Feb 9 10:08:05.733842 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Feb 9 10:08:05.733861 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Feb 9 08:56:26 -00 2024 Feb 9 10:08:05.733869 kernel: efi: EFI v2.70 by EDK II Feb 9 10:08:05.733875 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Feb 9 10:08:05.733880 kernel: random: crng init done Feb 9 10:08:05.733885 kernel: ACPI: Early table checksum verification disabled Feb 9 10:08:05.733891 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Feb 9 10:08:05.733899 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Feb 9 10:08:05.733904 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 10:08:05.733910 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 10:08:05.733915 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 10:08:05.733920 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 10:08:05.733926 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 10:08:05.733932 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 10:08:05.733940 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 10:08:05.733946 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 10:08:05.733952 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 10:08:05.733957 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Feb 9 10:08:05.733963 kernel: NUMA: Failed to initialise from firmware Feb 9 10:08:05.733969 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Feb 9 10:08:05.733975 kernel: NUMA: NODE_DATA [mem 0xdcb09900-0xdcb0efff] Feb 9 10:08:05.733980 kernel: Zone ranges: Feb 9 10:08:05.733986 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Feb 9 10:08:05.733993 kernel: DMA32 empty Feb 9 10:08:05.733998 kernel: Normal empty Feb 9 10:08:05.734004 kernel: Movable zone start for each node Feb 9 10:08:05.734009 kernel: Early memory node ranges Feb 9 10:08:05.734015 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Feb 9 10:08:05.734021 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Feb 9 10:08:05.734027 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Feb 9 10:08:05.734032 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Feb 9 10:08:05.734038 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Feb 9 10:08:05.734044 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Feb 9 10:08:05.734049 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Feb 9 10:08:05.734055 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Feb 9 10:08:05.734062 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Feb 9 10:08:05.734068 kernel: psci: probing for conduit method from ACPI. Feb 9 10:08:05.734073 kernel: psci: PSCIv1.1 detected in firmware. Feb 9 10:08:05.734079 kernel: psci: Using standard PSCI v0.2 function IDs Feb 9 10:08:05.734085 kernel: psci: Trusted OS migration not required Feb 9 10:08:05.734093 kernel: psci: SMC Calling Convention v1.1 Feb 9 10:08:05.734100 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Feb 9 10:08:05.734107 kernel: ACPI: SRAT not present Feb 9 10:08:05.734114 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Feb 9 10:08:05.734120 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Feb 9 10:08:05.734126 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Feb 9 10:08:05.734132 kernel: Detected PIPT I-cache on CPU0 Feb 9 10:08:05.734138 kernel: CPU features: detected: GIC system register CPU interface Feb 9 10:08:05.734144 kernel: CPU features: detected: Hardware dirty bit management Feb 9 10:08:05.734150 kernel: CPU features: detected: Spectre-v4 Feb 9 10:08:05.734156 kernel: CPU features: detected: Spectre-BHB Feb 9 10:08:05.734164 kernel: CPU features: kernel page table isolation forced ON by KASLR Feb 9 10:08:05.734170 kernel: CPU features: detected: Kernel page table isolation (KPTI) Feb 9 10:08:05.734176 kernel: CPU features: detected: ARM erratum 1418040 Feb 9 10:08:05.734182 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Feb 9 10:08:05.734188 kernel: Policy zone: DMA Feb 9 10:08:05.734195 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=14ffd9340f674a8d04c9d43eed85484d8b2b7e2bcd8b36a975c9ac66063d537d Feb 9 10:08:05.734202 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 9 10:08:05.734208 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Feb 9 10:08:05.734214 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 9 10:08:05.734221 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 9 10:08:05.734227 kernel: Memory: 2459144K/2572288K available (9792K kernel code, 2092K rwdata, 7556K rodata, 34688K init, 778K bss, 113144K reserved, 0K cma-reserved) Feb 9 10:08:05.734235 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Feb 9 10:08:05.734241 kernel: trace event string verifier disabled Feb 9 10:08:05.734247 kernel: rcu: Preemptible hierarchical RCU implementation. Feb 9 10:08:05.734253 kernel: rcu: RCU event tracing is enabled. Feb 9 10:08:05.734260 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Feb 9 10:08:05.734266 kernel: Trampoline variant of Tasks RCU enabled. Feb 9 10:08:05.734272 kernel: Tracing variant of Tasks RCU enabled. Feb 9 10:08:05.734278 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 9 10:08:05.734284 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Feb 9 10:08:05.734291 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Feb 9 10:08:05.734297 kernel: GICv3: 256 SPIs implemented Feb 9 10:08:05.734304 kernel: GICv3: 0 Extended SPIs implemented Feb 9 10:08:05.734321 kernel: GICv3: Distributor has no Range Selector support Feb 9 10:08:05.734328 kernel: Root IRQ handler: gic_handle_irq Feb 9 10:08:05.734334 kernel: GICv3: 16 PPIs implemented Feb 9 10:08:05.734340 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Feb 9 10:08:05.734346 kernel: ACPI: SRAT not present Feb 9 10:08:05.734352 kernel: ITS [mem 0x08080000-0x0809ffff] Feb 9 10:08:05.734358 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Feb 9 10:08:05.734365 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Feb 9 10:08:05.734371 kernel: GICv3: using LPI property table @0x00000000400d0000 Feb 9 10:08:05.734377 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Feb 9 10:08:05.734383 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 10:08:05.734391 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Feb 9 10:08:05.734397 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Feb 9 10:08:05.734403 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Feb 9 10:08:05.734409 kernel: arm-pv: using stolen time PV Feb 9 10:08:05.734416 kernel: Console: colour dummy device 80x25 Feb 9 10:08:05.734422 kernel: ACPI: Core revision 20210730 Feb 9 10:08:05.734429 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Feb 9 10:08:05.734435 kernel: pid_max: default: 32768 minimum: 301 Feb 9 10:08:05.734442 kernel: LSM: Security Framework initializing Feb 9 10:08:05.734448 kernel: SELinux: Initializing. Feb 9 10:08:05.734455 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 10:08:05.734461 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 10:08:05.734468 kernel: rcu: Hierarchical SRCU implementation. Feb 9 10:08:05.734474 kernel: Platform MSI: ITS@0x8080000 domain created Feb 9 10:08:05.734480 kernel: PCI/MSI: ITS@0x8080000 domain created Feb 9 10:08:05.734487 kernel: Remapping and enabling EFI services. Feb 9 10:08:05.734493 kernel: smp: Bringing up secondary CPUs ... Feb 9 10:08:05.734499 kernel: Detected PIPT I-cache on CPU1 Feb 9 10:08:05.734506 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Feb 9 10:08:05.734513 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Feb 9 10:08:05.734520 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 10:08:05.734526 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Feb 9 10:08:05.734533 kernel: Detected PIPT I-cache on CPU2 Feb 9 10:08:05.734539 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Feb 9 10:08:05.734546 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Feb 9 10:08:05.734552 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 10:08:05.734558 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Feb 9 10:08:05.734564 kernel: Detected PIPT I-cache on CPU3 Feb 9 10:08:05.734571 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Feb 9 10:08:05.734578 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Feb 9 10:08:05.734584 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 10:08:05.734590 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Feb 9 10:08:05.734597 kernel: smp: Brought up 1 node, 4 CPUs Feb 9 10:08:05.734607 kernel: SMP: Total of 4 processors activated. Feb 9 10:08:05.734615 kernel: CPU features: detected: 32-bit EL0 Support Feb 9 10:08:05.734622 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Feb 9 10:08:05.734634 kernel: CPU features: detected: Common not Private translations Feb 9 10:08:05.734641 kernel: CPU features: detected: CRC32 instructions Feb 9 10:08:05.734647 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Feb 9 10:08:05.734654 kernel: CPU features: detected: LSE atomic instructions Feb 9 10:08:05.734660 kernel: CPU features: detected: Privileged Access Never Feb 9 10:08:05.734668 kernel: CPU features: detected: RAS Extension Support Feb 9 10:08:05.734675 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Feb 9 10:08:05.734709 kernel: CPU: All CPU(s) started at EL1 Feb 9 10:08:05.734723 kernel: alternatives: patching kernel code Feb 9 10:08:05.734731 kernel: devtmpfs: initialized Feb 9 10:08:05.734738 kernel: KASLR enabled Feb 9 10:08:05.734745 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 9 10:08:05.734751 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Feb 9 10:08:05.734758 kernel: pinctrl core: initialized pinctrl subsystem Feb 9 10:08:05.734764 kernel: SMBIOS 3.0.0 present. Feb 9 10:08:05.734771 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Feb 9 10:08:05.734778 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 9 10:08:05.734784 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Feb 9 10:08:05.734791 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Feb 9 10:08:05.734799 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Feb 9 10:08:05.734805 kernel: audit: initializing netlink subsys (disabled) Feb 9 10:08:05.734812 kernel: audit: type=2000 audit(0.032:1): state=initialized audit_enabled=0 res=1 Feb 9 10:08:05.734818 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 9 10:08:05.734825 kernel: cpuidle: using governor menu Feb 9 10:08:05.734831 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Feb 9 10:08:05.734838 kernel: ASID allocator initialised with 32768 entries Feb 9 10:08:05.734844 kernel: ACPI: bus type PCI registered Feb 9 10:08:05.734851 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 9 10:08:05.734859 kernel: Serial: AMBA PL011 UART driver Feb 9 10:08:05.734865 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 9 10:08:05.734872 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Feb 9 10:08:05.734878 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 9 10:08:05.734885 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Feb 9 10:08:05.734891 kernel: cryptd: max_cpu_qlen set to 1000 Feb 9 10:08:05.734898 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Feb 9 10:08:05.734905 kernel: ACPI: Added _OSI(Module Device) Feb 9 10:08:05.734911 kernel: ACPI: Added _OSI(Processor Device) Feb 9 10:08:05.734919 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 9 10:08:05.734926 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 9 10:08:05.734932 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 9 10:08:05.734939 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 9 10:08:05.734945 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 9 10:08:05.734952 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 9 10:08:05.734958 kernel: ACPI: Interpreter enabled Feb 9 10:08:05.734965 kernel: ACPI: Using GIC for interrupt routing Feb 9 10:08:05.734971 kernel: ACPI: MCFG table detected, 1 entries Feb 9 10:08:05.734979 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Feb 9 10:08:05.734985 kernel: printk: console [ttyAMA0] enabled Feb 9 10:08:05.734992 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Feb 9 10:08:05.735117 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Feb 9 10:08:05.735183 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Feb 9 10:08:05.735244 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Feb 9 10:08:05.735327 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Feb 9 10:08:05.735394 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Feb 9 10:08:05.735403 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Feb 9 