T20:24:33.562186054Z" level=info msg="RemovePodSandbox \"c0c5f8651fe44094a19d7533f241b6aa2fd40a267cb236ed7bdfa1d8a4584a06\" returns successfully" Feb 12 20:24:33.563311 env[1658]: time="2024-02-12T20:24:33.563267068Z" level=info msg="StopPodSandbox for \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\"" Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.629 [WARNING][4845] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"25850ecf-3dfe-4867-be3a-0409d16888a5", ResourceVersion:"738", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193", Pod:"coredns-5dd5756b68-kxh78", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.8.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib2d0e29d6a4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.630 [INFO][4845] k8s.go 578: Cleaning up netns ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.630 [INFO][4845] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" iface="eth0" netns="" Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.630 [INFO][4845] k8s.go 585: Releasing IP address(es) ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.630 [INFO][4845] utils.go 188: Calico CNI releasing IP address ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.668 [INFO][4852] ipam_plugin.go 415: Releasing address using handleID ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" HandleID="k8s-pod-network.1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.668 [INFO][4852] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.668 [INFO][4852] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.681 [WARNING][4852] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" HandleID="k8s-pod-network.1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.681 [INFO][4852] ipam_plugin.go 443: Releasing address using workloadID ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" HandleID="k8s-pod-network.1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.683 [INFO][4852] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:33.688608 env[1658]: 2024-02-12 20:24:33.686 [INFO][4845] k8s.go 591: Teardown processing complete. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:33.689804 env[1658]: time="2024-02-12T20:24:33.689749883Z" level=info msg="TearDown network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\" successfully" Feb 12 20:24:33.689944 env[1658]: time="2024-02-12T20:24:33.689909770Z" level=info msg="StopPodSandbox for \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\" returns successfully" Feb 12 20:24:33.690867 env[1658]: time="2024-02-12T20:24:33.690822580Z" level=info msg="RemovePodSandbox for \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\"" Feb 12 20:24:33.691410 env[1658]: time="2024-02-12T20:24:33.691330321Z" level=info msg="Forcibly stopping sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\"" Feb 12 20:24:33.697000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:33.700427 kernel: kauditd_printk_skb: 68 callbacks suppressed Feb 12 20:24:33.700521 kernel: audit: type=1400 audit(1707769473.697:1374): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:33.721571 kernel: audit: type=1400 audit(1707769473.697:1375): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:33.697000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:33.697000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d91240 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:33.697000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:33.745359 kernel: audit: type=1300 audit(1707769473.697:1375): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000d91240 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:33.745519 kernel: audit: type=1327 audit(1707769473.697:1375): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:33.697000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7b800 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:33.758218 kernel: audit: type=1300 audit(1707769473.697:1374): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7b800 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:33.697000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:33.769419 kernel: audit: type=1327 audit(1707769473.697:1374): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:33.718000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:33.779697 kernel: audit: type=1400 audit(1707769473.718:1376): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:33.718000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7b860 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:33.792527 kernel: audit: type=1300 audit(1707769473.718:1376): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7b860 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:33.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:33.805049 kernel: audit: type=1327 audit(1707769473.718:1376): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:33.718000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:33.814795 kernel: audit: type=1400 audit(1707769473.718:1377): avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:24:33.718000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7b9c0 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:24:33.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.815 [WARNING][4872] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"25850ecf-3dfe-4867-be3a-0409d16888a5", ResourceVersion:"738", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 23, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"8d1471c3db3723b0cf36afb55ee44bd0c071354eea13678c4c98dbc4c056d193", Pod:"coredns-5dd5756b68-kxh78", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.8.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib2d0e29d6a4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.816 [INFO][4872] k8s.go 578: Cleaning up netns ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.816 [INFO][4872] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" iface="eth0" netns="" Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.816 [INFO][4872] k8s.go 585: Releasing IP address(es) ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.816 [INFO][4872] utils.go 188: Calico CNI releasing IP address ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.853 [INFO][4878] ipam_plugin.go 415: Releasing address using handleID ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" HandleID="k8s-pod-network.1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.853 [INFO][4878] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.853 [INFO][4878] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.867 [WARNING][4878] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" HandleID="k8s-pod-network.1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.867 [INFO][4878] ipam_plugin.go 443: Releasing address using workloadID ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" HandleID="k8s-pod-network.1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Workload="ip--172--31--21--82-k8s-coredns--5dd5756b68--kxh78-eth0" Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.870 [INFO][4878] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:33.874573 env[1658]: 2024-02-12 20:24:33.872 [INFO][4872] k8s.go 591: Teardown processing complete. ContainerID="1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847" Feb 12 20:24:33.876021 env[1658]: time="2024-02-12T20:24:33.875970133Z" level=info msg="TearDown network for sandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\" successfully" Feb 12 20:24:33.881433 env[1658]: time="2024-02-12T20:24:33.881365480Z" level=info msg="RemovePodSandbox \"1d5228418fee7d926a820b97420b44ef0cf65ea313569b0c62410509e2107847\" returns successfully" Feb 12 20:24:37.071535 systemd[1]: Started sshd@9-172.31.21.82:22-147.75.109.163:54406.service. Feb 12 20:24:37.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.21.82:22-147.75.109.163:54406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:37.243000 audit[4885]: USER_ACCT pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:37.246493 sshd[4885]: Accepted publickey for core from 147.75.109.163 port 54406 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:24:37.246000 audit[4885]: CRED_ACQ pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:37.246000 audit[4885]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2d05da0 a2=3 a3=1 items=0 ppid=1 pid=4885 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:37.246000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:37.249406 sshd[4885]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:37.258707 systemd[1]: Started session-10.scope. Feb 12 20:24:37.259532 systemd-logind[1634]: New session 10 of user core. Feb 12 20:24:37.268000 audit[4885]: USER_START pid=4885 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:37.270000 audit[4906]: CRED_ACQ pid=4906 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:37.515633 sshd[4885]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:37.516000 audit[4885]: USER_END pid=4885 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:37.516000 audit[4885]: CRED_DISP pid=4885 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:37.521299 systemd[1]: session-10.scope: Deactivated successfully. Feb 12 20:24:37.522000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.21.82:22-147.75.109.163:54406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:37.523068 systemd[1]: sshd@9-172.31.21.82:22-147.75.109.163:54406.service: Deactivated successfully. Feb 12 20:24:37.524748 systemd-logind[1634]: Session 10 logged out. Waiting for processes to exit. Feb 12 20:24:37.526961 systemd-logind[1634]: Removed session 10. Feb 12 20:24:40.456955 update_engine[1635]: I0212 20:24:40.456883 1635 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Feb 12 20:24:40.456955 update_engine[1635]: I0212 20:24:40.456952 1635 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Feb 12 20:24:40.458005 update_engine[1635]: I0212 20:24:40.457958 1635 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Feb 12 20:24:40.458857 update_engine[1635]: I0212 20:24:40.458807 1635 omaha_request_params.cc:62] Current group set to lts Feb 12 20:24:40.459026 update_engine[1635]: I0212 20:24:40.458988 1635 update_attempter.cc:499] Already updated boot flags. Skipping. Feb 12 20:24:40.459026 update_engine[1635]: I0212 20:24:40.459013 1635 update_attempter.cc:643] Scheduling an action processor start. Feb 12 20:24:40.459163 update_engine[1635]: I0212 20:24:40.459043 1635 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Feb 12 20:24:40.459163 update_engine[1635]: I0212 20:24:40.459093 1635 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Feb 12 20:24:40.460444 update_engine[1635]: I0212 20:24:40.460392 1635 omaha_request_action.cc:270] Posting an Omaha request to disabled Feb 12 20:24:40.460444 update_engine[1635]: I0212 20:24:40.460431 1635 omaha_request_action.cc:271] Request: Feb 12 20:24:40.460444 update_engine[1635]: Feb 12 20:24:40.460444 update_engine[1635]: Feb 12 20:24:40.460444 update_engine[1635]: Feb 12 20:24:40.460444 update_engine[1635]: Feb 12 20:24:40.460444 update_engine[1635]: Feb 12 20:24:40.460444 update_engine[1635]: Feb 12 20:24:40.460444 update_engine[1635]: Feb 12 20:24:40.460444 update_engine[1635]: Feb 12 20:24:40.460444 update_engine[1635]: I0212 20:24:40.460444 1635 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 12 20:24:40.461081 locksmithd[1720]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Feb 12 20:24:40.465161 update_engine[1635]: I0212 20:24:40.465103 1635 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 12 20:24:40.465587 update_engine[1635]: I0212 20:24:40.465487 1635 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Feb 12 20:24:40.500208 update_engine[1635]: E0212 20:24:40.500150 1635 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 12 20:24:40.500376 update_engine[1635]: I0212 20:24:40.500350 1635 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Feb 12 20:24:42.543000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.82:22-147.75.109.163:54408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:42.544638 systemd[1]: Started sshd@10-172.31.21.82:22-147.75.109.163:54408.service. Feb 12 20:24:42.549787 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 12 20:24:42.549929 kernel: audit: type=1130 audit(1707769482.543:1387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.82:22-147.75.109.163:54408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:42.713000 audit[4926]: USER_ACCT pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:42.715267 sshd[4926]: Accepted publickey for core from 147.75.109.163 port 54408 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:24:42.727276 kernel: audit: type=1101 audit(1707769482.713:1388): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:42.727872 sshd[4926]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:42.725000 audit[4926]: CRED_ACQ pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:42.738304 kernel: audit: type=1103 audit(1707769482.725:1389): pid=4926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:42.725000 audit[4926]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc15ec1c0 a2=3 a3=1 items=0 ppid=1 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:42.758065 kernel: audit: type=1006 audit(1707769482.725:1390): pid=4926 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Feb 12 20:24:42.758186 kernel: audit: type=1300 audit(1707769482.725:1390): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc15ec1c0 a2=3 a3=1 items=0 ppid=1 pid=4926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:42.725000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:42.765112 kernel: audit: type=1327 audit(1707769482.725:1390): proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:42.768367 systemd[1]: Started session-11.scope. Feb 12 20:24:42.770129 systemd-logind[1634]: New session 11 of user core. Feb 12 20:24:42.780000 audit[4926]: USER_START pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:42.794405 kernel: audit: type=1105 audit(1707769482.780:1391): pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:42.793000 audit[4928]: CRED_ACQ pid=4928 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:42.804286 kernel: audit: type=1103 audit(1707769482.793:1392): pid=4928 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.096700 sshd[4926]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:43.097000 audit[4926]: USER_END pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.097000 audit[4926]: CRED_DISP pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.122710 kernel: audit: type=1106 audit(1707769483.097:1393): pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.122866 kernel: audit: type=1104 audit(1707769483.097:1394): pid=4926 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.114003 systemd-logind[1634]: Session 11 logged out. Waiting for processes to exit. Feb 12 20:24:43.115729 systemd[1]: sshd@10-172.31.21.82:22-147.75.109.163:54408.service: Deactivated successfully. Feb 12 20:24:43.117063 systemd[1]: session-11.scope: Deactivated successfully. Feb 12 20:24:43.