10:08:05.735410 kernel: PCI host bridge to bus 0000:00 Feb 9 10:08:05.735479 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Feb 9 10:08:05.735536 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Feb 9 10:08:05.735591 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Feb 9 10:08:05.735654 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Feb 9 10:08:05.735732 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Feb 9 10:08:05.735802 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Feb 9 10:08:05.735866 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Feb 9 10:08:05.735928 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Feb 9 10:08:05.735991 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Feb 9 10:08:05.736053 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Feb 9 10:08:05.736116 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Feb 9 10:08:05.736180 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Feb 9 10:08:05.738118 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Feb 9 10:08:05.738187 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Feb 9 10:08:05.738243 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Feb 9 10:08:05.738253 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Feb 9 10:08:05.738260 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Feb 9 10:08:05.738266 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Feb 9 10:08:05.738277 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Feb 9 10:08:05.738284 kernel: iommu: Default domain type: Translated Feb 9 10:08:05.738290 kernel: iommu: DMA domain TLB invalidation policy: strict mode Feb 9 10:08:05.738297 kernel: vgaarb: loaded Feb 9 10:08:05.738304 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 9 10:08:05.738344 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 9 10:08:05.738351 kernel: PTP clock support registered Feb 9 10:08:05.738358 kernel: Registered efivars operations Feb 9 10:08:05.738365 kernel: clocksource: Switched to clocksource arch_sys_counter Feb 9 10:08:05.738371 kernel: VFS: Disk quotas dquot_6.6.0 Feb 9 10:08:05.738381 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 9 10:08:05.738387 kernel: pnp: PnP ACPI init Feb 9 10:08:05.738471 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Feb 9 10:08:05.738481 kernel: pnp: PnP ACPI: found 1 devices Feb 9 10:08:05.738488 kernel: NET: Registered PF_INET protocol family Feb 9 10:08:05.738495 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 9 10:08:05.738501 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Feb 9 10:08:05.738508 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 9 10:08:05.738517 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 9 10:08:05.738539 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Feb 9 10:08:05.738546 kernel: TCP: Hash tables configured (established 32768 bind 32768) Feb 9 10:08:05.738553 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 10:08:05.738559 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 10:08:05.738566 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 9 10:08:05.738573 kernel: PCI: CLS 0 bytes, default 64 Feb 9 10:08:05.738579 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Feb 9 10:08:05.738588 kernel: kvm [1]: HYP mode not available Feb 9 10:08:05.738594 kernel: Initialise system trusted keyrings Feb 9 10:08:05.738601 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Feb 9 10:08:05.738608 kernel: Key type asymmetric registered Feb 9 10:08:05.738614 kernel: Asymmetric key parser 'x509' registered Feb 9 10:08:05.738621 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 9 10:08:05.738634 kernel: io scheduler mq-deadline registered Feb 9 10:08:05.738641 kernel: io scheduler kyber registered Feb 9 10:08:05.738647 kernel: io scheduler bfq registered Feb 9 10:08:05.738654 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Feb 9 10:08:05.738663 kernel: ACPI: button: Power Button [PWRB] Feb 9 10:08:05.738670 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Feb 9 10:08:05.738740 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Feb 9 10:08:05.738750 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 9 10:08:05.738757 kernel: thunder_xcv, ver 1.0 Feb 9 10:08:05.738763 kernel: thunder_bgx, ver 1.0 Feb 9 10:08:05.738770 kernel: nicpf, ver 1.0 Feb 9 10:08:05.738776 kernel: nicvf, ver 1.0 Feb 9 10:08:05.738843 kernel: rtc-efi rtc-efi.0: registered as rtc0 Feb 9 10:08:05.738903 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-02-09T10:08:05 UTC (1707473285) Feb 9 10:08:05.738912 kernel: hid: raw HID events driver (C) Jiri Kosina Feb 9 10:08:05.738919 kernel: NET: Registered PF_INET6 protocol family Feb 9 10:08:05.738926 kernel: Segment Routing with IPv6 Feb 9 10:08:05.738932 kernel: In-situ OAM (IOAM) with IPv6 Feb 9 10:08:05.738939 kernel: NET: Registered PF_PACKET protocol family Feb 9 10:08:05.738945 kernel: Key type dns_resolver registered Feb 9 10:08:05.738952 kernel: registered taskstats version 1 Feb 9 10:08:05.738960 kernel: Loading compiled-in X.509 certificates Feb 9 10:08:05.738967 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: ca91574208414224935c9cea513398977daf917d' Feb 9 10:08:05.738973 kernel: Key type .fscrypt registered Feb 9 10:08:05.738980 kernel: Key type fscrypt-provisioning registered Feb 9 10:08:05.738987 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 9 10:08:05.738993 kernel: ima: Allocated hash algorithm: sha1 Feb 9 10:08:05.739000 kernel: ima: No architecture policies found Feb 9 10:08:05.739007 kernel: Freeing unused kernel memory: 34688K Feb 9 10:08:05.739013 kernel: Run /init as init process Feb 9 10:08:05.739021 kernel: with arguments: Feb 9 10:08:05.739027 kernel: /init Feb 9 10:08:05.739034 kernel: with environment: Feb 9 10:08:05.739040 kernel: HOME=/ Feb 9 10:08:05.739047 kernel: TERM=linux Feb 9 10:08:05.739053 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 9 10:08:05.739062 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 10:08:05.739070 systemd[1]: Detected virtualization kvm. Feb 9 10:08:05.739079 systemd[1]: Detected architecture arm64. Feb 9 10:08:05.739086 systemd[1]: Running in initrd. Feb 9 10:08:05.739093 systemd[1]: No hostname configured, using default hostname. Feb 9 10:08:05.739100 systemd[1]: Hostname set to . Feb 9 10:08:05.739107 systemd[1]: Initializing machine ID from VM UUID. Feb 9 10:08:05.739114 systemd[1]: Queued start job for default target initrd.target. Feb 9 10:08:05.739121 systemd[1]: Started systemd-ask-password-console.path. Feb 9 10:08:05.739128 systemd[1]: Reached target cryptsetup.target. Feb 9 10:08:05.739136 systemd[1]: Reached target paths.target. Feb 9 10:08:05.739143 systemd[1]: Reached target slices.target. Feb 9 10:08:05.739150 systemd[1]: Reached target swap.target. Feb 9 10:08:05.739157 systemd[1]: Reached target timers.target. Feb 9 10:08:05.739165 systemd[1]: Listening on iscsid.socket. Feb 9 10:08:05.739172 systemd[1]: Listening on iscsiuio.socket. Feb 9 10:08:05.739179 systemd[1]: Listening on systemd-journald-audit.socket. Feb 9 10:08:05.739187 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 9 10:08:05.739195 systemd[1]: Listening on systemd-journald.socket. Feb 9 10:08:05.739202 systemd[1]: Listening on systemd-networkd.socket. Feb 9 10:08:05.739209 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 10:08:05.739216 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 10:08:05.739223 systemd[1]: Reached target sockets.target. Feb 9 10:08:05.739230 systemd[1]: Starting kmod-static-nodes.service... Feb 9 10:08:05.739237 systemd[1]: Finished network-cleanup.service. Feb 9 10:08:05.739244 systemd[1]: Starting systemd-fsck-usr.service... Feb 9 10:08:05.739253 systemd[1]: Starting systemd-journald.service... Feb 9 10:08:05.739260 systemd[1]: Starting systemd-modules-load.service... Feb 9 10:08:05.739267 systemd[1]: Starting systemd-resolved.service... Feb 9 10:08:05.739274 systemd[1]: Starting systemd-vconsole-setup.service... Feb 9 10:08:05.739281 systemd[1]: Finished kmod-static-nodes.service. Feb 9 10:08:05.739288 systemd[1]: Finished systemd-fsck-usr.service. Feb 9 10:08:05.739295 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 10:08:05.739302 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 10:08:05.739320 kernel: audit: type=1130 audit(1707473285.735:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.739328 systemd[1]: Finished systemd-vconsole-setup.service. Feb 9 10:08:05.739338 systemd-journald[289]: Journal started Feb 9 10:08:05.739378 systemd-journald[289]: Runtime Journal (/run/log/journal/cd5412ac546945b8a39b43a7339f415d) is 6.0M, max 48.7M, 42.6M free. Feb 9 10:08:05.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.730651 systemd-modules-load[290]: Inserted module 'overlay' Feb 9 10:08:05.742828 systemd[1]: Started systemd-journald.service. Feb 9 10:08:05.742851 kernel: audit: type=1130 audit(1707473285.739:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.744473 systemd[1]: Starting dracut-cmdline-ask.service... Feb 9 10:08:05.747944 kernel: audit: type=1130 audit(1707473285.743:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.747962 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 9 10:08:05.750246 systemd-modules-load[290]: Inserted module 'br_netfilter' Feb 9 10:08:05.751112 kernel: Bridge firewalling registered Feb 9 10:08:05.759700 systemd-resolved[291]: Positive Trust Anchors: Feb 9 10:08:05.760433 kernel: SCSI subsystem initialized Feb 9 10:08:05.759714 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 10:08:05.759741 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 10:08:05.763762 systemd-resolved[291]: Defaulting to hostname 'linux'. Feb 9 10:08:05.771177 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 9 10:08:05.771195 kernel: audit: type=1130 audit(1707473285.765:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.771205 kernel: device-mapper: uevent: version 1.0.3 Feb 9 10:08:05.771214 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 9 10:08:05.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.764507 systemd[1]: Started systemd-resolved.service. Feb 9 10:08:05.765837 systemd[1]: Reached target nss-lookup.target. Feb 9 10:08:05.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.771410 systemd[1]: Finished dracut-cmdline-ask.service. Feb 9 10:08:05.775939 kernel: audit: type=1130 audit(1707473285.772:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.772807 systemd-modules-load[290]: Inserted module 'dm_multipath' Feb 9 10:08:05.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.773464 systemd[1]: Starting dracut-cmdline.service... Feb 9 10:08:05.780160 kernel: audit: type=1130 audit(1707473285.776:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.775659 systemd[1]: Finished systemd-modules-load.service. Feb 9 10:08:05.777598 systemd[1]: Starting systemd-sysctl.service... Feb 9 10:08:05.783050 dracut-cmdline[309]: dracut-dracut-053 Feb 9 10:08:05.784755 systemd[1]: Finished systemd-sysctl.service. Feb 9 10:08:05.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.787885 dracut-cmdline[309]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=14ffd9340f674a8d04c9d43eed85484d8b2b7e2bcd8b36a975c9ac66063d537d Feb 9 10:08:05.791095 kernel: audit: type=1130 audit(1707473285.785:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.843330 kernel: Loading iSCSI transport class v2.0-870. Feb 9 10:08:05.851335 kernel: iscsi: registered transport (tcp) Feb 9 10:08:05.864337 kernel: iscsi: registered transport (qla4xxx) Feb 9 10:08:05.864351 kernel: QLogic iSCSI HBA Driver Feb 9 10:08:05.896688 systemd[1]: Finished dracut-cmdline.service. Feb 9 10:08:05.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.898387 systemd[1]: Starting dracut-pre-udev.service... Feb 9 10:08:05.900535 kernel: audit: type=1130 audit(1707473285.897:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:05.942335 kernel: raid6: neonx8 gen() 13650 MB/s Feb 9 10:08:05.959320 kernel: raid6: neonx8 xor() 10809 MB/s Feb 9 10:08:05.976319 kernel: raid6: neonx4 gen() 13526 MB/s Feb 9 10:08:05.993325 kernel: raid6: neonx4 xor() 11277 MB/s Feb 9 10:08:06.010332 kernel: raid6: neonx2 gen() 12938 MB/s Feb 9 10:08:06.027321 kernel: raid6: neonx2 xor() 10248 MB/s Feb 9 10:08:06.044318 kernel: raid6: neonx1 gen() 10507 MB/s Feb 9 10:08:06.061320 kernel: raid6: neonx1 xor() 8752 MB/s Feb 9 10:08:06.078334 kernel: raid6: int64x8 gen() 6270 MB/s Feb 9 10:08:06.095335 kernel: raid6: int64x8 xor() 3529 MB/s Feb 9 10:08:06.112335 kernel: raid6: int64x4 gen() 7199 MB/s Feb 9 10:08:06.129323 kernel: raid6: int64x4 xor() 3842 MB/s Feb 9 10:08:06.146323 kernel: raid6: int64x2 gen() 6133 MB/s Feb 9 10:08:06.163322 kernel: raid6: int64x2 xor() 3315 MB/s Feb 9 10:08:06.180332 kernel: raid6: int64x1 gen() 5024 MB/s Feb 9 10:08:06.197508 kernel: raid6: int64x1 xor() 2630 MB/s Feb 9 10:08:06.197542 kernel: raid6: using algorithm neonx8 gen() 13650 MB/s Feb 9 10:08:06.197560 kernel: raid6: .... xor() 10809 MB/s, rmw enabled Feb 9 10:08:06.197576 kernel: raid6: using neon recovery algorithm Feb 9 10:08:06.208492 kernel: xor: measuring software checksum speed Feb 9 10:08:06.208510 kernel: 8regs : 17315 MB/sec Feb 9 10:08:06.209326 kernel: 32regs : 20749 MB/sec Feb 9 10:08:06.210516 kernel: arm64_neon : 27959 MB/sec Feb 9 10:08:06.210529 kernel: xor: using function: arm64_neon (27959 MB/sec) Feb 9 10:08:06.265337 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Feb 9 10:08:06.275841 systemd[1]: Finished dracut-pre-udev.service. Feb 9 10:08:06.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:06.278000 audit: BPF prog-id=7 op=LOAD Feb 9 10:08:06.278000 audit: BPF prog-id=8 op=LOAD Feb 9 10:08:06.279916 kernel: audit: type=1130 audit(1707473286.276:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:06.279379 systemd[1]: Starting systemd-udevd.service... Feb 9 10:08:06.293684 systemd-udevd[490]: Using default interface naming scheme 'v252'. Feb 9 10:08:06.296991 systemd[1]: Started systemd-udevd.service. Feb 9 10:08:06.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:06.298483 systemd[1]: Starting dracut-pre-trigger.service... Feb 9 10:08:06.309867 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Feb 9 10:08:06.334951 systemd[1]: Finished dracut-pre-trigger.service. Feb 9 10:08:06.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:06.336476 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 10:08:06.369509 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 10:08:06.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:06.399687 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Feb 9 10:08:06.408583 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 9 10:08:06.408619 kernel: GPT:9289727 != 19775487 Feb 9 10:08:06.408636 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 9 10:08:06.408646 kernel: GPT:9289727 != 19775487 Feb 9 10:08:06.408654 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 9 10:08:06.408663 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 9 10:08:06.421130 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 9 10:08:06.422452 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 9 10:08:06.425332 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (539) Feb 9 10:08:06.430049 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 9 10:08:06.435220 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 9 10:08:06.438632 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 10:08:06.440221 systemd[1]: Starting disk-uuid.service... Feb 9 10:08:06.445863 disk-uuid[562]: Primary Header is updated. Feb 9 10:08:06.445863 disk-uuid[562]: Secondary Entries is updated. Feb 9 10:08:06.445863 disk-uuid[562]: Secondary Header is updated. Feb 9 10:08:06.449330 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 9 10:08:07.460666 disk-uuid[563]: The operation has completed successfully. Feb 9 10:08:07.461509 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 9 10:08:07.485668 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 9 10:08:07.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.485754 systemd[1]: Finished disk-uuid.service. Feb 9 10:08:07.487360 systemd[1]: Starting verity-setup.service... Feb 9 10:08:07.506333 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Feb 9 10:08:07.533089 systemd[1]: Found device dev-mapper-usr.device. Feb 9 10:08:07.534606 systemd[1]: Mounting sysusr-usr.mount... Feb 9 10:08:07.535400 systemd[1]: Finished verity-setup.service. Feb 9 10:08:07.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.584670 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 9 10:08:07.584506 systemd[1]: Mounted sysusr-usr.mount. Feb 9 10:08:07.585292 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 9 10:08:07.585970 systemd[1]: Starting ignition-setup.service... Feb 9 10:08:07.588184 systemd[1]: Starting parse-ip-for-networkd.service... Feb 9 10:08:07.596347 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Feb 9 10:08:07.596742 kernel: BTRFS info (device vda6): using free space tree Feb 9 10:08:07.596828 kernel: BTRFS info (device vda6): has skinny extents Feb 9 10:08:07.605232 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 9 10:08:07.612016 systemd[1]: Finished ignition-setup.service. Feb 9 10:08:07.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.613537 systemd[1]: Starting ignition-fetch-offline.service... Feb 9 10:08:07.676935 systemd[1]: Finished parse-ip-for-networkd.service. Feb 9 10:08:07.677000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.678000 audit: BPF prog-id=9 op=LOAD Feb 9 10:08:07.679052 systemd[1]: Starting systemd-networkd.service... Feb 9 10:08:07.704072 systemd-networkd[740]: lo: Link UP Feb 9 10:08:07.704087 systemd-networkd[740]: lo: Gained carrier Feb 9 10:08:07.704469 systemd-networkd[740]: Enumeration completed Feb 9 10:08:07.704586 systemd[1]: Started systemd-networkd.service. Feb 9 10:08:07.705000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.704655 systemd-networkd[740]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 10:08:07.705615 systemd-networkd[740]: eth0: Link UP Feb 9 10:08:07.705618 systemd-networkd[740]: eth0: Gained carrier Feb 9 10:08:07.706503 systemd[1]: Reached target network.target. Feb 9 10:08:07.708409 systemd[1]: Starting iscsiuio.service... Feb 9 10:08:07.719294 systemd[1]: Started iscsiuio.service. Feb 9 10:08:07.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.721675 systemd[1]: Starting iscsid.service... Feb 9 10:08:07.723509 ignition[650]: Ignition 2.14.0 Feb 9 10:08:07.723520 ignition[650]: Stage: fetch-offline Feb 9 10:08:07.723559 ignition[650]: no configs at "/usr/lib/ignition/base.d" Feb 9 10:08:07.723568 ignition[650]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 10:08:07.726714 iscsid[746]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 9 10:08:07.726714 iscsid[746]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 9 10:08:07.726714 iscsid[746]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 9 10:08:07.726714 iscsid[746]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 9 10:08:07.726714 iscsid[746]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 9 10:08:07.726714 iscsid[746]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 9 10:08:07.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.723755 ignition[650]: parsed url from cmdline: "" Feb 9 10:08:07.727407 systemd-networkd[740]: eth0: DHCPv4 address 10.0.0.131/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 9 10:08:07.723759 ignition[650]: no config URL provided Feb 9 10:08:07.728288 systemd[1]: Started iscsid.service. Feb 9 10:08:07.723764 ignition[650]: reading system config file "/usr/lib/ignition/user.ign" Feb 9 10:08:07.733627 systemd[1]: Starting dracut-initqueue.service... Feb 9 10:08:07.723772 ignition[650]: no config at "/usr/lib/ignition/user.ign" Feb 9 10:08:07.723789 ignition[650]: op(1): [started] loading QEMU firmware config module Feb 9 10:08:07.723794 ignition[650]: op(1): executing: "modprobe" "qemu_fw_cfg" Feb 9 10:08:07.728962 ignition[650]: op(1): [finished] loading QEMU firmware config module Feb 9 10:08:07.744775 systemd[1]: Finished dracut-initqueue.service. Feb 9 10:08:07.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.745767 systemd[1]: Reached target remote-fs-pre.target. Feb 9 10:08:07.747111 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 10:08:07.748544 systemd[1]: Reached target remote-fs.target. Feb 9 10:08:07.750611 systemd[1]: Starting dracut-pre-mount.service... Feb 9 10:08:07.758227 systemd[1]: Finished dracut-pre-mount.service. Feb 9 10:08:07.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.811407 ignition[650]: parsing config with SHA512: 1a404ad453ff82befffdc350d7cda7daa7ec6d29709d565a4e0c53cfe2c91f28d8e815b8bd9efb364b3d1d2622483f61ebb89be290eef0a823247ffd02f3d7de Feb 9 10:08:07.851405 unknown[650]: fetched base config from "system" Feb 9 10:08:07.851418 unknown[650]: fetched user config from "qemu" Feb 9 10:08:07.852023 ignition[650]: fetch-offline: fetch-offline passed Feb 9 10:08:07.852092 ignition[650]: Ignition finished successfully Feb 9 10:08:07.853346 systemd[1]: Finished ignition-fetch-offline.service. Feb 9 10:08:07.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.854466 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Feb 9 10:08:07.855224 systemd[1]: Starting ignition-kargs.service... Feb 9 10:08:07.863870 ignition[761]: Ignition 2.14.0 Feb 9 10:08:07.863880 ignition[761]: Stage: kargs Feb 9 10:08:07.863970 ignition[761]: no configs at "/usr/lib/ignition/base.d" Feb 9 10:08:07.863980 ignition[761]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 10:08:07.866510 systemd[1]: Finished ignition-kargs.service. Feb 9 10:08:07.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.865059 ignition[761]: kargs: kargs passed Feb 9 10:08:07.865105 ignition[761]: Ignition finished successfully Feb 9 10:08:07.868634 systemd[1]: Starting ignition-disks.service... Feb 9 10:08:07.875158 ignition[767]: Ignition 2.14.0 Feb 9 10:08:07.875168 ignition[767]: Stage: disks Feb 9 10:08:07.875252 ignition[767]: no configs at "/usr/lib/ignition/base.d" Feb 9 10:08:07.875261 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 10:08:07.876248 ignition[767]: disks: disks passed Feb 9 10:08:07.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.877664 systemd[1]: Finished ignition-disks.service. Feb 9 10:08:07.876290 ignition[767]: Ignition finished successfully Feb 9 10:08:07.878873 systemd[1]: Reached target initrd-root-device.target. Feb 9 10:08:07.879738 systemd[1]: Reached target local-fs-pre.target. Feb 9 10:08:07.880844 systemd[1]: Reached target local-fs.target. Feb 9 10:08:07.881808 systemd[1]: Reached target sysinit.target. Feb 9 10:08:07.882795 systemd[1]: Reached target basic.target. Feb 9 10:08:07.884511 systemd[1]: Starting systemd-fsck-root.service... Feb 9 10:08:07.896270 systemd-fsck[775]: ROOT: clean, 602/553520 files, 56013/553472 blocks Feb 9 10:08:07.903257 systemd[1]: Finished systemd-fsck-root.service. Feb 9 10:08:07.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.905061 systemd[1]: Mounting sysroot.mount... Feb 9 10:08:07.912951 systemd[1]: Mounted sysroot.mount. Feb 9 10:08:07.914153 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 9 10:08:07.913715 systemd[1]: Reached target initrd-root-fs.target. Feb 9 10:08:07.916199 systemd[1]: Mounting sysroot-usr.mount... Feb 9 10:08:07.916931 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 9 10:08:07.916969 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 9 10:08:07.916993 systemd[1]: Reached target ignition-diskful.target. Feb 9 10:08:07.919076 systemd[1]: Mounted sysroot-usr.mount. Feb 9 10:08:07.920491 systemd[1]: Starting initrd-setup-root.service... Feb 9 10:08:07.926701 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Feb 9 10:08:07.931446 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Feb 9 10:08:07.937136 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Feb 9 10:08:07.940481 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Feb 9 10:08:07.977417 systemd[1]: Finished initrd-setup-root.service. Feb 9 10:08:07.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.979036 systemd[1]: Starting ignition-mount.service... Feb 9 10:08:07.980362 systemd[1]: Starting sysroot-boot.service... Feb 9 10:08:07.984292 bash[826]: umount: /sysroot/usr/share/oem: not mounted. Feb 9 10:08:07.995702 ignition[827]: INFO : Ignition 2.14.0 Feb 9 10:08:07.995702 ignition[827]: INFO : Stage: mount Feb 9 10:08:07.996968 ignition[827]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 9 10:08:07.996968 ignition[827]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 10:08:07.998681 ignition[827]: INFO : mount: mount passed Feb 9 10:08:07.998681 ignition[827]: INFO : Ignition finished successfully Feb 9 10:08:07.999000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:07.999087 systemd[1]: Finished ignition-mount.service. Feb 9 10:08:08.007050 systemd[1]: Finished sysroot-boot.service. Feb 9 10:08:08.