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.21.82:22-147.75.109.163:54408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:43.133800 systemd-logind[1634]: Removed session 11. Feb 12 20:24:43.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.21.82:22-147.75.109.163:54412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:43.141077 systemd[1]: Started sshd@11-172.31.21.82:22-147.75.109.163:54412.service. Feb 12 20:24:43.192110 kubelet[2770]: I0212 20:24:43.192064 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-fnk8l" podStartSLOduration=43.896295977 podCreationTimestamp="2024-02-12 20:23:53 +0000 UTC" firstStartedPulling="2024-02-12 20:24:21.477145087 +0000 UTC m=+49.081818540" lastFinishedPulling="2024-02-12 20:24:27.772832559 +0000 UTC m=+55.377506024" observedRunningTime="2024-02-12 20:24:28.097222276 +0000 UTC m=+55.701895753" watchObservedRunningTime="2024-02-12 20:24:43.191983461 +0000 UTC m=+70.796656938" Feb 12 20:24:43.323000 audit[4960]: USER_ACCT pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.325010 sshd[4960]: Accepted publickey for core from 147.75.109.163 port 54412 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:24:43.325000 audit[4960]: CRED_ACQ pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.326000 audit[4960]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe2c712f0 a2=3 a3=1 items=0 ppid=1 pid=4960 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:43.326000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:43.328342 sshd[4960]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:43.338627 systemd[1]: Started session-12.scope. Feb 12 20:24:43.339165 systemd-logind[1634]: New session 12 of user core. Feb 12 20:24:43.353000 audit[4960]: USER_START pid=4960 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.357000 audit[4962]: CRED_ACQ pid=4962 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.933742 sshd[4960]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:43.935000 audit[4960]: USER_END pid=4960 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.935000 audit[4960]: CRED_DISP pid=4960 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:43.940446 systemd[1]: sshd@11-172.31.21.82:22-147.75.109.163:54412.service: Deactivated successfully. Feb 12 20:24:43.939000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.21.82:22-147.75.109.163:54412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:43.941892 systemd[1]: session-12.scope: Deactivated successfully. Feb 12 20:24:43.944083 systemd-logind[1634]: Session 12 logged out. Waiting for processes to exit. Feb 12 20:24:43.945768 systemd-logind[1634]: Removed session 12. Feb 12 20:24:43.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.21.82:22-147.75.109.163:54424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:43.964950 systemd[1]: Started sshd@12-172.31.21.82:22-147.75.109.163:54424.service. Feb 12 20:24:44.140000 audit[4971]: USER_ACCT pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:44.142001 sshd[4971]: Accepted publickey for core from 147.75.109.163 port 54424 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:24:44.142000 audit[4971]: CRED_ACQ pid=4971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:44.142000 audit[4971]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff14192e0 a2=3 a3=1 items=0 ppid=1 pid=4971 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:44.142000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:44.145339 sshd[4971]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:44.154475 systemd-logind[1634]: New session 13 of user core. Feb 12 20:24:44.154717 systemd[1]: Started session-13.scope. Feb 12 20:24:44.170000 audit[4971]: USER_START pid=4971 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:44.172000 audit[4973]: CRED_ACQ pid=4973 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:44.509817 sshd[4971]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:44.510000 audit[4971]: USER_END pid=4971 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:44.510000 audit[4971]: CRED_DISP pid=4971 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:44.514778 systemd[1]: sshd@12-172.31.21.82:22-147.75.109.163:54424.service: Deactivated successfully. Feb 12 20:24:44.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.21.82:22-147.75.109.163:54424 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:44.516262 systemd[1]: session-13.scope: Deactivated successfully. Feb 12 20:24:44.517505 systemd-logind[1634]: Session 13 logged out. Waiting for processes to exit. Feb 12 20:24:44.519084 systemd-logind[1634]: Removed session 13. Feb 12 20:24:49.546690 systemd[1]: Started sshd@13-172.31.21.82:22-147.75.109.163:53556.service. Feb 12 20:24:49.558681 kernel: kauditd_printk_skb: 23 callbacks suppressed Feb 12 20:24:49.558838 kernel: audit: type=1130 audit(1707769489.546:1414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.82:22-147.75.109.163:53556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:49.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.82:22-147.75.109.163:53556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:49.733000 audit[4987]: USER_ACCT pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:49.734463 sshd[4987]: Accepted publickey for core from 147.75.109.163 port 53556 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:24:49.745276 kernel: audit: type=1101 audit(1707769489.733:1415): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:49.746555 sshd[4987]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:49.745000 audit[4987]: CRED_ACQ pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:49.760555 kernel: audit: type=1103 audit(1707769489.745:1416): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:49.765677 systemd[1]: Started session-14.scope. Feb 12 20:24:49.767566 systemd-logind[1634]: New session 14 of user core. Feb 12 20:24:49.745000 audit[4987]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff68462c0 a2=3 a3=1 items=0 ppid=1 pid=4987 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:49.779504 kernel: audit: type=1006 audit(1707769489.745:1417): pid=4987 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Feb 12 20:24:49.779638 kernel: audit: type=1300 audit(1707769489.745:1417): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff68462c0 a2=3 a3=1 items=0 ppid=1 pid=4987 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:49.745000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:49.783000 audit[4987]: USER_START pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:49.798883 kernel: audit: type=1327 audit(1707769489.745:1417): proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:49.799025 kernel: audit: type=1105 audit(1707769489.783:1418): pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:49.799107 kernel: audit: type=1103 audit(1707769489.786:1419): pid=4992 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:49.786000 audit[4992]: CRED_ACQ pid=4992 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:50.044369 sshd[4987]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:50.046000 audit[4987]: USER_END pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:50.051314 systemd[1]: session-14.scope: Deactivated successfully. Feb 12 20:24:50.052642 systemd[1]: sshd@13-172.31.21.82:22-147.75.109.163:53556.service: Deactivated successfully. Feb 12 20:24:50.046000 audit[4987]: CRED_DISP pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:50.058390 kernel: audit: type=1106 audit(1707769490.046:1420): pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:50.058925 systemd-logind[1634]: Session 14 logged out. Waiting for processes to exit. Feb 12 20:24:50.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.21.82:22-147.75.109.163:53556 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:50.069182 systemd-logind[1634]: Removed session 14. Feb 12 20:24:50.069376 kernel: audit: type=1104 audit(1707769490.046:1421): pid=4987 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:50.454632 update_engine[1635]: I0212 20:24:50.454564 1635 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 12 20:24:50.455198 update_engine[1635]: I0212 20:24:50.454869 1635 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 12 20:24:50.455198 update_engine[1635]: I0212 20:24:50.455149 1635 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Feb 12 20:24:50.455737 update_engine[1635]: E0212 20:24:50.455689 1635 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 12 20:24:50.455854 update_engine[1635]: I0212 20:24:50.455824 1635 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Feb 12 20:24:55.089939 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 20:24:55.090104 kernel: audit: type=1130 audit(1707769495.078:1423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.82:22-147.75.109.163:34394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:55.078000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.82:22-147.75.109.163:34394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:55.077390 systemd[1]: Started sshd@14-172.31.21.82:22-147.75.109.163:34394.service. Feb 12 20:24:55.254000 audit[5004]: USER_ACCT pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.256498 sshd[5004]: Accepted publickey for core from 147.75.109.163 port 34394 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:24:55.267884 sshd[5004]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:24:55.266000 audit[5004]: CRED_ACQ pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.278566 kernel: audit: type=1101 audit(1707769495.254:1424): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.278735 kernel: audit: type=1103 audit(1707769495.266:1425): pid=5004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.286339 kernel: audit: type=1006 audit(1707769495.266:1426): pid=5004 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Feb 12 20:24:55.285677 systemd[1]: Started session-15.scope. Feb 12 20:24:55.266000 audit[5004]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde38dd10 a2=3 a3=1 items=0 ppid=1 pid=5004 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.289115 systemd-logind[1634]: New session 15 of user core. Feb 12 20:24:55.297147 kernel: audit: type=1300 audit(1707769495.266:1426): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffde38dd10 a2=3 a3=1 items=0 ppid=1 pid=5004 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:55.266000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:55.306623 kernel: audit: type=1327 audit(1707769495.266:1426): proctitle=737368643A20636F7265205B707269765D Feb 12 20:24:55.300000 audit[5004]: USER_START pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.322343 kernel: audit: type=1105 audit(1707769495.300:1427): pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.303000 audit[5006]: CRED_ACQ pid=5006 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.332550 kernel: audit: type=1103 audit(1707769495.303:1428): pid=5006 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.582965 sshd[5004]: pam_unix(sshd:session): session closed for user core Feb 12 20:24:55.584000 audit[5004]: USER_END pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.588544 systemd-logind[1634]: Session 15 logged out. Waiting for processes to exit. Feb 12 20:24:55.590854 systemd[1]: session-15.scope: Deactivated successfully. Feb 12 20:24:55.592762 systemd[1]: sshd@14-172.31.21.82:22-147.75.109.163:34394.service: Deactivated successfully. Feb 12 20:24:55.595188 systemd-logind[1634]: Removed session 15. Feb 12 20:24:55.585000 audit[5004]: CRED_DISP pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.607429 kernel: audit: type=1106 audit(1707769495.584:1429): pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.607568 kernel: audit: type=1104 audit(1707769495.585:1430): pid=5004 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:24:55.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.21.82:22-147.75.109.163:34394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:24:57.839515 kubelet[2770]: I0212 20:24:57.839455 2770 topology_manager.go:215] "Topology Admit Handler" podUID="c4607c73-bd29-496c-94bc-5a0bd504580c" podNamespace="calico-apiserver" podName="calico-apiserver-ff7f5f55f-88md6" Feb 12 20:24:57.852164 systemd[1]: Created slice kubepods-besteffort-podc4607c73_bd29_496c_94bc_5a0bd504580c.slice. Feb 12 20:24:57.858026 kubelet[2770]: W0212 20:24:57.857983 2770 reflector.go:535] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-21-82" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-21-82' and this object Feb 12 20:24:57.858371 kubelet[2770]: E0212 20:24:57.858326 2770 reflector.go:147] object-"calico-apiserver"/"calico-apiserver-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ip-172-31-21-82" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-21-82' and this object Feb 12 20:24:57.858522 kubelet[2770]: W0212 20:24:57.857999 2770 reflector.go:535] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-21-82" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-21-82' and this object Feb 12 20:24:57.858657 kubelet[2770]: E0212 20:24:57.858634 2770 reflector.go:147] object-"calico-apiserver"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-21-82" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ip-172-31-21-82' and this object Feb 12 20:24:57.938000 audit[5017]: NETFILTER_CFG table=filter:113 family=2 entries=9 op=nft_register_rule pid=5017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:57.938000 audit[5017]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffd6b2cf00 a2=0 a3=ffff841a86c0 items=0 ppid=2902 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:57.938000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:57.940455 kubelet[2770]: I0212 20:24:57.940046 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/c4607c73-bd29-496c-94bc-5a0bd504580c-calico-apiserver-certs\") pod \"calico-apiserver-ff7f5f55f-88md6\" (UID: \"c4607c73-bd29-496c-94bc-5a0bd504580c\") " pod="calico-apiserver/calico-apiserver-ff7f5f55f-88md6" Feb 12 20:24:57.940696 kubelet[2770]: I0212 20:24:57.940670 2770 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5cm4k\" (UniqueName: \"kubernetes.io/projected/c4607c73-bd29-496c-94bc-5a0bd504580c-kube-api-access-5cm4k\") pod \"calico-apiserver-ff7f5f55f-88md6\" (UID: \"c4607c73-bd29-496c-94bc-5a0bd504580c\") " pod="calico-apiserver/calico-apiserver-ff7f5f55f-88md6" Feb 12 20:24:57.941000 audit[5017]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=5017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:57.941000 audit[5017]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffd6b2cf00 a2=0 a3=ffff841a86c0 items=0 ppid=2902 pid=5017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:57.941000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:57.970000 audit[5019]: NETFILTER_CFG table=filter:115 family=2 entries=10 op=nft_register_rule pid=5019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:57.970000 audit[5019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffddc29f80 a2=0 a3=ffff88cbf6c0 items=0 ppid=2902 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:57.970000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:57.973000 audit[5019]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=5019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:24:57.973000 audit[5019]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffddc29f80 a2=0 a3=ffff88cbf6c0 items=0 ppid=2902 pid=5019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:57.973000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:24:59.059755 env[1658]: time="2024-02-12T20:24:59.059067018Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-ff7f5f55f-88md6,Uid:c4607c73-bd29-496c-94bc-5a0bd504580c,Namespace:calico-apiserver,Attempt:0,}" Feb 12 20:24:59.348985 (udev-worker)[5039]: Network interface NamePolicy= disabled on kernel command line. Feb 12 20:24:59.355422 systemd-networkd[1454]: calib20753265b4: Link UP Feb 12 20:24:59.364743 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 12 20:24:59.364848 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib20753265b4: link becomes ready Feb 12 20:24:59.366467 systemd-networkd[1454]: calib20753265b4: Gained carrier Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.187 [INFO][5022] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0 calico-apiserver-ff7f5f55f- calico-apiserver c4607c73-bd29-496c-94bc-5a0bd504580c 1018 0 2024-02-12 20:24:57 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:ff7f5f55f projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ip-172-31-21-82 calico-apiserver-ff7f5f55f-88md6 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib20753265b4 [] []}} ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Namespace="calico-apiserver" Pod="calico-apiserver-ff7f5f55f-88md6" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.187 [INFO][5022] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Namespace="calico-apiserver" Pod="calico-apiserver-ff7f5f55f-88md6" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.261 [INFO][5033] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" HandleID="k8s-pod-network.5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Workload="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.281 [INFO][5033] ipam_plugin.go 268: Auto assigning IP ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" HandleID="k8s-pod-network.5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Workload="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002bc7c0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ip-172-31-21-82", "pod":"calico-apiserver-ff7f5f55f-88md6", "timestamp":"2024-02-12 20:24:59.261019159 +0000 UTC"}, Hostname:"ip-172-31-21-82", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.281 [INFO][5033] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.281 [INFO][5033] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.281 [INFO][5033] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ip-172-31-21-82' Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.284 [INFO][5033] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" host="ip-172-31-21-82" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.292 [INFO][5033] ipam.go 372: Looking up existing affinities for host host="ip-172-31-21-82" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.299 [INFO][5033] ipam.go 489: Trying affinity for 192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.302 [INFO][5033] ipam.go 155: Attempting to load block cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.306 [INFO][5033] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.8.128/26 host="ip-172-31-21-82" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.306 [INFO][5033] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.8.128/26 handle="k8s-pod-network.5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" host="ip-172-31-21-82" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.308 [INFO][5033] ipam.go 1682: Creating new handle: k8s-pod-network.5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8 Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.317 [INFO][5033] ipam.go 1203: Writing block in order to claim IPs block=192.168.8.128/26 handle="k8s-pod-network.5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" host="ip-172-31-21-82" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.331 [INFO][5033] ipam.go 1216: Successfully claimed IPs: [192.168.8.133/26] block=192.168.8.128/26 handle="k8s-pod-network.5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" host="ip-172-31-21-82" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.331 [INFO][5033] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.8.133/26] handle="k8s-pod-network.5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" host="ip-172-31-21-82" Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.331 [INFO][5033] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 12 20:24:59.383927 env[1658]: 2024-02-12 20:24:59.331 [INFO][5033] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.8.133/26] IPv6=[] ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" HandleID="k8s-pod-network.5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Workload="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" Feb 12 20:24:59.385461 env[1658]: 2024-02-12 20:24:59.334 [INFO][5022] k8s.go 385: Populated endpoint ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Namespace="calico-apiserver" Pod="calico-apiserver-ff7f5f55f-88md6" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0", GenerateName:"calico-apiserver-ff7f5f55f-", Namespace:"calico-apiserver", SelfLink:"", UID:"c4607c73-bd29-496c-94bc-5a0bd504580c", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"ff7f5f55f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"", Pod:"calico-apiserver-ff7f5f55f-88md6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.8.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib20753265b4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:59.385461 env[1658]: 2024-02-12 20:24:59.334 [INFO][5022] k8s.go 386: Calico CNI using IPs: [192.168.8.133/32] ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Namespace="calico-apiserver" Pod="calico-apiserver-ff7f5f55f-88md6" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" Feb 12 20:24:59.385461 env[1658]: 2024-02-12 20:24:59.334 [INFO][5022] dataplane_linux.go 68: Setting the host side veth name to calib20753265b4 ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Namespace="calico-apiserver" Pod="calico-apiserver-ff7f5f55f-88md6" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" Feb 12 20:24:59.385461 env[1658]: 2024-02-12 20:24:59.368 [INFO][5022] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Namespace="calico-apiserver" Pod="calico-apiserver-ff7f5f55f-88md6" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" Feb 12 20:24:59.385461 env[1658]: 2024-02-12 20:24:59.369 [INFO][5022] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Namespace="calico-apiserver" Pod="calico-apiserver-ff7f5f55f-88md6" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0", GenerateName:"calico-apiserver-ff7f5f55f-", Namespace:"calico-apiserver", SelfLink:"", UID:"c4607c73-bd29-496c-94bc-5a0bd504580c", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2024, time.February, 12, 20, 24, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"ff7f5f55f", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ip-172-31-21-82", ContainerID:"5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8", Pod:"calico-apiserver-ff7f5f55f-88md6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.8.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib20753265b4", MAC:"fe:8d:fa:68:b8:96", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 12 20:24:59.385461 env[1658]: 2024-02-12 20:24:59.380 [INFO][5022] k8s.go 491: Wrote updated endpoint to datastore ContainerID="5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8" Namespace="calico-apiserver" Pod="calico-apiserver-ff7f5f55f-88md6" WorkloadEndpoint="ip--172--31--21--82-k8s-calico--apiserver--ff7f5f55f--88md6-eth0" Feb 12 20:24:59.417492 env[1658]: time="2024-02-12T20:24:59.417375477Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 12 20:24:59.417817 env[1658]: time="2024-02-12T20:24:59.417733472Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 12 20:24:59.418038 env[1658]: time="2024-02-12T20:24:59.417978835Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 12 20:24:59.418713 env[1658]: time="2024-02-12T20:24:59.418630312Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8 pid=5062 runtime=io.containerd.runc.v2 Feb 12 20:24:59.459445 systemd[1]: Started cri-containerd-5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8.scope. Feb 12 20:24:59.511000 audit[5089]: NETFILTER_CFG table=filter:117 family=2 entries=65 op=nft_register_chain pid=5089 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 12 20:24:59.511000 audit[5089]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=32144 a0=3 a1=ffffe2867c50 a2=0 a3=ffffac91dfa8 items=0 ppid=3817 pid=5089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.511000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.528000 audit: BPF prog-id=188 op=LOAD Feb 12 20:24:59.530000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.530000 audit[5075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=5062 pid=5075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565646431363630633935333236613863346134373664666330366237 Feb 12 20:24:59.530000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.530000 audit[5075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=5062 pid=5075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565646431363630633935333236613863346134373664666330366237 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.531000 audit: BPF prog-id=189 op=LOAD Feb 12 20:24:59.531000 audit[5075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=5062 pid=5075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565646431363630633935333236613863346134373664666330366237 Feb 12 20:24:59.532000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.532000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.532000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.532000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.532000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.532000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.532000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.532000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.532000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.532000 audit: BPF prog-id=190 op=LOAD Feb 12 20:24:59.532000 audit[5075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=5062 pid=5075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565646431363630633935333236613863346134373664666330366237 Feb 12 20:24:59.533000 audit: BPF prog-id=190 op=UNLOAD Feb 12 20:24:59.533000 audit: BPF prog-id=189 op=UNLOAD Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { perfmon } for pid=5075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit[5075]: AVC avc: denied { bpf } for pid=5075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:24:59.533000 audit: BPF prog-id=191 op=LOAD Feb 12 20:24:59.533000 audit[5075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=5062 pid=5075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:24:59.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565646431363630633935333236613863346134373664666330366237 Feb 12 20:24:59.585996 env[1658]: time="2024-02-12T20:24:59.585881207Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-ff7f5f55f-88md6,Uid:c4607c73-bd29-496c-94bc-5a0bd504580c,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8\"" Feb 12 20:24:59.599532 env[1658]: time="2024-02-12T20:24:59.599381633Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 12 20:25:00.454986 update_engine[1635]: I0212 20:25:00.454344 1635 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 12 20:25:00.454986 update_engine[1635]: I0212 20:25:00.454665 1635 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 12 20:25:00.454986 update_engine[1635]: I0212 20:25:00.454929 1635 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Feb 12 20:25:00.456225 update_engine[1635]: E0212 20:25:00.456033 1635 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 12 20:25:00.456225 update_engine[1635]: I0212 20:25:00.456180 1635 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Feb 12 20:25:00.