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:08.544664 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 9 10:08:08.550321 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (837) Feb 9 10:08:08.551781 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Feb 9 10:08:08.551800 kernel: BTRFS info (device vda6): using free space tree Feb 9 10:08:08.551815 kernel: BTRFS info (device vda6): has skinny extents Feb 9 10:08:08.555056 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 9 10:08:08.556637 systemd[1]: Starting ignition-files.service... Feb 9 10:08:08.570013 ignition[857]: INFO : Ignition 2.14.0 Feb 9 10:08:08.570013 ignition[857]: INFO : Stage: files Feb 9 10:08:08.571633 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 9 10:08:08.571633 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 10:08:08.571633 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Feb 9 10:08:08.575016 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 9 10:08:08.575016 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 9 10:08:08.577680 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 9 10:08:08.578946 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 9 10:08:08.578946 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 9 10:08:08.578946 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 10:08:08.578946 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Feb 9 10:08:08.578303 unknown[857]: wrote ssh authorized keys file for user: core Feb 9 10:08:08.847017 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Feb 9 10:08:09.227699 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Feb 9 10:08:09.229706 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 10:08:09.231097 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 10:08:09.231097 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Feb 9 10:08:09.410902 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Feb 9 10:08:09.497421 systemd-networkd[740]: eth0: Gained IPv6LL Feb 9 10:08:09.568847 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Feb 9 10:08:09.571030 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 10:08:09.571030 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 10:08:09.571030 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Feb 9 10:08:09.594158 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Feb 9 10:08:09.633908 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 10:08:09.635423 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 9 10:08:09.638182 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Feb 9 10:08:09.691632 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Feb 9 10:08:09.967759 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Feb 9 10:08:09.969955 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 9 10:08:09.969955 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubelet" Feb 9 10:08:09.969955 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Feb 9 10:08:09.990131 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Feb 9 10:08:10.603481 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Feb 9 10:08:10.606814 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 9 10:08:10.606814 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubectl" Feb 9 10:08:10.606814 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Feb 9 10:08:10.626197 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET result: OK Feb 9 10:08:11.083066 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(8): file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Feb 9 10:08:11.085171 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 9 10:08:11.085171 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 9 10:08:11.085171 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 9 10:08:11.085171 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Feb 9 10:08:11.090415 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Feb 9 10:08:11.090415 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 9 10:08:11.090415 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 9 10:08:11.090415 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 10:08:11.090415 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 10:08:11.090415 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 10:08:11.090415 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 10:08:11.090415 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 10:08:11.090415 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 10:08:11.090415 ignition[857]: INFO : files: op(f): [started] processing unit "prepare-cni-plugins.service" Feb 9 10:08:11.090415 ignition[857]: INFO : files: op(f): op(10): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 10:08:11.090415 ignition[857]: INFO : files: op(f): op(10): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 10:08:11.090415 ignition[857]: INFO : files: op(f): [finished] processing unit "prepare-cni-plugins.service" Feb 9 10:08:11.090415 ignition[857]: INFO : files: op(11): [started] processing unit "prepare-critools.service" Feb 9 10:08:11.090415 ignition[857]: INFO : files: op(11): op(12): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 10:08:11.090415 ignition[857]: INFO : files: op(11): op(12): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 10:08:11.090415 ignition[857]: INFO : files: op(11): [finished] processing unit "prepare-critools.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(15): [started] processing unit "coreos-metadata.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(15): op(16): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(15): op(16): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(15): [finished] processing unit "coreos-metadata.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(17): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(17): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(18): [started] setting preset to enabled for "prepare-critools.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-critools.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(1a): [started] setting preset to disabled for "coreos-metadata.service" Feb 9 10:08:11.112746 ignition[857]: INFO : files: op(1a): op(1b): [started] removing enablement symlink(s) for "coreos-metadata.service" Feb 9 10:08:11.139233 kernel: kauditd_printk_skb: 23 callbacks suppressed Feb 9 10:08:11.139262 kernel: audit: type=1130 audit(1707473291.125:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.139274 kernel: audit: type=1130 audit(1707473291.134:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.139284 kernel: audit: type=1131 audit(1707473291.134:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.124419 systemd[1]: Finished ignition-files.service. Feb 9 10:08:11.140079 ignition[857]: INFO : files: op(1a): op(1b): [finished] removing enablement symlink(s) for "coreos-metadata.service" Feb 9 10:08:11.140079 ignition[857]: INFO : files: op(1a): [finished] setting preset to disabled for "coreos-metadata.service" Feb 9 10:08:11.140079 ignition[857]: INFO : files: createResultFile: createFiles: op(1c): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 9 10:08:11.140079 ignition[857]: INFO : files: createResultFile: createFiles: op(1c): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 9 10:08:11.140079 ignition[857]: INFO : files: files passed Feb 9 10:08:11.140079 ignition[857]: INFO : Ignition finished successfully Feb 9 10:08:11.149830 kernel: audit: type=1130 audit(1707473291.141:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.127132 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 9 10:08:11.129434 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 9 10:08:11.152093 initrd-setup-root-after-ignition[883]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Feb 9 10:08:11.130214 systemd[1]: Starting ignition-quench.service... Feb 9 10:08:11.153867 initrd-setup-root-after-ignition[885]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 9 10:08:11.133747 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 9 10:08:11.133835 systemd[1]: Finished ignition-quench.service. Feb 9 10:08:11.141175 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 9 10:08:11.142248 systemd[1]: Reached target ignition-complete.target. Feb 9 10:08:11.146482 systemd[1]: Starting initrd-parse-etc.service... Feb 9 10:08:11.159633 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 9 10:08:11.159729 systemd[1]: Finished initrd-parse-etc.service. Feb 9 10:08:11.164922 kernel: audit: type=1130 audit(1707473291.160:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.164946 kernel: audit: type=1131 audit(1707473291.160:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.161209 systemd[1]: Reached target initrd-fs.target. Feb 9 10:08:11.165688 systemd[1]: Reached target initrd.target. Feb 9 10:08:11.166835 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 9 10:08:11.167662 systemd[1]: Starting dracut-pre-pivot.service... Feb 9 10:08:11.178391 systemd[1]: Finished dracut-pre-pivot.service. Feb 9 10:08:11.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.180199 systemd[1]: Starting initrd-cleanup.service... Feb 9 10:08:11.182640 kernel: audit: type=1130 audit(1707473291.178:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.188794 systemd[1]: Stopped target nss-lookup.target. Feb 9 10:08:11.189745 systemd[1]: Stopped target remote-cryptsetup.target. Feb 9 10:08:11.190980 systemd[1]: Stopped target timers.target. Feb 9 10:08:11.192114 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 9 10:08:11.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.192226 systemd[1]: Stopped dracut-pre-pivot.service. Feb 9 10:08:11.196787 kernel: audit: type=1131 audit(1707473291.192:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.193365 systemd[1]: Stopped target initrd.target. Feb 9 10:08:11.196173 systemd[1]: Stopped target basic.target. Feb 9 10:08:11.197509 systemd[1]: Stopped target ignition-complete.target. Feb 9 10:08:11.198830 systemd[1]: Stopped target ignition-diskful.target. Feb 9 10:08:11.200162 systemd[1]: Stopped target initrd-root-device.target. Feb 9 10:08:11.201659 systemd[1]: Stopped target remote-fs.target. Feb 9 10:08:11.203022 systemd[1]: Stopped target remote-fs-pre.target. Feb 9 10:08:11.204429 systemd[1]: Stopped target sysinit.target. Feb 9 10:08:11.205749 systemd[1]: Stopped target local-fs.target. Feb 9 10:08:11.207082 systemd[1]: Stopped target local-fs-pre.target. Feb 9 10:08:11.208335 systemd[1]: Stopped target swap.target. Feb 9 10:08:11.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.209529 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 9 10:08:11.214658 kernel: audit: type=1131 audit(1707473291.210:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.209655 systemd[1]: Stopped dracut-pre-mount.service. Feb 9 10:08:11.215000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.210914 systemd[1]: Stopped target cryptsetup.target. Feb 9 10:08:11.219055 kernel: audit: type=1131 audit(1707473291.215:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.213828 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 9 10:08:11.213931 systemd[1]: Stopped dracut-initqueue.service. Feb 9 10:08:11.215464 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 9 10:08:11.215561 systemd[1]: Stopped ignition-fetch-offline.service. Feb 9 10:08:11.218594 systemd[1]: Stopped target paths.target. Feb 9 10:08:11.219744 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 9 10:08:11.223345 systemd[1]: Stopped systemd-ask-password-console.path. Feb 9 10:08:11.224596 systemd[1]: Stopped target slices.target. Feb 9 10:08:11.226077 systemd[1]: Stopped target sockets.target. Feb 9 10:08:11.227427 systemd[1]: iscsid.socket: Deactivated successfully. Feb 9 10:08:11.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.227499 systemd[1]: Closed iscsid.socket. Feb 9 10:08:11.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.228599 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 9 10:08:11.228709 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 9 10:08:11.230030 systemd[1]: ignition-files.service: Deactivated successfully. Feb 9 10:08:11.230118 systemd[1]: Stopped ignition-files.service. Feb 9 10:08:11.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.232203 systemd[1]: Stopping ignition-mount.service... Feb 9 10:08:11.234113 systemd[1]: Stopping iscsiuio.service... Feb 9 10:08:11.234747 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 9 10:08:11.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.241734 ignition[898]: INFO : Ignition 2.14.0 Feb 9 10:08:11.241734 ignition[898]: INFO : Stage: umount Feb 9 10:08:11.241734 ignition[898]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 9 10:08:11.241734 ignition[898]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 10:08:11.241734 ignition[898]: INFO : umount: umount passed Feb 9 10:08:11.241734 ignition[898]: INFO : Ignition finished successfully Feb 9 10:08:11.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.234875 systemd[1]: Stopped kmod-static-nodes.service. Feb 9 10:08:11.237125 systemd[1]: Stopping sysroot-boot.service... Feb 9 10:08:11.239529 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 9 10:08:11.239664 systemd[1]: Stopped systemd-udev-trigger.service. Feb 9 10:08:11.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.241256 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 9 10:08:11.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.241370 systemd[1]: Stopped dracut-pre-trigger.service. Feb 9 10:08:11.254000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.244024 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 9 10:08:11.244115 systemd[1]: Stopped iscsiuio.service. Feb 9 10:08:11.245836 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 9 10:08:11.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.245912 systemd[1]: Stopped ignition-mount.service. Feb 9 10:08:11.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.248490 systemd[1]: sysroot-boot.mount: Deactivated successfully. Feb 9 10:08:11.249025 systemd[1]: Stopped target network.target. Feb 9 10:08:11.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.250566 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 9 10:08:11.250597 systemd[1]: Closed iscsiuio.socket. Feb 9 10:08:11.251412 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 9 10:08:11.251455 systemd[1]: Stopped ignition-disks.service. Feb 9 10:08:11.252677 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 9 10:08:11.252717 systemd[1]: Stopped ignition-kargs.service. Feb 9 10:08:11.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.253810 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 9 10:08:11.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.253847 systemd[1]: Stopped ignition-setup.service. Feb 9 10:08:11.255521 systemd[1]: Stopping systemd-networkd.service... Feb 9 10:08:11.256353 systemd[1]: Stopping systemd-resolved.service... Feb 9 10:08:11.257656 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 9 10:08:11.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.257736 systemd[1]: Finished initrd-cleanup.service. Feb 9 10:08:11.272000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.258710 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 9 10:08:11.258780 systemd[1]: Stopped sysroot-boot.service. Feb 9 10:08:11.274000 audit: BPF prog-id=6 op=UNLOAD Feb 9 10:08:11.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.260489 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 9 10:08:11.260532 systemd[1]: Stopped initrd-setup-root.service. Feb 9 10:08:11.263356 systemd-networkd[740]: eth0: DHCPv6 lease lost Feb 9 10:08:11.278000 audit: BPF prog-id=9 op=UNLOAD Feb 9 10:08:11.264698 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 9 10:08:11.264781 systemd[1]: Stopped systemd-networkd.service. Feb 9 10:08:11.266151 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 9 10:08:11.266234 systemd[1]: Stopped systemd-resolved.service. Feb 9 10:08:11.267404 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 9 10:08:11.282000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.267432 systemd[1]: Closed systemd-networkd.socket. Feb 9 10:08:11.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.268916 systemd[1]: Stopping network-cleanup.service... Feb 9 10:08:11.269919 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 9 10:08:11.269973 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 9 10:08:11.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.271193 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 9 10:08:11.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.271233 systemd[1]: Stopped systemd-sysctl.service. Feb 9 10:08:11.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.272939 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 9 10:08:11.272980 systemd[1]: Stopped systemd-modules-load.service. Feb 9 10:08:11.274637 systemd[1]: Stopping systemd-udevd.service... Feb 9 10:08:11.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.278747 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Feb 9 10:08:11.282052 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 9 10:08:11.282141 systemd[1]: Stopped network-cleanup.service. Feb 9 10:08:11.283500 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 9 10:08:11.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.283605 systemd[1]: Stopped systemd-udevd.service. Feb 9 10:08:11.284834 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 9 10:08:11.284868 systemd[1]: Closed systemd-udevd-control.socket. Feb 9 10:08:11.285559 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 9 10:08:11.285587 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 9 10:08:11.286612 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 9 10:08:11.286646 systemd[1]: Stopped dracut-pre-udev.service. Feb 9 10:08:11.287845 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 9 10:08:11.287882 systemd[1]: Stopped dracut-cmdline.service. Feb 9 10:08:11.288914 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 9 10:08:11.288949 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 9 10:08:11.290687 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 9 10:08:11.291758 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 9 10:08:11.291811 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 9 10:08:11.295651 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 9 10:08:11.295729 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 9 10:08:11.296758 systemd[1]: Reached target initrd-switch-root.target. Feb 9 10:08:11.298623 systemd[1]: Starting initrd-switch-root.service... Feb 9 10:08:11.304541 systemd[1]: Switching root. Feb 9 10:08:11.325759 iscsid[746]: iscsid shutting down. Feb 9 10:08:11.326280 systemd-journald[289]: Journal stopped Feb 9 10:08:13.446360 systemd-journald[289]: Received SIGTERM from PID 1 (systemd). Feb 9 10:08:13.446411 kernel: SELinux: Class mctp_socket not defined in policy. Feb 9 10:08:13.446425 kernel: SELinux: Class anon_inode not defined in policy. Feb 9 10:08:13.446436 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 9 10:08:13.446449 kernel: SELinux: policy capability network_peer_controls=1 Feb 9 10:08:13.446460 kernel: SELinux: policy capability open_perms=1 Feb 9 10:08:13.446470 kernel: SELinux: policy capability extended_socket_class=1 Feb 9 10:08:13.446480 kernel: SELinux: policy capability always_check_network=0 Feb 9 10:08:13.446490 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 9 10:08:13.446499 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 9 10:08:13.446508 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 9 10:08:13.446517 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 9 10:08:13.446527 systemd[1]: Successfully loaded SELinux policy in 31.629ms. Feb 9 10:08:13.446547 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 7.088ms. Feb 9 10:08:13.446558 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 10:08:13.446569 systemd[1]: Detected virtualization kvm. Feb 9 10:08:13.446580 systemd[1]: Detected architecture arm64. Feb 9 10:08:13.446590 systemd[1]: Detected first boot. Feb 9 10:08:13.446607 systemd[1]: Initializing machine ID from VM UUID. Feb 9 10:08:13.446618 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 9 10:08:13.446628 systemd[1]: Populated /etc with preset unit settings. Feb 9 10:08:13.446640 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 10:08:13.446651 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 10:08:13.446664 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 10:08:13.446676 systemd[1]: iscsid.service: Deactivated successfully. Feb 9 10:08:13.446686 systemd[1]: Stopped iscsid.service. Feb 9 10:08:13.446696 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 9 10:08:13.446707 systemd[1]: Stopped initrd-switch-root.service. Feb 9 10:08:13.446718 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 9 10:08:13.446728 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 9 10:08:13.446739 systemd[1]: Created slice system-addon\x2drun.slice. Feb 9 10:08:13.446749 systemd[1]: Created slice system-getty.slice. Feb 9 10:08:13.446759 systemd[1]: Created slice system-modprobe.slice. Feb 9 10:08:13.446770 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 9 10:08:13.446780 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 9 10:08:13.446790 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 9 10:08:13.446802 systemd[1]: Created slice user.slice. Feb 9 10:08:13.446812 systemd[1]: Started systemd-ask-password-console.path. Feb 9 10:08:13.446823 systemd[1]: Started systemd-ask-password-wall.path. Feb 9 10:08:13.446833 systemd[1]: Set up automount boot.automount. Feb 9 10:08:13.446844 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 9 10:08:13.446854 systemd[1]: Stopped target initrd-switch-root.target. Feb 9 10:08:13.446865 systemd[1]: Stopped target initrd-fs.target. Feb 9 10:08:13.446875 systemd[1]: Stopped target initrd-root-fs.target. Feb 9 10:08:13.446888 systemd[1]: Reached target integritysetup.target. Feb 9 10:08:13.446898 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 10:08:13.446908 systemd[1]: Reached target remote-fs.target. Feb 9 10:08:13.446918 systemd[1]: Reached target slices.target. Feb 9 10:08:13.446928 systemd[1]: Reached target swap.target. Feb 9 10:08:13.446939 systemd[1]: Reached target torcx.target. Feb 9 10:08:13.446949 systemd[1]: Reached target veritysetup.target. Feb 9 10:08:13.446960 systemd[1]: Listening on systemd-coredump.socket. Feb 9 10:08:13.446970 systemd[1]: Listening on systemd-initctl.socket. Feb 9 10:08:13.446982 systemd[1]: Listening on systemd-networkd.socket. Feb 9 10:08:13.446992 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 10:08:13.447002 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 10:08:13.447013 systemd[1]: Listening on systemd-userdbd.socket. Feb 9 10:08:13.447027 systemd[1]: Mounting dev-hugepages.mount... Feb 9 10:08:13.447037 systemd[1]: Mounting dev-mqueue.mount... Feb 9 10:08:13.447047 systemd[1]: Mounting media.mount... Feb 9 10:08:13.447058 systemd[1]: Mounting sys-kernel-debug.mount... Feb 9 10:08:13.447068 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 9 10:08:13.447079 systemd[1]: Mounting tmp.mount... Feb 9 10:08:13.447091 systemd[1]: Starting flatcar-tmpfiles.service... Feb 9 10:08:13.447101 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 9 10:08:13.447112 systemd[1]: Starting kmod-static-nodes.service... Feb 9 10:08:13.447122 systemd[1]: Starting modprobe@configfs.service... Feb 9 10:08:13.447132 systemd[1]: Starting modprobe@dm_mod.service... Feb 9 10:08:13.447142 systemd[1]: Starting modprobe@drm.service... Feb 9 10:08:13.447152 systemd[1]: Starting modprobe@efi_pstore.service... Feb 9 10:08:13.447162 systemd[1]: Starting modprobe@fuse.service... Feb 9 10:08:13.447172 systemd[1]: Starting modprobe@loop.service... Feb 9 10:08:13.447184 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 9 10:08:13.447195 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 9 10:08:13.447205 systemd[1]: Stopped systemd-fsck-root.service. Feb 9 10:08:13.447215 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 9 10:08:13.447225 systemd[1]: Stopped systemd-fsck-usr.service. Feb 9 10:08:13.447235 systemd[1]: Stopped systemd-journald.service. Feb 9 10:08:13.447245 kernel: loop: module loaded Feb 9 10:08:13.447255 systemd[1]: Starting systemd-journald.service... Feb 9 10:08:13.447265 systemd[1]: Starting systemd-modules-load.service... Feb 9 10:08:13.447276 kernel: fuse: init (API version 7.34) Feb 9 10:08:13.447288 systemd[1]: Starting systemd-network-generator.service... Feb 9 10:08:13.447300 systemd[1]: Starting systemd-remount-fs.service... Feb 9 10:08:13.447320 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 10:08:13.447331 systemd[1]: verity-setup.service: Deactivated successfully. Feb 9 10:08:13.447343 systemd[1]: Stopped verity-setup.service. Feb 9 10:08:13.447353 systemd[1]: Mounted dev-hugepages.mount. Feb 9 10:08:13.447363 systemd[1]: Mounted dev-mqueue.mount. Feb 9 10:08:13.447373 systemd[1]: Mounted media.mount. Feb 9 10:08:13.447383 systemd[1]: Mounted sys-kernel-debug.mount. Feb 9 10:08:13.447393 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 9 10:08:13.447405 systemd[1]: Mounted tmp.mount. Feb 9 10:08:13.447415 systemd[1]: Finished kmod-static-nodes.service. Feb 9 10:08:13.447427 systemd-journald[989]: Journal started Feb 9 10:08:13.447469 systemd-journald[989]: Runtime Journal (/run/log/journal/cd5412ac546945b8a39b43a7339f415d) is 6.0M, max 48.7M, 42.6M free. Feb 9 10:08:11.381000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 9 10:08:11.