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.82:22-147.75.109.163:34400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:00.612648 systemd[1]: Started sshd@15-172.31.21.82:22-147.75.109.163:34400.service. Feb 12 20:25:00.614894 kernel: kauditd_printk_skb: 73 callbacks suppressed Feb 12 20:25:00.614989 kernel: audit: type=1130 audit(1707769500.612:1455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.82:22-147.75.109.163:34400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:00.799754 sshd[5108]: Accepted publickey for core from 147.75.109.163 port 34400 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:00.799000 audit[5108]: USER_ACCT pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:00.811599 sshd[5108]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:00.807000 audit[5108]: CRED_ACQ pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:00.821849 kernel: audit: type=1101 audit(1707769500.799:1456): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:00.821985 kernel: audit: type=1103 audit(1707769500.807:1457): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:00.829152 kernel: audit: type=1006 audit(1707769500.807:1458): pid=5108 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 12 20:25:00.807000 audit[5108]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7ee8620 a2=3 a3=1 items=0 ppid=1 pid=5108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.838182 systemd-logind[1634]: New session 16 of user core. Feb 12 20:25:00.840507 systemd[1]: Started session-16.scope. Feb 12 20:25:00.842568 kernel: audit: type=1300 audit(1707769500.807:1458): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd7ee8620 a2=3 a3=1 items=0 ppid=1 pid=5108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:00.845911 kernel: audit: type=1327 audit(1707769500.807:1458): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:00.807000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:00.855000 audit[5108]: USER_START pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:00.868000 audit[5110]: CRED_ACQ pid=5110 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:00.883316 kernel: audit: type=1105 audit(1707769500.855:1459): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:00.883445 kernel: audit: type=1103 audit(1707769500.868:1460): pid=5110 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:01.173205 systemd-networkd[1454]: calib20753265b4: Gained IPv6LL Feb 12 20:25:01.282874 sshd[5108]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:01.284000 audit[5108]: USER_END pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:01.296802 systemd[1]: sshd@15-172.31.21.82:22-147.75.109.163:34400.service: Deactivated successfully. Feb 12 20:25:01.298166 systemd[1]: session-16.scope: Deactivated successfully. Feb 12 20:25:01.284000 audit[5108]: CRED_DISP pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:01.309079 kernel: audit: type=1106 audit(1707769501.284:1461): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:01.309397 kernel: audit: type=1104 audit(1707769501.284:1462): pid=5108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:01.310374 systemd-logind[1634]: Session 16 logged out. Waiting for processes to exit. Feb 12 20:25:01.313031 systemd-logind[1634]: Removed session 16. Feb 12 20:25:01.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.21.82:22-147.75.109.163:34400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:02.943676 env[1658]: time="2024-02-12T20:25:02.943615330Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:02.952243 env[1658]: time="2024-02-12T20:25:02.952168501Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:02.958408 env[1658]: time="2024-02-12T20:25:02.957409325Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:02.965113 env[1658]: time="2024-02-12T20:25:02.965021208Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:5ff0bdc8d0b2e9d7819703b18867f60f9153ed01da81e2bbfa22002abec9dc26,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 12 20:25:02.965548 env[1658]: time="2024-02-12T20:25:02.964942332Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\" returns image reference \"sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9\"" Feb 12 20:25:02.970744 env[1658]: time="2024-02-12T20:25:02.970661198Z" level=info msg="CreateContainer within sandbox \"5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Feb 12 20:25:02.991721 env[1658]: time="2024-02-12T20:25:02.991654230Z" level=info msg="CreateContainer within sandbox \"5edd1660c95326a8c4a476dfc06b7173e42e16875ef11292512cae81dca8acb8\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"8a4d508522dce729f18269b0f6b98a5da094e7951a158d1961ae025a15afdf49\"" Feb 12 20:25:02.997054 env[1658]: time="2024-02-12T20:25:02.996983518Z" level=info msg="StartContainer for \"8a4d508522dce729f18269b0f6b98a5da094e7951a158d1961ae025a15afdf49\"" Feb 12 20:25:03.083365 systemd[1]: run-containerd-runc-k8s.io-8a4d508522dce729f18269b0f6b98a5da094e7951a158d1961ae025a15afdf49-runc.cnRhQq.mount: Deactivated successfully. Feb 12 20:25:03.093734 systemd[1]: Started cri-containerd-8a4d508522dce729f18269b0f6b98a5da094e7951a158d1961ae025a15afdf49.scope. Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.155000 audit: BPF prog-id=192 op=LOAD Feb 12 20:25:03.156000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.156000 audit[5128]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=5062 pid=5128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.156000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861346435303835323264636537323966313832363962306636623938 Feb 12 20:25:03.157000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.157000 audit[5128]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=5062 pid=5128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861346435303835323264636537323966313832363962306636623938 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.158000 audit: BPF prog-id=193 op=LOAD Feb 12 20:25:03.158000 audit[5128]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=5062 pid=5128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861346435303835323264636537323966313832363962306636623938 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit: BPF prog-id=194 op=LOAD Feb 12 20:25:03.159000 audit[5128]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=5062 pid=5128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861346435303835323264636537323966313832363962306636623938 Feb 12 20:25:03.159000 audit: BPF prog-id=194 op=UNLOAD Feb 12 20:25:03.159000 audit: BPF prog-id=193 op=UNLOAD Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { perfmon } for pid=5128 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit[5128]: AVC avc: denied { bpf } for pid=5128 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:25:03.159000 audit: BPF prog-id=195 op=LOAD Feb 12 20:25:03.159000 audit[5128]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=5062 pid=5128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:03.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861346435303835323264636537323966313832363962306636623938 Feb 12 20:25:03.250316 env[1658]: time="2024-02-12T20:25:03.250138089Z" level=info msg="StartContainer for \"8a4d508522dce729f18269b0f6b98a5da094e7951a158d1961ae025a15afdf49\" returns successfully" Feb 12 20:25:04.278000 audit[5159]: NETFILTER_CFG table=filter:118 family=2 entries=10 op=nft_register_rule pid=5159 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:04.278000 audit[5159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffd49677b0 a2=0 a3=ffffbf3486c0 items=0 ppid=2902 pid=5159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:04.278000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:04.280000 audit[5159]: NETFILTER_CFG table=nat:119 family=2 entries=20 op=nft_register_rule pid=5159 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:04.280000 audit[5159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffd49677b0 a2=0 a3=ffffbf3486c0 items=0 ppid=2902 pid=5159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:04.280000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:05.010000 audit[5140]: AVC avc: denied { watch } for pid=5140 comm="apiserver" path="/calico-apiserver-certs/..2024_02_12_20_24_58.3768244799/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c489,c694 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c489,c694 tclass=file permissive=0 Feb 12 20:25:05.010000 audit[5140]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f47a00 a2=fc6 a3=0 items=0 ppid=5062 pid=5140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c489,c694 key=(null) Feb 12 20:25:05.010000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 12 20:25:06.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.82:22-147.75.109.163:34468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:06.313653 systemd[1]: Started sshd@16-172.31.21.82:22-147.75.109.163:34468.service. Feb 12 20:25:06.316003 kernel: kauditd_printk_skb: 67 callbacks suppressed Feb 12 20:25:06.316141 kernel: audit: type=1130 audit(1707769506.313:1485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.82:22-147.75.109.163:34468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:06.498000 audit[5165]: USER_ACCT pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.499463 sshd[5165]: Accepted publickey for core from 147.75.109.163 port 34468 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:06.510000 audit[5165]: CRED_ACQ pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.512308 sshd[5165]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:06.520411 kernel: audit: type=1101 audit(1707769506.498:1486): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.520556 kernel: audit: type=1103 audit(1707769506.510:1487): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.527025 kernel: audit: type=1006 audit(1707769506.511:1488): pid=5165 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Feb 12 20:25:06.511000 audit[5165]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4f6eb20 a2=3 a3=1 items=0 ppid=1 pid=5165 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:06.533339 systemd[1]: Started session-17.scope. Feb 12 20:25:06.537576 kernel: audit: type=1300 audit(1707769506.511:1488): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff4f6eb20 a2=3 a3=1 items=0 ppid=1 pid=5165 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:06.536497 systemd-logind[1634]: New session 17 of user core. Feb 12 20:25:06.511000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:06.544307 kernel: audit: type=1327 audit(1707769506.511:1488): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:06.555000 audit[5165]: USER_START pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.558000 audit[5167]: CRED_ACQ pid=5167 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.568379 kernel: audit: type=1105 audit(1707769506.555:1489): pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.578296 kernel: audit: type=1103 audit(1707769506.558:1490): pid=5167 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.845924 sshd[5165]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:06.847000 audit[5165]: USER_END pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.851393 systemd-logind[1634]: Session 17 logged out. Waiting for processes to exit. Feb 12 20:25:06.853583 systemd[1]: session-17.scope: Deactivated successfully. Feb 12 20:25:06.855814 systemd[1]: sshd@16-172.31.21.82:22-147.75.109.163:34468.service: Deactivated successfully. Feb 12 20:25:06.857528 systemd-logind[1634]: Removed session 17. Feb 12 20:25:06.848000 audit[5165]: CRED_DISP pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.871643 kernel: audit: type=1106 audit(1707769506.847:1491): pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.871812 kernel: audit: type=1104 audit(1707769506.848:1492): pid=5165 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:06.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.21.82:22-147.75.109.163:34468 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:06.885456 systemd[1]: Started sshd@17-172.31.21.82:22-147.75.109.163:34480.service. Feb 12 20:25:06.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.82:22-147.75.109.163:34480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:07.062000 audit[5177]: USER_ACCT pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:07.062827 sshd[5177]: Accepted publickey for core from 147.75.109.163 port 34480 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:07.064000 audit[5177]: CRED_ACQ pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:07.064000 audit[5177]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffae66290 a2=3 a3=1 items=0 ppid=1 pid=5177 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:07.064000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:07.065406 sshd[5177]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:07.074654 systemd[1]: Started session-18.scope. Feb 12 20:25:07.076347 systemd-logind[1634]: New session 18 of user core. Feb 12 20:25:07.085000 audit[5177]: USER_START pid=5177 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:07.088000 audit[5179]: CRED_ACQ pid=5179 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:07.224320 systemd[1]: run-containerd-runc-k8s.io-bb81f9aa5586040b7b99fac3856647b242548274dabcfa92fb815425f19bb703-runc.aUMpVf.mount: Deactivated successfully. Feb 12 20:25:07.617331 sshd[5177]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:07.619000 audit[5177]: USER_END pid=5177 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:07.620000 audit[5177]: CRED_DISP pid=5177 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:07.623270 systemd-logind[1634]: Session 18 logged out. Waiting for processes to exit. Feb 12 20:25:07.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.21.82:22-147.75.109.163:34480 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:07.623705 systemd[1]: sshd@17-172.31.21.82:22-147.75.109.163:34480.service: Deactivated successfully. Feb 12 20:25:07.625059 systemd[1]: session-18.scope: Deactivated successfully. Feb 12 20:25:07.627437 systemd-logind[1634]: Removed session 18. Feb 12 20:25:07.647222 systemd[1]: Started sshd@18-172.31.21.82:22-147.75.109.163:34494.service. Feb 12 20:25:07.647000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.21.82:22-147.75.109.163:34494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:07.827000 audit[5226]: USER_ACCT pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:07.827581 sshd[5226]: Accepted publickey for core from 147.75.109.163 port 34494 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:07.828000 audit[5226]: CRED_ACQ pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:07.829000 audit[5226]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9af9070 a2=3 a3=1 items=0 ppid=1 pid=5226 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:07.829000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:07.830071 sshd[5226]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:07.838850 systemd[1]: Started session-19.scope. Feb 12 20:25:07.840562 systemd-logind[1634]: New session 19 of user core. Feb 12 20:25:07.850000 audit[5226]: USER_START pid=5226 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:07.852000 audit[5228]: CRED_ACQ pid=5228 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:08.558000 audit[5242]: NETFILTER_CFG table=filter:120 family=2 entries=10 op=nft_register_rule pid=5242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:08.558000 audit[5242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffdaa0dbd0 a2=0 a3=ffffa2b8f6c0 items=0 ppid=2902 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:08.558000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:08.561000 audit[5242]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=5242 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:08.561000 audit[5242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffdaa0dbd0 a2=0 a3=ffffa2b8f6c0 items=0 ppid=2902 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:08.561000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:09.372156 sshd[5226]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:09.375000 audit[5226]: USER_END pid=5226 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:09.375000 audit[5226]: CRED_DISP pid=5226 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:09.378364 systemd[1]: session-19.scope: Deactivated successfully. Feb 12 20:25:09.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.21.82:22-147.75.109.163:34494 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:09.379729 systemd-logind[1634]: Session 19 logged out. Waiting for processes to exit. Feb 12 20:25:09.380023 systemd[1]: sshd@18-172.31.21.82:22-147.75.109.163:34494.service: Deactivated successfully. Feb 12 20:25:09.382755 systemd-logind[1634]: Removed session 19. Feb 12 20:25:09.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.21.82:22-147.75.109.163:34500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:09.407888 systemd[1]: Started sshd@19-172.31.21.82:22-147.75.109.163:34500.service. Feb 12 20:25:09.446000 audit[5248]: NETFILTER_CFG table=filter:122 family=2 entries=22 op=nft_register_rule pid=5248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:09.446000 audit[5248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=fffff783ad20 a2=0 a3=ffff9977b6c0 items=0 ppid=2902 pid=5248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:09.446000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:09.448000 audit[5248]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=5248 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:09.448000 audit[5248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=fffff783ad20 a2=0 a3=ffff9977b6c0 items=0 ppid=2902 pid=5248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:09.448000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:09.596000 audit[5246]: USER_ACCT pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:09.596687 sshd[5246]: Accepted publickey for core from 147.75.109.163 port 34500 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:09.598000 audit[5246]: CRED_ACQ pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:09.598000 audit[5246]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3168b60 a2=3 a3=1 items=0 ppid=1 pid=5246 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:09.598000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:09.599903 sshd[5246]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:09.609538 systemd[1]: Started session-20.scope. Feb 12 20:25:09.610556 systemd-logind[1634]: New session 20 of user core. Feb 12 20:25:09.624000 audit[5246]: USER_START pid=5246 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:09.627000 audit[5251]: CRED_ACQ pid=5251 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:10.354404 sshd[5246]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:10.355000 audit[5246]: USER_END pid=5246 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:10.356000 audit[5246]: CRED_DISP pid=5246 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:10.359172 systemd[1]: sshd@19-172.31.21.82:22-147.75.109.163:34500.service: Deactivated successfully. Feb 12 20:25:10.359000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.21.82:22-147.75.109.163:34500 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:10.361135 systemd[1]: session-20.scope: Deactivated successfully. Feb 12 20:25:10.362863 systemd-logind[1634]: Session 20 logged out. Waiting for processes to exit. Feb 12 20:25:10.365173 systemd-logind[1634]: Removed session 20. Feb 12 20:25:10.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.21.82:22-147.75.109.163:34512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:10.390706 systemd[1]: Started sshd@20-172.31.21.82:22-147.75.109.163:34512.service. Feb 12 20:25:10.454355 update_engine[1635]: I0212 20:25:10.454279 1635 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 12 20:25:10.454891 update_engine[1635]: I0212 20:25:10.454597 1635 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 12 20:25:10.454891 update_engine[1635]: I0212 20:25:10.454864 1635 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Feb 12 20:25:10.455403 update_engine[1635]: E0212 20:25:10.455353 1635 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 12 20:25:10.455552 update_engine[1635]: I0212 20:25:10.455482 1635 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Feb 12 20:25:10.455552 update_engine[1635]: I0212 20:25:10.455497 1635 omaha_request_action.cc:621] Omaha request response: Feb 12 20:25:10.455676 update_engine[1635]: E0212 20:25:10.455605 1635 omaha_request_action.cc:640] Omaha request network transfer failed. Feb 12 20:25:10.455676 update_engine[1635]: I0212 20:25:10.455627 1635 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Feb 12 20:25:10.455676 update_engine[1635]: I0212 20:25:10.455638 1635 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Feb 12 20:25:10.455676 update_engine[1635]: I0212 20:25:10.455647 1635 update_attempter.cc:306] Processing Done. Feb 12 20:25:10.455676 update_engine[1635]: E0212 20:25:10.455667 1635 update_attempter.cc:619] Update failed. Feb 12 20:25:10.455973 update_engine[1635]: I0212 20:25:10.455678 1635 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Feb 12 20:25:10.455973 update_engine[1635]: I0212 20:25:10.455687 1635 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Feb 12 20:25:10.455973 update_engine[1635]: I0212 20:25:10.455698 1635 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Feb 12 20:25:10.455973 update_engine[1635]: I0212 20:25:10.455801 1635 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Feb 12 20:25:10.455973 update_engine[1635]: I0212 20:25:10.455832 1635 omaha_request_action.cc:270] Posting an Omaha request to disabled Feb 12 20:25:10.455973 update_engine[1635]: I0212 20:25:10.455843 1635 omaha_request_action.cc:271] Request: Feb 12 20:25:10.455973 update_engine[1635]: Feb 12 20:25:10.455973 update_engine[1635]: Feb 12 20:25:10.455973 update_engine[1635]: Feb 12 20:25:10.455973 update_engine[1635]: Feb 12 20:25:10.455973 update_engine[1635]: Feb 12 20:25:10.455973 update_engine[1635]: Feb 12 20:25:10.455973 update_engine[1635]: I0212 20:25:10.455854 1635 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Feb 12 20:25:10.456686 update_engine[1635]: I0212 20:25:10.456060 1635 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Feb 12 20:25:10.456686 update_engine[1635]: I0212 20:25:10.456359 1635 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Feb 12 20:25:10.456686 update_engine[1635]: E0212 20:25:10.456599 1635 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Feb 12 20:25:10.456848 update_engine[1635]: I0212 20:25:10.456701 1635 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Feb 12 20:25:10.456848 update_engine[1635]: I0212 20:25:10.456713 1635 omaha_request_action.cc:621] Omaha request response: Feb 12 20:25:10.456848 update_engine[1635]: I0212 20:25:10.456723 1635 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Feb 12 20:25:10.456848 update_engine[1635]: I0212 20:25:10.456732 1635 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Feb 12 20:25:10.456848 update_engine[1635]: I0212 20:25:10.456741 1635 update_attempter.cc:306] Processing Done. Feb 12 20:25:10.456848 update_engine[1635]: I0212 20:25:10.456750 1635 update_attempter.cc:310] Error event sent. Feb 12 20:25:10.456848 update_engine[1635]: I0212 20:25:10.456763 1635 update_check_scheduler.cc:74] Next update check in 40m6s Feb 12 20:25:10.465739 locksmithd[1720]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Feb 12 20:25:10.465739 locksmithd[1720]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Feb 12 20:25:10.473000 audit[5262]: NETFILTER_CFG table=filter:124 family=2 entries=34 op=nft_register_rule pid=5262 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:10.473000 audit[5262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=ffffd4fabc70 a2=0 a3=ffffb47df6c0 items=0 ppid=2902 pid=5262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:10.473000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:10.475000 audit[5262]: NETFILTER_CFG table=nat:125 family=2 entries=20 op=nft_register_rule pid=5262 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:10.475000 audit[5262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffd4fabc70 a2=0 a3=ffffb47df6c0 items=0 ppid=2902 pid=5262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:10.475000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:10.569000 audit[5259]: USER_ACCT pid=5259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:10.569679 sshd[5259]: Accepted publickey for core from 147.75.109.163 port 34512 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:10.571000 audit[5259]: CRED_ACQ pid=5259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:10.571000 audit[5259]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe93bf250 a2=3 a3=1 items=0 ppid=1 pid=5259 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:10.571000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:10.572986 sshd[5259]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:10.581374 systemd-logind[1634]: New session 21 of user core. Feb 12 20:25:10.582314 systemd[1]: Started session-21.scope. Feb 12 20:25:10.591000 audit[5259]: USER_START pid=5259 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:10.594000 audit[5263]: CRED_ACQ pid=5263 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:10.835980 sshd[5259]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:10.838000 audit[5259]: USER_END pid=5259 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:10.838000 audit[5259]: CRED_DISP pid=5259 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:10.841437 systemd-logind[1634]: Session 21 logged out. Waiting for processes to exit. Feb 12 20:25:10.842020 systemd[1]: sshd@20-172.31.21.82:22-147.75.109.163:34512.service: Deactivated successfully. Feb 12 20:25:10.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.21.82:22-147.75.109.163:34512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:10.843672 systemd[1]: session-21.scope: Deactivated successfully. Feb 12 20:25:10.845735 systemd-logind[1634]: Removed session 21. Feb 12 20:25:15.866271 kernel: kauditd_printk_skb: 63 callbacks suppressed Feb 12 20:25:15.866456 kernel: audit: type=1130 audit(1707769515.863:1536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.21.82:22-147.75.109.163:36060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:15.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.21.82:22-147.75.109.163:36060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:15.863761 systemd[1]: Started sshd@21-172.31.21.82:22-147.75.109.163:36060.service. Feb 12 20:25:16.035000 audit[5295]: USER_ACCT pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.035669 sshd[5295]: Accepted publickey for core from 147.75.109.163 port 36060 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:16.047303 kernel: audit: type=1101 audit(1707769516.035:1537): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.047497 kernel: audit: type=1103 audit(1707769516.046:1538): pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.046000 audit[5295]: CRED_ACQ pid=5295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.048281 sshd[5295]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:16.062804 kernel: audit: type=1006 audit(1707769516.046:1539): pid=5295 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Feb 12 20:25:16.046000 audit[5295]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5143830 a2=3 a3=1 items=0 ppid=1 pid=5295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:16.073697 kernel: audit: type=1300 audit(1707769516.046:1539): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5143830 a2=3 a3=1 items=0 ppid=1 pid=5295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:16.046000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:16.077281 kernel: audit: type=1327 audit(1707769516.046:1539): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:16.080334 systemd-logind[1634]: New session 22 of user core. Feb 12 20:25:16.082216 systemd[1]: Started session-22.scope. Feb 12 20:25:16.093000 audit[5295]: USER_START pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.105000 audit[5297]: CRED_ACQ pid=5297 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.106434 kernel: audit: type=1105 audit(1707769516.093:1540): pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.116281 kernel: audit: type=1103 audit(1707769516.105:1541): pid=5297 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.343901 sshd[5295]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:16.345000 audit[5295]: USER_END pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.349025 systemd-logind[1634]: Session 22 logged out. Waiting for processes to exit. Feb 12 20:25:16.350095 systemd[1]: session-22.scope: Deactivated successfully. Feb 12 20:25:16.351249 systemd[1]: sshd@21-172.31.21.82:22-147.75.109.163:36060.service: Deactivated successfully. Feb 12 20:25:16.354093 systemd-logind[1634]: Removed session 22. Feb 12 20:25:16.345000 audit[5295]: CRED_DISP pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.366614 kernel: audit: type=1106 audit(1707769516.345:1542): pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.366710 kernel: audit: type=1104 audit(1707769516.345:1543): pid=5295 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:16.351000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.21.82:22-147.75.109.163:36060 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:18.575000 audit[5309]: NETFILTER_CFG table=filter:126 family=2 entries=22 op=nft_register_rule pid=5309 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:18.575000 audit[5309]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffc8552850 a2=0 a3=ffffb67596c0 items=0 ppid=2902 pid=5309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:18.575000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:18.582000 audit[5309]: NETFILTER_CFG table=nat:127 family=2 entries=104 op=nft_register_chain pid=5309 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:18.582000 audit[5309]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=47436 a0=3 a1=ffffc8552850 a2=0 a3=ffffb67596c0 items=0 ppid=2902 pid=5309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:18.582000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:21.