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 10:08:11.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 10:08:11.560000 audit: BPF prog-id=10 op=LOAD Feb 9 10:08:11.560000 audit: BPF prog-id=10 op=UNLOAD Feb 9 10:08:11.560000 audit: BPF prog-id=11 op=LOAD Feb 9 10:08:11.560000 audit: BPF prog-id=11 op=UNLOAD Feb 9 10:08:11.604000 audit[931]: AVC avc: denied { associate } for pid=931 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 9 10:08:11.604000 audit[931]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c58b2 a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=914 pid=931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:11.604000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 10:08:11.605000 audit[931]: AVC avc: denied { associate } for pid=931 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 9 10:08:11.605000 audit[931]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5989 a2=1ed a3=0 items=2 ppid=914 pid=931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:11.605000 audit: CWD cwd="/" Feb 9 10:08:11.605000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 10:08:11.605000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 10:08:11.605000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 10:08:13.310000 audit: BPF prog-id=12 op=LOAD Feb 9 10:08:13.310000 audit: BPF prog-id=3 op=UNLOAD Feb 9 10:08:13.311000 audit: BPF prog-id=13 op=LOAD Feb 9 10:08:13.311000 audit: BPF prog-id=14 op=LOAD Feb 9 10:08:13.311000 audit: BPF prog-id=4 op=UNLOAD Feb 9 10:08:13.311000 audit: BPF prog-id=5 op=UNLOAD Feb 9 10:08:13.311000 audit: BPF prog-id=15 op=LOAD Feb 9 10:08:13.311000 audit: BPF prog-id=12 op=UNLOAD Feb 9 10:08:13.311000 audit: BPF prog-id=16 op=LOAD Feb 9 10:08:13.311000 audit: BPF prog-id=17 op=LOAD Feb 9 10:08:13.311000 audit: BPF prog-id=13 op=UNLOAD Feb 9 10:08:13.311000 audit: BPF prog-id=14 op=UNLOAD Feb 9 10:08:13.312000 audit: BPF prog-id=18 op=LOAD Feb 9 10:08:13.312000 audit: BPF prog-id=15 op=UNLOAD Feb 9 10:08:13.448865 systemd[1]: Started systemd-journald.service. Feb 9 10:08:13.312000 audit: BPF prog-id=19 op=LOAD Feb 9 10:08:13.312000 audit: BPF prog-id=20 op=LOAD Feb 9 10:08:13.312000 audit: BPF prog-id=16 op=UNLOAD Feb 9 10:08:13.312000 audit: BPF prog-id=17 op=UNLOAD Feb 9 10:08:13.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.324000 audit: BPF prog-id=18 op=UNLOAD Feb 9 10:08:13.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.419000 audit: BPF prog-id=21 op=LOAD Feb 9 10:08:13.419000 audit: BPF prog-id=22 op=LOAD Feb 9 10:08:13.419000 audit: BPF prog-id=23 op=LOAD Feb 9 10:08:13.419000 audit: BPF prog-id=19 op=UNLOAD Feb 9 10:08:13.419000 audit: BPF prog-id=20 op=UNLOAD Feb 9 10:08:13.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.444000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 9 10:08:13.444000 audit[989]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffe6cf0d90 a2=4000 a3=1 items=0 ppid=1 pid=989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:13.444000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 9 10:08:13.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:11.602799 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 10:08:13.309280 systemd[1]: Queued start job for default target multi-user.target. Feb 9 10:08:11.603468 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 10:08:13.309294 systemd[1]: Unnecessary job was removed for dev-vda6.device. Feb 9 10:08:11.603486 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 10:08:13.314848 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 9 10:08:11.603516 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 9 10:08:13.449227 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 9 10:08:11.603525 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 9 10:08:13.450481 systemd[1]: Finished modprobe@configfs.service. Feb 9 10:08:11.603552 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 9 10:08:13.451305 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 9 10:08:11.603564 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 9 10:08:13.451438 systemd[1]: Finished modprobe@dm_mod.service. Feb 9 10:08:11.603757 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 9 10:08:11.603791 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 10:08:11.603802 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 10:08:11.604194 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 9 10:08:11.604228 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 9 10:08:11.604245 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 9 10:08:11.604259 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 9 10:08:11.604274 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 9 10:08:11.604287 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:11Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 9 10:08:13.024554 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:13Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 10:08:13.452652 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 9 10:08:13.024823 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:13Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 10:08:13.452812 systemd[1]: Finished modprobe@drm.service. Feb 9 10:08:13.024921 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:13Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 10:08:13.025072 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:13Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 10:08:13.025120 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:13Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 9 10:08:13.025177 /usr/lib/systemd/system-generators/torcx-generator[931]: time="2024-02-09T10:08:13Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 9 10:08:13.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.451000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.454017 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 9 10:08:13.454169 systemd[1]: Finished modprobe@efi_pstore.service. Feb 9 10:08:13.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.455350 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 9 10:08:13.455492 systemd[1]: Finished modprobe@fuse.service. Feb 9 10:08:13.455000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.455000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.456465 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 9 10:08:13.456597 systemd[1]: Finished modprobe@loop.service. Feb 9 10:08:13.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.457000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.457704 systemd[1]: Finished systemd-modules-load.service. Feb 9 10:08:13.458000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.458999 systemd[1]: Finished systemd-network-generator.service. Feb 9 10:08:13.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.460136 systemd[1]: Finished systemd-remount-fs.service. Feb 9 10:08:13.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.461393 systemd[1]: Reached target network-pre.target. Feb 9 10:08:13.463266 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 9 10:08:13.465166 systemd[1]: Mounting sys-kernel-config.mount... Feb 9 10:08:13.465893 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 9 10:08:13.467224 systemd[1]: Starting systemd-hwdb-update.service... Feb 9 10:08:13.468956 systemd[1]: Starting systemd-journal-flush.service... Feb 9 10:08:13.469675 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 9 10:08:13.472449 systemd[1]: Starting systemd-random-seed.service... Feb 9 10:08:13.473178 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 9 10:08:13.474404 systemd[1]: Starting systemd-sysctl.service... Feb 9 10:08:13.480905 systemd-journald[989]: Time spent on flushing to /var/log/journal/cd5412ac546945b8a39b43a7339f415d is 18.185ms for 1026 entries. Feb 9 10:08:13.480905 systemd-journald[989]: System Journal (/var/log/journal/cd5412ac546945b8a39b43a7339f415d) is 8.0M, max 195.6M, 187.6M free. Feb 9 10:08:13.517158 systemd-journald[989]: Received client request to flush runtime journal. Feb 9 10:08:13.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.497000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.499000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.477412 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 9 10:08:13.478386 systemd[1]: Mounted sys-kernel-config.mount. Feb 9 10:08:13.488642 systemd[1]: Finished flatcar-tmpfiles.service. Feb 9 10:08:13.518112 udevadm[1033]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Feb 9 10:08:13.493539 systemd[1]: Starting systemd-sysusers.service... Feb 9 10:08:13.496998 systemd[1]: Finished systemd-sysctl.service. Feb 9 10:08:13.498590 systemd[1]: Finished systemd-random-seed.service. Feb 9 10:08:13.499475 systemd[1]: Reached target first-boot-complete.target. Feb 9 10:08:13.504889 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 10:08:13.506836 systemd[1]: Starting systemd-udev-settle.service... Feb 9 10:08:13.519768 systemd[1]: Finished systemd-journal-flush.service. Feb 9 10:08:13.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.524565 systemd[1]: Finished systemd-sysusers.service. Feb 9 10:08:13.525000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.837245 systemd[1]: Finished systemd-hwdb-update.service. Feb 9 10:08:13.838000 audit: BPF prog-id=24 op=LOAD Feb 9 10:08:13.838000 audit: BPF prog-id=25 op=LOAD Feb 9 10:08:13.838000 audit: BPF prog-id=7 op=UNLOAD Feb 9 10:08:13.838000 audit: BPF prog-id=8 op=UNLOAD Feb 9 10:08:13.839455 systemd[1]: Starting systemd-udevd.service... Feb 9 10:08:13.856633 systemd-udevd[1034]: Using default interface naming scheme 'v252'. Feb 9 10:08:13.872254 systemd[1]: Started systemd-udevd.service. Feb 9 10:08:13.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.875000 audit: BPF prog-id=26 op=LOAD Feb 9 10:08:13.876526 systemd[1]: Starting systemd-networkd.service... Feb 9 10:08:13.880000 audit: BPF prog-id=27 op=LOAD Feb 9 10:08:13.880000 audit: BPF prog-id=28 op=LOAD Feb 9 10:08:13.880000 audit: BPF prog-id=29 op=LOAD Feb 9 10:08:13.881741 systemd[1]: Starting systemd-userdbd.service... Feb 9 10:08:13.899767 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Feb 9 10:08:13.917772 systemd[1]: Started systemd-userdbd.service. Feb 9 10:08:13.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.952127 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 10:08:13.977794 systemd-networkd[1036]: lo: Link UP Feb 9 10:08:13.977803 systemd-networkd[1036]: lo: Gained carrier Feb 9 10:08:13.978134 systemd-networkd[1036]: Enumeration completed Feb 9 10:08:13.978235 systemd[1]: Started systemd-networkd.service. Feb 9 10:08:13.978494 systemd-networkd[1036]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 10:08:13.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.981445 systemd-networkd[1036]: eth0: Link UP Feb 9 10:08:13.981455 systemd-networkd[1036]: eth0: Gained carrier Feb 9 10:08:13.985693 systemd[1]: Finished systemd-udev-settle.service. Feb 9 10:08:13.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:13.987427 systemd[1]: Starting lvm2-activation-early.service... Feb 9 10:08:13.997267 lvm[1067]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 10:08:14.003443 systemd-networkd[1036]: eth0: DHCPv4 address 10.0.0.131/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 9 10:08:14.029064 systemd[1]: Finished lvm2-activation-early.service. Feb 9 10:08:14.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.029843 systemd[1]: Reached target cryptsetup.target. Feb 9 10:08:14.031471 systemd[1]: Starting lvm2-activation.service... Feb 9 10:08:14.034904 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 10:08:14.063134 systemd[1]: Finished lvm2-activation.service. Feb 9 10:08:14.