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.21.82:22-147.75.109.163:36064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:21.372721 systemd[1]: Started sshd@22-172.31.21.82:22-147.75.109.163:36064.service. Feb 12 20:25:21.381260 kernel: kauditd_printk_skb: 7 callbacks suppressed Feb 12 20:25:21.381372 kernel: audit: type=1130 audit(1707769521.371:1547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.21.82:22-147.75.109.163:36064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:21.543000 audit[5314]: USER_ACCT pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.545517 sshd[5314]: Accepted publickey for core from 147.75.109.163 port 36064 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:21.548616 sshd[5314]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:21.546000 audit[5314]: CRED_ACQ pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.565424 kernel: audit: type=1101 audit(1707769521.543:1548): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.565568 kernel: audit: type=1103 audit(1707769521.546:1549): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.571767 kernel: audit: type=1006 audit(1707769521.546:1550): pid=5314 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Feb 12 20:25:21.546000 audit[5314]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5cbfa50 a2=3 a3=1 items=0 ppid=1 pid=5314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:21.582276 kernel: audit: type=1300 audit(1707769521.546:1550): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5cbfa50 a2=3 a3=1 items=0 ppid=1 pid=5314 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:21.546000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:21.586053 kernel: audit: type=1327 audit(1707769521.546:1550): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:21.591725 systemd-logind[1634]: New session 23 of user core. Feb 12 20:25:21.594072 systemd[1]: Started session-23.scope. Feb 12 20:25:21.602000 audit[5314]: USER_START pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.615000 audit[5316]: CRED_ACQ pid=5316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.625758 kernel: audit: type=1105 audit(1707769521.602:1551): pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.625871 kernel: audit: type=1103 audit(1707769521.615:1552): pid=5316 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.856737 sshd[5314]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:21.857000 audit[5314]: USER_END pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.861741 systemd[1]: session-23.scope: Deactivated successfully. Feb 12 20:25:21.863217 systemd[1]: sshd@22-172.31.21.82:22-147.75.109.163:36064.service: Deactivated successfully. Feb 12 20:25:21.858000 audit[5314]: CRED_DISP pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.879797 kernel: audit: type=1106 audit(1707769521.857:1553): pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.879886 kernel: audit: type=1104 audit(1707769521.858:1554): pid=5314 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:21.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.21.82:22-147.75.109.163:36064 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:21.880384 systemd-logind[1634]: Session 23 logged out. Waiting for processes to exit. Feb 12 20:25:21.881920 systemd-logind[1634]: Removed session 23. Feb 12 20:25:26.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.82:22-147.75.109.163:38460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:26.888001 systemd[1]: Started sshd@23-172.31.21.82:22-147.75.109.163:38460.service. Feb 12 20:25:26.890950 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 20:25:26.891051 kernel: audit: type=1130 audit(1707769526.887:1556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.82:22-147.75.109.163:38460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:27.062000 audit[5327]: USER_ACCT pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.064191 sshd[5327]: Accepted publickey for core from 147.75.109.163 port 38460 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:27.076759 sshd[5327]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:27.074000 audit[5327]: CRED_ACQ pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.088706 kernel: audit: type=1101 audit(1707769527.062:1557): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.088834 kernel: audit: type=1103 audit(1707769527.074:1558): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.097288 kernel: audit: type=1006 audit(1707769527.074:1559): pid=5327 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Feb 12 20:25:27.097432 kernel: audit: type=1300 audit(1707769527.074:1559): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe12d1f20 a2=3 a3=1 items=0 ppid=1 pid=5327 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:27.074000 audit[5327]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe12d1f20 a2=3 a3=1 items=0 ppid=1 pid=5327 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:27.097831 systemd-logind[1634]: New session 24 of user core. Feb 12 20:25:27.099064 systemd[1]: Started session-24.scope. Feb 12 20:25:27.107300 kernel: audit: type=1327 audit(1707769527.074:1559): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:27.074000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:27.112000 audit[5327]: USER_START pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.125000 audit[5329]: CRED_ACQ pid=5329 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.136015 kernel: audit: type=1105 audit(1707769527.112:1560): pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.136121 kernel: audit: type=1103 audit(1707769527.125:1561): pid=5329 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.369434 sshd[5327]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:27.370000 audit[5327]: USER_END pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.375600 systemd[1]: session-24.scope: Deactivated successfully. Feb 12 20:25:27.376989 systemd[1]: sshd@23-172.31.21.82:22-147.75.109.163:38460.service: Deactivated successfully. Feb 12 20:25:27.370000 audit[5327]: CRED_DISP pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.392815 kernel: audit: type=1106 audit(1707769527.370:1562): pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.392942 kernel: audit: type=1104 audit(1707769527.370:1563): pid=5327 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:27.392922 systemd-logind[1634]: Session 24 logged out. Waiting for processes to exit. Feb 12 20:25:27.376000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.21.82:22-147.75.109.163:38460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:27.395588 systemd-logind[1634]: Removed session 24. Feb 12 20:25:27.674000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:27.674000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001007e20 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:25:27.674000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:27.674000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:27.674000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40017d85d0 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:25:27.674000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:28.345000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:28.345000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4010c63770 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:25:28.345000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:25:28.353000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:28.353000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4010c63890 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:25:28.353000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:25:28.364000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:28.364000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:28.364000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=76 a1=4010cd6b10 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:25:28.364000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4010c0f980 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:25:28.364000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:25:28.364000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:25:28.518000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:28.518000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4010c0f9c0 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:25:28.518000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:25:28.521000 audit[2546]: AVC avc: denied { watch } for pid=2546 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:28.521000 audit[2546]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4010c63a70 a2=fc6 a3=0 items=0 ppid=2394 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c395,c542 key=(null) Feb 12 20:25:28.521000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32312E3832002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Feb 12 20:25:28.872000 audit[5339]: NETFILTER_CFG table=filter:128 family=2 entries=9 op=nft_register_rule pid=5339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:28.872000 audit[5339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffd51665a0 a2=0 a3=ffff84e3b6c0 items=0 ppid=2902 pid=5339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:28.872000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:28.876000 audit[5339]: NETFILTER_CFG table=nat:129 family=2 entries=51 op=nft_register_chain pid=5339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:28.876000 audit[5339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=17716 a0=3 a1=ffffd51665a0 a2=0 a3=ffff84e3b6c0 items=0 ppid=2902 pid=5339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:28.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:29.091361 systemd[1]: run-containerd-runc-k8s.io-8a4d508522dce729f18269b0f6b98a5da094e7951a158d1961ae025a15afdf49-runc.wIZku4.mount: Deactivated successfully. Feb 12 20:25:29.167486 kubelet[2770]: I0212 20:25:29.167427 2770 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-ff7f5f55f-88md6" podStartSLOduration=28.799476055 podCreationTimestamp="2024-02-12 20:24:57 +0000 UTC" firstStartedPulling="2024-02-12 20:24:59.598388577 +0000 UTC m=+87.203062030" lastFinishedPulling="2024-02-12 20:25:02.966283519 +0000 UTC m=+90.570956972" observedRunningTime="2024-02-12 20:25:04.237302261 +0000 UTC m=+91.841975738" watchObservedRunningTime="2024-02-12 20:25:29.167370997 +0000 UTC m=+116.772044462" Feb 12 20:25:29.205000 audit[5360]: NETFILTER_CFG table=filter:130 family=2 entries=8 op=nft_register_rule pid=5360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:29.205000 audit[5360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=fffff4435270 a2=0 a3=ffff9d8416c0 items=0 ppid=2902 pid=5360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.205000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:29.211000 audit[5360]: NETFILTER_CFG table=nat:131 family=2 entries=58 op=nft_register_chain pid=5360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 12 20:25:29.211000 audit[5360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19604 a0=3 a1=fffff4435270 a2=0 a3=ffff9d8416c0 items=0 ppid=2902 pid=5360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:29.211000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 12 20:25:32.398000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.82:22-147.75.109.163:38464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:32.399777 systemd[1]: Started sshd@24-172.31.21.82:22-147.75.109.163:38464.service. Feb 12 20:25:32.402727 kernel: kauditd_printk_skb: 37 callbacks suppressed Feb 12 20:25:32.402848 kernel: audit: type=1130 audit(1707769532.398:1577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.82:22-147.75.109.163:38464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:32.573000 audit[5362]: USER_ACCT pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.575475 sshd[5362]: Accepted publickey for core from 147.75.109.163 port 38464 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:32.588311 kernel: audit: type=1101 audit(1707769532.573:1578): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.590683 sshd[5362]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:32.588000 audit[5362]: CRED_ACQ pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.606712 kernel: audit: type=1103 audit(1707769532.588:1579): pid=5362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.606859 kernel: audit: type=1006 audit(1707769532.588:1580): pid=5362 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Feb 12 20:25:32.606954 kernel: audit: type=1300 audit(1707769532.588:1580): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4ed1c60 a2=3 a3=1 items=0 ppid=1 pid=5362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:32.588000 audit[5362]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4ed1c60 a2=3 a3=1 items=0 ppid=1 pid=5362 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:32.588000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:32.620982 kernel: audit: type=1327 audit(1707769532.588:1580): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:32.626855 systemd[1]: Started session-25.scope. Feb 12 20:25:32.629705 systemd-logind[1634]: New session 25 of user core. Feb 12 20:25:32.640000 audit[5362]: USER_START pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.652000 audit[5364]: CRED_ACQ pid=5364 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.663105 kernel: audit: type=1105 audit(1707769532.640:1581): pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.663221 kernel: audit: type=1103 audit(1707769532.652:1582): pid=5364 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.911580 sshd[5362]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:32.912000 audit[5362]: USER_END pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.921327 systemd-logind[1634]: Session 25 logged out. Waiting for processes to exit. Feb 12 20:25:32.924311 systemd[1]: session-25.scope: Deactivated successfully. Feb 12 20:25:32.926751 systemd-logind[1634]: Removed session 25. Feb 12 20:25:32.912000 audit[5362]: CRED_DISP pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.929041 systemd[1]: sshd@24-172.31.21.82:22-147.75.109.163:38464.service: Deactivated successfully. Feb 12 20:25:32.937278 kernel: audit: type=1106 audit(1707769532.912:1583): pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.937467 kernel: audit: type=1104 audit(1707769532.912:1584): pid=5362 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:32.927000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.21.82:22-147.75.109.163:38464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:33.699000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:33.699000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d91f60 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:25:33.699000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:33.700000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:33.700000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000d7bf60 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:25:33.700000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:33.719000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:33.719000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400150a1a0 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:25:33.719000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:33.719000 audit[2553]: AVC avc: denied { watch } for pid=2553 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:25:33.719000 audit[2553]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400150a1c0 a2=fc6 a3=0 items=0 ppid=2390 pid=2553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:25:33.719000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:25:37.203986 systemd[1]: run-containerd-runc-k8s.io-bb81f9aa5586040b7b99fac3856647b242548274dabcfa92fb815425f19bb703-runc.9Xk6md.mount: Deactivated successfully. Feb 12 20:25:37.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.82:22-147.75.109.163:51272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:37.940956 systemd[1]: Started sshd@25-172.31.21.82:22-147.75.109.163:51272.service. Feb 12 20:25:37.943372 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 12 20:25:37.943455 kernel: audit: type=1130 audit(1707769537.940:1590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.82:22-147.75.109.163:51272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:38.116000 audit[5398]: USER_ACCT pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.117763 sshd[5398]: Accepted publickey for core from 147.75.109.163 port 51272 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:38.130254 sshd[5398]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:38.128000 audit[5398]: CRED_ACQ pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.141627 kernel: audit: type=1101 audit(1707769538.116:1591): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.141779 kernel: audit: type=1103 audit(1707769538.128:1592): pid=5398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.147838 kernel: audit: type=1006 audit(1707769538.128:1593): pid=5398 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Feb 12 20:25:38.148397 kernel: audit: type=1300 audit(1707769538.128:1593): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7a0ce00 a2=3 a3=1 items=0 ppid=1 pid=5398 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:38.128000 audit[5398]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7a0ce00 a2=3 a3=1 items=0 ppid=1 pid=5398 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:38.128000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:38.163571 kernel: audit: type=1327 audit(1707769538.128:1593): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:38.164485 systemd[1]: Started session-26.scope. Feb 12 20:25:38.165287 systemd-logind[1634]: New session 26 of user core. Feb 12 20:25:38.175000 audit[5398]: USER_START pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.178000 audit[5400]: CRED_ACQ pid=5400 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.196821 kernel: audit: type=1105 audit(1707769538.175:1594): pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.196921 kernel: audit: type=1103 audit(1707769538.178:1595): pid=5400 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.435598 sshd[5398]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:38.436000 audit[5398]: USER_END pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.440109 systemd[1]: session-26.scope: Deactivated successfully. Feb 12 20:25:38.441676 systemd[1]: sshd@25-172.31.21.82:22-147.75.109.163:51272.service: Deactivated successfully. Feb 12 20:25:38.436000 audit[5398]: CRED_DISP pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.450209 systemd-logind[1634]: Session 26 logged out. Waiting for processes to exit. Feb 12 20:25:38.459877 kernel: audit: type=1106 audit(1707769538.436:1596): pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.460047 kernel: audit: type=1104 audit(1707769538.436:1597): pid=5398 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:38.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.21.82:22-147.75.109.163:51272 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:38.460745 systemd-logind[1634]: Removed session 26. Feb 12 20:25:42.980823 systemd[1]: run-containerd-runc-k8s.io-b4eb01e1bb3ef72dbe690a3f296fa89b332a17afc4446eb1f510f426c4a9c4bd-runc.YLYz9G.mount: Deactivated successfully. Feb 12 20:25:43.467507 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 20:25:43.467653 kernel: audit: type=1130 audit(1707769543.464:1599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.82:22-147.75.109.163:51288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:43.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.82:22-147.75.109.163:51288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:43.465181 systemd[1]: Started sshd@26-172.31.21.82:22-147.75.109.163:51288.service. Feb 12 20:25:43.637000 audit[5440]: USER_ACCT pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.639457 sshd[5440]: Accepted publickey for core from 147.75.109.163 port 51288 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:43.649000 audit[5440]: CRED_ACQ pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.652175 sshd[5440]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:43.660551 kernel: audit: type=1101 audit(1707769543.637:1600): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.660759 kernel: audit: type=1103 audit(1707769543.649:1601): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.666627 kernel: audit: type=1006 audit(1707769543.650:1602): pid=5440 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Feb 12 20:25:43.650000 audit[5440]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9dca3b0 a2=3 a3=1 items=0 ppid=1 pid=5440 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:43.677441 kernel: audit: type=1300 audit(1707769543.650:1602): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9dca3b0 a2=3 a3=1 items=0 ppid=1 pid=5440 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:43.650000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:43.681527 kernel: audit: type=1327 audit(1707769543.650:1602): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:43.685166 systemd-logind[1634]: New session 27 of user core. Feb 12 20:25:43.687082 systemd[1]: Started session-27.scope. Feb 12 20:25:43.700000 audit[5440]: USER_START pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.703000 audit[5445]: CRED_ACQ pid=5445 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.722887 kernel: audit: type=1105 audit(1707769543.700:1603): pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.723011 kernel: audit: type=1103 audit(1707769543.703:1604): pid=5445 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.949679 sshd[5440]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:43.950000 audit[5440]: USER_END pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.954609 systemd[1]: session-27.scope: Deactivated successfully. Feb 12 20:25:43.955939 systemd[1]: sshd@26-172.31.21.82:22-147.75.109.163:51288.service: Deactivated successfully. Feb 12 20:25:43.951000 audit[5440]: CRED_DISP pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.972642 kernel: audit: type=1106 audit(1707769543.950:1605): pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.972749 kernel: audit: type=1104 audit(1707769543.951:1606): pid=5440 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:43.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.21.82:22-147.75.109.163:51288 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:43.973598 systemd-logind[1634]: Session 27 logged out. Waiting for processes to exit. Feb 12 20:25:43.975305 systemd-logind[1634]: Removed session 27. Feb 12 20:25:48.980913 systemd[1]: Started sshd@27-172.31.21.82:22-147.75.109.163:44236.service. Feb 12 20:25:48.992444 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 20:25:48.992578 kernel: audit: type=1130 audit(1707769548.980:1608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.21.82:22-147.75.109.163:44236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:48.980000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.21.82:22-147.75.109.163:44236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:49.156000 audit[5457]: USER_ACCT pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.158465 sshd[5457]: Accepted publickey for core from 147.75.109.163 port 44236 ssh2: RSA SHA256:ecUhSIJgyplxxRcBUTSxTp+B0aPr5wgDdA3tvIID0Hc Feb 12 20:25:49.169311 kernel: audit: type=1101 audit(1707769549.156:1609): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.170638 sshd[5457]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 12 20:25:49.168000 audit[5457]: CRED_ACQ pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.188875 kernel: audit: type=1103 audit(1707769549.168:1610): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.188978 kernel: audit: type=1006 audit(1707769549.168:1611): pid=5457 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Feb 12 20:25:49.168000 audit[5457]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5639d40 a2=3 a3=1 items=0 ppid=1 pid=5457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:49.199650 kernel: audit: type=1300 audit(1707769549.168:1611): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5639d40 a2=3 a3=1 items=0 ppid=1 pid=5457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:25:49.168000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:49.203445 kernel: audit: type=1327 audit(1707769549.168:1611): proctitle=737368643A20636F7265205B707269765D Feb 12 20:25:49.204915 systemd-logind[1634]: New session 28 of user core. Feb 12 20:25:49.206172 systemd[1]: Started session-28.scope. Feb 12 20:25:49.215000 audit[5457]: USER_START pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.230340 kernel: audit: type=1105 audit(1707769549.215:1612): pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.230452 kernel: audit: type=1103 audit(1707769549.228:1613): pid=5459 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.228000 audit[5459]: CRED_ACQ pid=5459 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.486248 sshd[5457]: pam_unix(sshd:session): session closed for user core Feb 12 20:25:49.486000 audit[5457]: USER_END pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.490957 systemd-logind[1634]: Session 28 logged out. Waiting for processes to exit. Feb 12 20:25:49.493407 systemd[1]: session-28.scope: Deactivated successfully. Feb 12 20:25:49.495441 systemd-logind[1634]: Removed session 28. Feb 12 20:25:49.496691 systemd[1]: sshd@27-172.31.21.82:22-147.75.109.163:44236.service: Deactivated successfully. Feb 12 20:25:49.487000 audit[5457]: CRED_DISP pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.508425 kernel: audit: type=1106 audit(1707769549.486:1614): pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.508540 kernel: audit: type=1104 audit(1707769549.487:1615): pid=5457 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Feb 12 20:25:49.495000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.21.82:22-147.75.109.163:44236 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 12 20:25:59.093368 systemd[1]: run-containerd-runc-k8s.io-8a4d508522dce729f18269b0f6b98a5da094e7951a158d1961ae025a15afdf49-runc.AEs2W4.mount: Deactivated successfully. Feb 12 20:26:03.358400 systemd[1]: cri-containerd-fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5.scope: Deactivated successfully. Feb 12 20:26:03.358919 systemd[1]: cri-containerd-fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5.scope: Consumed 4.832s CPU time. Feb 12 20:26:03.363000 audit: BPF prog-id=93 op=UNLOAD Feb 12 20:26:03.366747 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 12 20:26:03.366881 kernel: audit: type=1334 audit(1707769563.363:1617): prog-id=93 op=UNLOAD Feb 12 20:26:03.363000 audit: BPF prog-id=101 op=UNLOAD Feb 12 20:26:03.372423 kernel: audit: type=1334 audit(1707769563.363:1618): prog-id=101 op=UNLOAD Feb 12 20:26:03.418419 env[1658]: time="2024-02-12T20:26:03.418348028Z" level=info msg="shim disconnected" id=fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5 Feb 12 20:26:03.419290 env[1658]: time="2024-02-12T20:26:03.419225569Z" level=warning msg="cleaning up after shim disconnected" id=fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5 namespace=k8s.io Feb 12 20:26:03.419442 env[1658]: time="2024-02-12T20:26:03.419412580Z" level=info msg="cleaning up dead shim" Feb 12 20:26:03.420813 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5-rootfs.mount: Deactivated successfully. Feb 12 20:26:03.435223 env[1658]: time="2024-02-12T20:26:03.435162180Z" level=warning msg="cleanup warnings time=\"2024-02-12T20:26:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5511 runtime=io.containerd.runc.v2\n" Feb 12 20:26:04.395382 kubelet[2770]: I0212 20:26:04.395341 2770 scope.go:117] "RemoveContainer" containerID="fbd9c70e6e2f5325058f64ffe90db2a6d46d8e6a2b9bd7dc400df19a0dcba1e5" Feb 12 20:26:04.399539 env[1658]: time="2024-02-12T20:26:04.399470221Z" level=info msg="CreateContainer within sandbox \"e6d3a15bc936a90b2d2bb7f62d8858ab6ba49c239183dd94ae66ce9f7249f8a3\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Feb 12 20:26:04.427666 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2310727710.mount: Deactivated successfully. Feb 12 20:26:04.433533 env[1658]: time="2024-02-12T20:26:04.433449139Z" level=info msg="CreateContainer within sandbox \"e6d3a15bc936a90b2d2bb7f62d8858ab6ba49c239183dd94ae66ce9f7249f8a3\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"ca5bd32107090edfe5715a53901074d38b829753604c430e58823b3fb9a70278\"" Feb 12 20:26:04.434403 env[1658]: time="2024-02-12T20:26:04.434356488Z" level=info msg="StartContainer for \"ca5bd32107090edfe5715a53901074d38b829753604c430e58823b3fb9a70278\"" Feb 12 20:26:04.448895 systemd[1]: cri-containerd-5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c.scope: Deactivated successfully. Feb 12 20:26:04.448000 audit: BPF prog-id=126 op=UNLOAD Feb 12 20:26:04.452141 systemd[1]: cri-containerd-5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c.scope: Consumed 8.496s CPU time. Feb 12 20:26:04.452345 kernel: audit: type=1334 audit(1707769564.448:1619): prog-id=126 op=UNLOAD Feb 12 20:26:04.454000 audit: BPF prog-id=129 op=UNLOAD Feb 12 20:26:04.459472 kernel: audit: type=1334 audit(1707769564.454:1620): prog-id=129 op=UNLOAD Feb 12 20:26:04.498565 systemd[1]: Started cri-containerd-ca5bd32107090edfe5715a53901074d38b829753604c430e58823b3fb9a70278.scope. Feb 12 20:26:04.528501 env[1658]: time="2024-02-12T20:26:04.528437307Z" level=info msg="shim disconnected" id=5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c Feb 12 20:26:04.528829 env[1658]: time="2024-02-12T20:26:04.528790197Z" level=warning msg="cleaning up after shim disconnected" id=5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c namespace=k8s.io Feb 12 20:26:04.528968 env[1658]: time="2024-02-12T20:26:04.528939252Z" level=info msg="cleaning up dead shim" Feb 12 20:26:04.531208 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c-rootfs.mount: Deactivated successfully. Feb 12 20:26:04.559442 env[1658]: time="2024-02-12T20:26:04.559365672Z" level=warning msg="cleanup warnings time=\"2024-02-12T20:26:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5557 runtime=io.containerd.runc.v2\n" Feb 12 20:26:04.