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.063884 systemd[1]: Reached target local-fs-pre.target. Feb 9 10:08:14.064506 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 9 10:08:14.064532 systemd[1]: Reached target local-fs.target. Feb 9 10:08:14.065086 systemd[1]: Reached target machines.target. Feb 9 10:08:14.066766 systemd[1]: Starting ldconfig.service... Feb 9 10:08:14.067642 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 9 10:08:14.067697 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 10:08:14.068671 systemd[1]: Starting systemd-boot-update.service... Feb 9 10:08:14.070546 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 9 10:08:14.072591 systemd[1]: Starting systemd-machine-id-commit.service... Feb 9 10:08:14.074359 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 9 10:08:14.074412 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 9 10:08:14.075738 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 9 10:08:14.078133 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1070 (bootctl) Feb 9 10:08:14.082075 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 9 10:08:14.087716 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 9 10:08:14.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.169404 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 9 10:08:14.176792 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 9 10:08:14.181676 systemd-tmpfiles[1073]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 9 10:08:14.198941 systemd-fsck[1080]: fsck.fat 4.2 (2021-01-31) Feb 9 10:08:14.198941 systemd-fsck[1080]: /dev/vda1: 236 files, 113719/258078 clusters Feb 9 10:08:14.201674 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 9 10:08:14.204563 systemd[1]: Mounting boot.mount... Feb 9 10:08:14.202000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.213565 systemd[1]: Mounted boot.mount. Feb 9 10:08:14.217144 systemd[1]: Finished systemd-machine-id-commit.service. Feb 9 10:08:14.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.221530 systemd[1]: Finished systemd-boot-update.service. Feb 9 10:08:14.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.287696 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 9 10:08:14.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.289902 systemd[1]: Starting audit-rules.service... Feb 9 10:08:14.291677 systemd[1]: Starting clean-ca-certificates.service... Feb 9 10:08:14.292713 ldconfig[1069]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 9 10:08:14.293670 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 9 10:08:14.297000 audit: BPF prog-id=30 op=LOAD Feb 9 10:08:14.298535 systemd[1]: Starting systemd-resolved.service... Feb 9 10:08:14.301000 audit: BPF prog-id=31 op=LOAD Feb 9 10:08:14.302546 systemd[1]: Starting systemd-timesyncd.service... Feb 9 10:08:14.304395 systemd[1]: Starting systemd-update-utmp.service... Feb 9 10:08:14.305792 systemd[1]: Finished ldconfig.service. Feb 9 10:08:14.306000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.306964 systemd[1]: Finished clean-ca-certificates.service. Feb 9 10:08:14.308141 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 9 10:08:14.313000 audit[1095]: SYSTEM_BOOT pid=1095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.315985 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 9 10:08:14.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.318394 systemd[1]: Starting systemd-update-done.service... Feb 9 10:08:14.319595 systemd[1]: Finished systemd-update-utmp.service. Feb 9 10:08:14.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.326446 systemd[1]: Finished systemd-update-done.service. Feb 9 10:08:14.326000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:14.337000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 9 10:08:14.337000 audit[1105]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff73a82d0 a2=420 a3=0 items=0 ppid=1084 pid=1105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:14.337000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 9 10:08:14.337682 augenrules[1105]: No rules Feb 9 10:08:14.338251 systemd[1]: Finished audit-rules.service. Feb 9 10:08:14.357940 systemd[1]: Started systemd-timesyncd.service. Feb 9 10:08:14.358897 systemd-resolved[1088]: Positive Trust Anchors: Feb 9 10:08:14.358910 systemd-resolved[1088]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 10:08:14.358937 systemd-resolved[1088]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 10:08:14.359116 systemd[1]: Reached target time-set.target. Feb 9 10:08:14.359256 systemd-timesyncd[1094]: Contacted time server 10.0.0.1:123 (10.0.0.1). Feb 9 10:08:14.359530 systemd-timesyncd[1094]: Initial clock synchronization to Fri 2024-02-09 10:08:14.325478 UTC. Feb 9 10:08:14.368772 systemd-resolved[1088]: Defaulting to hostname 'linux'. Feb 9 10:08:14.370022 systemd[1]: Started systemd-resolved.service. Feb 9 10:08:14.370674 systemd[1]: Reached target network.target. Feb 9 10:08:14.371205 systemd[1]: Reached target nss-lookup.target. Feb 9 10:08:14.371797 systemd[1]: Reached target sysinit.target. Feb 9 10:08:14.372401 systemd[1]: Started motdgen.path. Feb 9 10:08:14.372925 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 9 10:08:14.373840 systemd[1]: Started logrotate.timer. Feb 9 10:08:14.374450 systemd[1]: Started mdadm.timer. Feb 9 10:08:14.375121 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 9 10:08:14.375950 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 9 10:08:14.375981 systemd[1]: Reached target paths.target. Feb 9 10:08:14.376694 systemd[1]: Reached target timers.target. Feb 9 10:08:14.377684 systemd[1]: Listening on dbus.socket. Feb 9 10:08:14.379279 systemd[1]: Starting docker.socket... Feb 9 10:08:14.382158 systemd[1]: Listening on sshd.socket. Feb 9 10:08:14.382827 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 10:08:14.383224 systemd[1]: Listening on docker.socket. Feb 9 10:08:14.384053 systemd[1]: Reached target sockets.target. Feb 9 10:08:14.384827 systemd[1]: Reached target basic.target. Feb 9 10:08:14.385625 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 10:08:14.385654 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 10:08:14.386631 systemd[1]: Starting containerd.service... Feb 9 10:08:14.388252 systemd[1]: Starting dbus.service... Feb 9 10:08:14.389860 systemd[1]: Starting enable-oem-cloudinit.service... Feb 9 10:08:14.391776 systemd[1]: Starting extend-filesystems.service... Feb 9 10:08:14.392667 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 9 10:08:14.393950 systemd[1]: Starting motdgen.service... Feb 9 10:08:14.395759 systemd[1]: Starting prepare-cni-plugins.service... Feb 9 10:08:14.399067 jq[1115]: false Feb 9 10:08:14.398266 systemd[1]: Starting prepare-critools.service... Feb 9 10:08:14.399934 systemd[1]: Starting prepare-helm.service... Feb 9 10:08:14.401563 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 9 10:08:14.403372 systemd[1]: Starting sshd-keygen.service... Feb 9 10:08:14.409443 systemd[1]: Starting systemd-logind.service... Feb 9 10:08:14.411434 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 10:08:14.411492 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 9 10:08:14.411884 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 9 10:08:14.412517 systemd[1]: Starting update-engine.service... Feb 9 10:08:14.414472 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 9 10:08:14.417845 jq[1136]: true Feb 9 10:08:14.417814 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 9 10:08:14.417967 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 9 10:08:14.420367 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 9 10:08:14.428231 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 9 10:08:14.429496 systemd[1]: motdgen.service: Deactivated successfully. Feb 9 10:08:14.431620 systemd[1]: Finished motdgen.service. Feb 9 10:08:14.434706 tar[1139]: crictl Feb 9 10:08:14.437922 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 9 10:08:14.438519 tar[1140]: linux-arm64/helm Feb 9 10:08:14.440924 tar[1138]: ./ Feb 9 10:08:14.440924 tar[1138]: ./loopback Feb 9 10:08:14.441242 jq[1142]: true Feb 9 10:08:14.457933 dbus-daemon[1114]: [system] SELinux support is enabled Feb 9 10:08:14.458078 systemd[1]: Started dbus.service. Feb 9 10:08:14.460564 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 9 10:08:14.460608 systemd[1]: Reached target system-config.target. Feb 9 10:08:14.461467 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 9 10:08:14.461489 systemd[1]: Reached target user-config.target. Feb 9 10:08:14.464792 extend-filesystems[1116]: Found vda Feb 9 10:08:14.464792 extend-filesystems[1116]: Found vda1 Feb 9 10:08:14.464792 extend-filesystems[1116]: Found vda2 Feb 9 10:08:14.464792 extend-filesystems[1116]: Found vda3 Feb 9 10:08:14.464792 extend-filesystems[1116]: Found usr Feb 9 10:08:14.464792 extend-filesystems[1116]: Found vda4 Feb 9 10:08:14.464792 extend-filesystems[1116]: Found vda6 Feb 9 10:08:14.464792 extend-filesystems[1116]: Found vda7 Feb 9 10:08:14.464792 extend-filesystems[1116]: Found vda9 Feb 9 10:08:14.464792 extend-filesystems[1116]: Checking size of /dev/vda9 Feb 9 10:08:14.480738 systemd-logind[1129]: Watching system buttons on /dev/input/event0 (Power Button) Feb 9 10:08:14.482707 systemd-logind[1129]: New seat seat0. Feb 9 10:08:14.484019 systemd[1]: Started systemd-logind.service. Feb 9 10:08:14.486917 bash[1160]: Updated "/home/core/.ssh/authorized_keys" Feb 9 10:08:14.486440 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 9 10:08:14.497507 extend-filesystems[1116]: Resized partition /dev/vda9 Feb 9 10:08:14.499265 extend-filesystems[1170]: resize2fs 1.46.5 (30-Dec-2021) Feb 9 10:08:14.520901 update_engine[1134]: I0209 10:08:14.520284 1134 main.cc:92] Flatcar Update Engine starting Feb 9 10:08:14.530337 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Feb 9 10:08:14.532712 update_engine[1134]: I0209 10:08:14.532680 1134 update_check_scheduler.cc:74] Next update check in 11m26s Feb 9 10:08:14.532919 systemd[1]: Started update-engine.service. Feb 9 10:08:14.535294 tar[1138]: ./bandwidth Feb 9 10:08:14.535419 systemd[1]: Started locksmithd.service. Feb 9 10:08:14.555341 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Feb 9 10:08:14.571059 extend-filesystems[1170]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Feb 9 10:08:14.571059 extend-filesystems[1170]: old_desc_blocks = 1, new_desc_blocks = 1 Feb 9 10:08:14.571059 extend-filesystems[1170]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Feb 9 10:08:14.588520 extend-filesystems[1116]: Resized filesystem in /dev/vda9 Feb 9 10:08:14.573746 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 9 10:08:14.589681 env[1143]: time="2024-02-09T10:08:14.571941400Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 9 10:08:14.573911 systemd[1]: Finished extend-filesystems.service. Feb 9 10:08:14.606231 tar[1138]: ./ptp Feb 9 10:08:14.620367 env[1143]: time="2024-02-09T10:08:14.620320600Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 9 10:08:14.620513 env[1143]: time="2024-02-09T10:08:14.620489560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 9 10:08:14.630677 env[1143]: time="2024-02-09T10:08:14.630635200Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 9 10:08:14.630677 env[1143]: time="2024-02-09T10:08:14.630671240Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 9 10:08:14.630978 env[1143]: time="2024-02-09T10:08:14.630901680Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 10:08:14.630978 env[1143]: time="2024-02-09T10:08:14.630925080Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 9 10:08:14.630978 env[1143]: time="2024-02-09T10:08:14.630939280Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 9 10:08:14.630978 env[1143]: time="2024-02-09T10:08:14.630949080Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 9 10:08:14.631083 env[1143]: time="2024-02-09T10:08:14.631025040Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 9 10:08:14.631399 env[1143]: time="2024-02-09T10:08:14.631371200Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 9 10:08:14.631608 env[1143]: time="2024-02-09T10:08:14.631492200Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 10:08:14.631608 env[1143]: time="2024-02-09T10:08:14.631512720Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 9 10:08:14.631608 env[1143]: time="2024-02-09T10:08:14.631568640Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 9 10:08:14.631608 env[1143]: time="2024-02-09T10:08:14.631580800Z" level=info msg="metadata content store policy set" policy=shared Feb 9 10:08:14.636177 env[1143]: time="2024-02-09T10:08:14.636117040Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 9 10:08:14.636177 env[1143]: time="2024-02-09T10:08:14.636156000Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 9 10:08:14.636177 env[1143]: time="2024-02-09T10:08:14.636171280Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 9 