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.578285 kernel: audit: type=1400 audit(1707769564.566:1621): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.582184 kernel: audit: type=1400 audit(1707769564.574:1622): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.592987 kernel: audit: type=1400 audit(1707769564.574:1623): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.601103 kernel: audit: type=1400 audit(1707769564.574:1624): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.608680 kernel: audit: type=1400 audit(1707769564.574:1625): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.618185 kernel: audit: type=1400 audit(1707769564.574:1626): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.574000 audit: BPF prog-id=196 op=LOAD Feb 12 20:26:04.575000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.575000 audit[5533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2390 pid=5533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:04.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356264333231303730393065646665353731356135333930313037 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2390 pid=5533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:04.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356264333231303730393065646665353731356135333930313037 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit: BPF prog-id=197 op=LOAD Feb 12 20:26:04.576000 audit[5533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2390 pid=5533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:04.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356264333231303730393065646665353731356135333930313037 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit: BPF prog-id=198 op=LOAD Feb 12 20:26:04.576000 audit[5533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2390 pid=5533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:04.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356264333231303730393065646665353731356135333930313037 Feb 12 20:26:04.576000 audit: BPF prog-id=198 op=UNLOAD Feb 12 20:26:04.576000 audit: BPF prog-id=197 op=UNLOAD Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { perfmon } for pid=5533 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit[5533]: AVC avc: denied { bpf } for pid=5533 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:04.576000 audit: BPF prog-id=199 op=LOAD Feb 12 20:26:04.576000 audit[5533]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2390 pid=5533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:04.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361356264333231303730393065646665353731356135333930313037 Feb 12 20:26:04.659350 env[1658]: time="2024-02-12T20:26:04.658553978Z" level=info msg="StartContainer for \"ca5bd32107090edfe5715a53901074d38b829753604c430e58823b3fb9a70278\" returns successfully" Feb 12 20:26:05.012000 audit[5140]: AVC avc: denied { watch } for pid=5140 comm="apiserver" path="/calico-apiserver-certs/..2024_02_12_20_24_58.3768244799/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c489,c694 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c489,c694 tclass=file permissive=0 Feb 12 20:26:05.012000 audit[5140]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400049ff20 a2=fc6 a3=0 items=0 ppid=5062 pid=5140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c489,c694 key=(null) Feb 12 20:26:05.012000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 12 20:26:05.403603 kubelet[2770]: I0212 20:26:05.403557 2770 scope.go:117] "RemoveContainer" containerID="5de77927c4943ba95d72678377f36162af0ecb50ae189f01fa74847d1887a43c" Feb 12 20:26:05.407438 env[1658]: time="2024-02-12T20:26:05.407374445Z" level=info msg="CreateContainer within sandbox \"defa66508fc80e648e7257102d746a95ad29eb40cf57797cc09a21f402074e3e\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Feb 12 20:26:05.432614 env[1658]: time="2024-02-12T20:26:05.432551984Z" level=info msg="CreateContainer within sandbox \"defa66508fc80e648e7257102d746a95ad29eb40cf57797cc09a21f402074e3e\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"66d4f3f9a42ebdbcf93c9e75b55bd1e59d7b5213aac3913ea0565208f39f11d6\"" Feb 12 20:26:05.433596 env[1658]: time="2024-02-12T20:26:05.433546490Z" level=info msg="StartContainer for \"66d4f3f9a42ebdbcf93c9e75b55bd1e59d7b5213aac3913ea0565208f39f11d6\"" Feb 12 20:26:05.497161 systemd[1]: Started cri-containerd-66d4f3f9a42ebdbcf93c9e75b55bd1e59d7b5213aac3913ea0565208f39f11d6.scope. Feb 12 20:26:05.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.530000 audit: BPF prog-id=200 op=LOAD Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2953 pid=5594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:05.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643466336639613432656264626366393363396537356235356264 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2953 pid=5594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:05.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643466336639613432656264626366393363396537356235356264 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit: BPF prog-id=201 op=LOAD Feb 12 20:26:05.531000 audit[5594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2953 pid=5594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:05.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643466336639613432656264626366393363396537356235356264 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit: BPF prog-id=202 op=LOAD Feb 12 20:26:05.531000 audit[5594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2953 pid=5594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:05.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643466336639613432656264626366393363396537356235356264 Feb 12 20:26:05.531000 audit: BPF prog-id=202 op=UNLOAD Feb 12 20:26:05.531000 audit: BPF prog-id=201 op=UNLOAD Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { perfmon } for pid=5594 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit[5594]: AVC avc: denied { bpf } for pid=5594 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:05.531000 audit: BPF prog-id=203 op=LOAD Feb 12 20:26:05.531000 audit[5594]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2953 pid=5594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:05.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636643466336639613432656264626366393363396537356235356264 Feb 12 20:26:05.571217 env[1658]: time="2024-02-12T20:26:05.571142777Z" level=info msg="StartContainer for \"66d4f3f9a42ebdbcf93c9e75b55bd1e59d7b5213aac3913ea0565208f39f11d6\" returns successfully" Feb 12 20:26:06.071651 kubelet[2770]: E0212 20:26:06.071608 2770 controller.go:193] "Failed to update lease" err="Put \"https://172.31.21.82:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-82?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Feb 12 20:26:06.625000 audit[5558]: AVC avc: denied { watch } for pid=5558 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:26:06.625000 audit[5558]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000924000 a2=fc6 a3=0 items=0 ppid=2390 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:26:06.625000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:26:06.625000 audit[5558]: AVC avc: denied { watch } for pid=5558 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 12 20:26:06.625000 audit[5558]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000077840 a2=fc6 a3=0 items=0 ppid=2390 pid=5558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c578,c791 key=(null) Feb 12 20:26:06.625000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 12 20:26:07.351401 systemd[1]: run-containerd-runc-k8s.io-bb81f9aa5586040b7b99fac3856647b242548274dabcfa92fb815425f19bb703-runc.yi6SMS.mount: Deactivated successfully. Feb 12 20:26:08.140509 systemd[1]: cri-containerd-664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a.scope: Deactivated successfully. Feb 12 20:26:08.141041 systemd[1]: cri-containerd-664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a.scope: Consumed 3.855s CPU time. Feb 12 20:26:08.145000 audit: BPF prog-id=85 op=UNLOAD Feb 12 20:26:08.145000 audit: BPF prog-id=114 op=UNLOAD Feb 12 20:26:08.179401 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a-rootfs.mount: Deactivated successfully. Feb 12 20:26:08.181950 env[1658]: time="2024-02-12T20:26:08.181889033Z" level=info msg="shim disconnected" id=664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a Feb 12 20:26:08.182623 env[1658]: time="2024-02-12T20:26:08.182584673Z" level=warning msg="cleaning up after shim disconnected" id=664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a namespace=k8s.io Feb 12 20:26:08.182764 env[1658]: time="2024-02-12T20:26:08.182736464Z" level=info msg="cleaning up dead shim" Feb 12 20:26:08.198107 env[1658]: time="2024-02-12T20:26:08.198050770Z" level=warning msg="cleanup warnings time=\"2024-02-12T20:26:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5677 runtime=io.containerd.runc.v2\n" Feb 12 20:26:08.417378 kubelet[2770]: I0212 20:26:08.417153 2770 scope.go:117] "RemoveContainer" containerID="664c24d606133098e5ab29390a6e4e30d70c057ffef6d8613b30b40f9d7ead9a" Feb 12 20:26:08.422340 env[1658]: time="2024-02-12T20:26:08.422276861Z" level=info msg="CreateContainer within sandbox \"ca1c69dbb905053167c834bbe16c099643c8245cfc1b36c45e3da7b1da3b1a36\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Feb 12 20:26:08.446185 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount903536838.mount: Deactivated successfully. Feb 12 20:26:08.455748 env[1658]: time="2024-02-12T20:26:08.455682780Z" level=info msg="CreateContainer within sandbox \"ca1c69dbb905053167c834bbe16c099643c8245cfc1b36c45e3da7b1da3b1a36\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"efa9f4f249ec4e23b16813a6ee554a0c07feb8b993f44d0e2645640289c17e89\"" Feb 12 20:26:08.456745 env[1658]: time="2024-02-12T20:26:08.456667205Z" level=info msg="StartContainer for \"efa9f4f249ec4e23b16813a6ee554a0c07feb8b993f44d0e2645640289c17e89\"" Feb 12 20:26:08.499008 systemd[1]: Started cri-containerd-efa9f4f249ec4e23b16813a6ee554a0c07feb8b993f44d0e2645640289c17e89.scope. Feb 12 20:26:08.544376 kernel: kauditd_printk_skb: 119 callbacks suppressed Feb 12 20:26:08.544545 kernel: audit: type=1400 audit(1707769568.536:1662): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.559625 kernel: audit: type=1400 audit(1707769568.536:1663): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.569863 kernel: audit: type=1400 audit(1707769568.536:1664): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.578262 kernel: audit: type=1400 audit(1707769568.536:1665): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.599696 kernel: audit: type=1400 audit(1707769568.536:1666): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.599850 kernel: audit: type=1400 audit(1707769568.536:1667): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.608138 kernel: audit: type=1400 audit(1707769568.536:1668): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.616099 kernel: audit: type=1400 audit(1707769568.536:1669): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.624946 kernel: audit: type=1400 audit(1707769568.536:1670): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.633208 kernel: audit: type=1400 audit(1707769568.538:1671): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.633391 env[1658]: time="2024-02-12T20:26:08.629103705Z" level=info msg="StartContainer for \"efa9f4f249ec4e23b16813a6ee554a0c07feb8b993f44d0e2645640289c17e89\" returns successfully" Feb 12 20:26:08.538000 audit: BPF prog-id=204 op=LOAD Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2368 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:08.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566613966346632343965633465323362313638313361366565353534 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2368 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:08.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566613966346632343965633465323362313638313361366565353534 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit: BPF prog-id=205 op=LOAD Feb 12 20:26:08.546000 audit[5698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2368 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:08.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566613966346632343965633465323362313638313361366565353534 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.546000 audit: BPF prog-id=206 op=LOAD Feb 12 20:26:08.546000 audit[5698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2368 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:08.546000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566613966346632343965633465323362313638313361366565353534 Feb 12 20:26:08.546000 audit: BPF prog-id=206 op=UNLOAD Feb 12 20:26:08.546000 audit: BPF prog-id=205 op=UNLOAD Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { perfmon } for pid=5698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit[5698]: AVC avc: denied { bpf } for pid=5698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 12 20:26:08.547000 audit: BPF prog-id=207 op=LOAD Feb 12 20:26:08.547000 audit[5698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2368 pid=5698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 12 20:26:08.547000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566613966346632343965633465323362313638313361366565353534 Feb 12 20:26:12.980565 systemd[1]: run-containerd-runc-k8s.io-b4eb01e1bb3ef72dbe690a3f296fa89b332a17afc4446eb1f510f426c4a9c4bd-runc.dadqBk.mount: Deactivated successfully. Feb 12 20:26:16.072327 kubelet[2770]: E0212 20:26:16.072275 2770 controller.go:193] "Failed to update lease" err="Put \"https://172.31.21.82:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-21-82?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)"