10:08:14.636299 env[1143]: time="2024-02-09T10:08:14.636203600Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 9 10:08:14.636299 env[1143]: time="2024-02-09T10:08:14.636219120Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 9 10:08:14.636299 env[1143]: time="2024-02-09T10:08:14.636233120Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 9 10:08:14.636299 env[1143]: time="2024-02-09T10:08:14.636246040Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 9 10:08:14.636633 env[1143]: time="2024-02-09T10:08:14.636609920Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 9 10:08:14.636674 env[1143]: time="2024-02-09T10:08:14.636640600Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 9 10:08:14.636674 env[1143]: time="2024-02-09T10:08:14.636656720Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 9 10:08:14.636674 env[1143]: time="2024-02-09T10:08:14.636670600Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 9 10:08:14.636732 env[1143]: time="2024-02-09T10:08:14.636684040Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 9 10:08:14.636829 env[1143]: time="2024-02-09T10:08:14.636805040Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 9 10:08:14.636909 env[1143]: time="2024-02-09T10:08:14.636891440Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 9 10:08:14.637167 env[1143]: time="2024-02-09T10:08:14.637107160Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 9 10:08:14.637167 env[1143]: time="2024-02-09T10:08:14.637136400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637167 env[1143]: time="2024-02-09T10:08:14.637160800Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 9 10:08:14.637353 env[1143]: time="2024-02-09T10:08:14.637336160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637353 env[1143]: time="2024-02-09T10:08:14.637352760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637419 env[1143]: time="2024-02-09T10:08:14.637365280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637419 env[1143]: time="2024-02-09T10:08:14.637377360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637419 env[1143]: time="2024-02-09T10:08:14.637388960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637419 env[1143]: time="2024-02-09T10:08:14.637403400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637419 env[1143]: time="2024-02-09T10:08:14.637416400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637523 env[1143]: time="2024-02-09T10:08:14.637428280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637523 env[1143]: time="2024-02-09T10:08:14.637440880Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 9 10:08:14.637568 env[1143]: time="2024-02-09T10:08:14.637559000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637590 env[1143]: time="2024-02-09T10:08:14.637575320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637621 env[1143]: time="2024-02-09T10:08:14.637587720Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637621 env[1143]: time="2024-02-09T10:08:14.637610760Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 9 10:08:14.637662 env[1143]: time="2024-02-09T10:08:14.637627120Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 9 10:08:14.637662 env[1143]: time="2024-02-09T10:08:14.637638560Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 9 10:08:14.637662 env[1143]: time="2024-02-09T10:08:14.637655480Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 9 10:08:14.637723 env[1143]: time="2024-02-09T10:08:14.637689320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 9 10:08:14.637947 env[1143]: time="2024-02-09T10:08:14.637884200Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 9 10:08:14.637947 env[1143]: time="2024-02-09T10:08:14.637945200Z" level=info msg="Connect containerd service" Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.637975400Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.638671040Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.639000520Z" level=info msg="Start subscribing containerd event" Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.639055200Z" level=info msg="Start recovering state" Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.639125800Z" level=info msg="Start event monitor" Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.639128480Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.639146280Z" level=info msg="Start snapshots syncer" Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.639157080Z" level=info msg="Start cni network conf syncer for default" Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.639165040Z" level=info msg="Start streaming server" Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.639177360Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 9 10:08:14.642287 env[1143]: time="2024-02-09T10:08:14.639235000Z" level=info msg="containerd successfully booted in 0.068053s" Feb 9 10:08:14.639327 systemd[1]: Started containerd.service. Feb 9 10:08:14.661162 tar[1138]: ./vlan Feb 9 10:08:14.697738 tar[1138]: ./host-device Feb 9 10:08:14.730659 tar[1138]: ./tuning Feb 9 10:08:14.760626 tar[1138]: ./vrf Feb 9 10:08:14.791417 tar[1138]: ./sbr Feb 9 10:08:14.821161 tar[1138]: ./tap Feb 9 10:08:14.855828 tar[1138]: ./dhcp Feb 9 10:08:14.918615 tar[1140]: linux-arm64/LICENSE Feb 9 10:08:14.918717 tar[1140]: linux-arm64/README.md Feb 9 10:08:14.922677 systemd[1]: Finished prepare-helm.service. Feb 9 10:08:14.941315 tar[1138]: ./static Feb 9 10:08:14.947690 systemd[1]: Finished prepare-critools.service. Feb 9 10:08:14.956286 locksmithd[1171]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 9 10:08:14.967519 tar[1138]: ./firewall Feb 9 10:08:15.004199 tar[1138]: ./macvlan Feb 9 10:08:15.034109 tar[1138]: ./dummy Feb 9 10:08:15.062442 tar[1138]: ./bridge Feb 9 10:08:15.093339 tar[1138]: ./ipvlan Feb 9 10:08:15.121634 tar[1138]: ./portmap Feb 9 10:08:15.148596 tar[1138]: ./host-local Feb 9 10:08:15.181755 systemd[1]: Finished prepare-cni-plugins.service. Feb 9 10:08:15.257556 systemd-networkd[1036]: eth0: Gained IPv6LL Feb 9 10:08:15.823183 sshd_keygen[1135]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 9 10:08:15.840216 systemd[1]: Finished sshd-keygen.service. Feb 9 10:08:15.842569 systemd[1]: Starting issuegen.service... Feb 9 10:08:15.846889 systemd[1]: issuegen.service: Deactivated successfully. Feb 9 10:08:15.847031 systemd[1]: Finished issuegen.service. Feb 9 10:08:15.849190 systemd[1]: Starting systemd-user-sessions.service... Feb 9 10:08:15.854915 systemd[1]: Finished systemd-user-sessions.service. Feb 9 10:08:15.857228 systemd[1]: Started getty@tty1.service. Feb 9 10:08:15.859294 systemd[1]: Started serial-getty@ttyAMA0.service. Feb 9 10:08:15.860325 systemd[1]: Reached target getty.target. Feb 9 10:08:15.861126 systemd[1]: Reached target multi-user.target. Feb 9 10:08:15.863285 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 9 10:08:15.869812 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 9 10:08:15.869974 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 9 10:08:15.871067 systemd[1]: Startup finished in 601ms (kernel) + 5.760s (initrd) + 4.523s (userspace) = 10.884s. Feb 9 10:08:18.337217 systemd[1]: Created slice system-sshd.slice. Feb 9 10:08:18.338246 systemd[1]: Started sshd@0-10.0.0.131:22-10.0.0.1:51784.service. Feb 9 10:08:18.394122 sshd[1202]: Accepted publickey for core from 10.0.0.1 port 51784 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:08:18.396357 sshd[1202]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:08:18.403862 systemd[1]: Created slice user-500.slice. Feb 9 10:08:18.404934 systemd[1]: Starting user-runtime-dir@500.service... Feb 9 10:08:18.406475 systemd-logind[1129]: New session 1 of user core. Feb 9 10:08:18.412376 systemd[1]: Finished user-runtime-dir@500.service. Feb 9 10:08:18.413645 systemd[1]: Starting user@500.service... Feb 9 10:08:18.416203 (systemd)[1205]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:08:18.474795 systemd[1205]: Queued start job for default target default.target. Feb 9 10:08:18.475285 systemd[1205]: Reached target paths.target. Feb 9 10:08:18.475332 systemd[1205]: Reached target sockets.target. Feb 9 10:08:18.475345 systemd[1205]: Reached target timers.target. Feb 9 10:08:18.475355 systemd[1205]: Reached target basic.target. Feb 9 10:08:18.475410 systemd[1205]: Reached target default.target. Feb 9 10:08:18.475434 systemd[1205]: Startup finished in 53ms. Feb 9 10:08:18.475595 systemd[1]: Started user@500.service. Feb 9 10:08:18.476599 systemd[1]: Started session-1.scope. Feb 9 10:08:18.527360 systemd[1]: Started sshd@1-10.0.0.131:22-10.0.0.1:51794.service. Feb 9 10:08:18.569835 sshd[1214]: Accepted publickey for core from 10.0.0.1 port 51794 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:08:18.571279 sshd[1214]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:08:18.575327 systemd[1]: Started session-2.scope. Feb 9 10:08:18.576524 systemd-logind[1129]: New session 2 of user core. Feb 9 10:08:18.632156 sshd[1214]: pam_unix(sshd:session): session closed for user core Feb 9 10:08:18.635293 systemd[1]: Started sshd@2-10.0.0.131:22-10.0.0.1:51806.service. Feb 9 10:08:18.635719 systemd[1]: sshd@1-10.0.0.131:22-10.0.0.1:51794.service: Deactivated successfully. Feb 9 10:08:18.636567 systemd[1]: session-2.scope: Deactivated successfully. Feb 9 10:08:18.636573 systemd-logind[1129]: Session 2 logged out. Waiting for processes to exit. Feb 9 10:08:18.637464 systemd-logind[1129]: Removed session 2. Feb 9 10:08:18.677234 sshd[1219]: Accepted publickey for core from 10.0.0.1 port 51806 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:08:18.678336 sshd[1219]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:08:18.681602 systemd-logind[1129]: New session 3 of user core. Feb 9 10:08:18.681943 systemd[1]: Started session-3.scope. Feb 9 10:08:18.731044 sshd[1219]: pam_unix(sshd:session): session closed for user core Feb 9 10:08:18.734639 systemd[1]: sshd@2-10.0.0.131:22-10.0.0.1:51806.service: Deactivated successfully. Feb 9 10:08:18.735175 systemd[1]: session-3.scope: Deactivated successfully. Feb 9 10:08:18.735716 systemd-logind[1129]: Session 3 logged out. Waiting for processes to exit. Feb 9 10:08:18.736702 systemd[1]: Started sshd@3-10.0.0.131:22-10.0.0.1:51810.service. Feb 9 10:08:18.737268 systemd-logind[1129]: Removed session 3. Feb 9 10:08:18.778559 sshd[1226]: Accepted publickey for core from 10.0.0.1 port 51810 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:08:18.779836 sshd[1226]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:08:18.783003 systemd-logind[1129]: New session 4 of user core. Feb 9 10:08:18.783934 systemd[1]: Started session-4.scope. Feb 9 10:08:18.835983 sshd[1226]: pam_unix(sshd:session): session closed for user core Feb 9 10:08:18.839950 systemd[1]: sshd@3-10.0.0.131:22-10.0.0.1:51810.service: Deactivated successfully. Feb 9 10:08:18.840695 systemd[1]: session-4.scope: Deactivated successfully. Feb 9 10:08:18.841364 systemd-logind[1129]: Session 4 logged out. Waiting for processes to exit. Feb 9 10:08:18.842951 systemd[1]: Started sshd@4-10.0.0.131:22-10.0.0.1:51822.service. Feb 9 10:08:18.843957 systemd-logind[1129]: Removed session 4. Feb 9 10:08:18.885214 sshd[1232]: Accepted publickey for core from 10.0.0.1 port 51822 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:08:18.886352 sshd[1232]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:08:18.889548 systemd-logind[1129]: New session 5 of user core. Feb 9 10:08:18.890936 systemd[1]: Started session-5.scope. Feb 9 10:08:18.949480 sudo[1236]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 9 10:08:18.949685 sudo[1236]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 10:08:18.961462 dbus-daemon[1114]: avc: received setenforce notice (enforcing=1) Feb 9 10:08:18.962283 sudo[1236]: pam_unix(sudo:session): session closed for user root Feb 9 10:08:18.964538 sshd[1232]: pam_unix(sshd:session): session closed for user core Feb 9 10:08:18.967282 systemd[1]: sshd@4-10.0.0.131:22-10.0.0.1:51822.service: Deactivated successfully. Feb 9 10:08:18.967927 systemd[1]: session-5.scope: Deactivated successfully. Feb 9 10:08:18.968521 systemd-logind[1129]: Session 5 logged out. Waiting for processes to exit. Feb 9 10:08:18.970058 systemd[1]: Started sshd@5-10.0.0.131:22-10.0.0.1:51826.service. Feb 9 10:08:18.970767 systemd-logind[1129]: Removed session 5. Feb 9 10:08:19.012189 sshd[1240]: Accepted publickey for core from 10.0.0.1 port 51826 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:08:19.013570 sshd[1240]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:08:19.016586 systemd-logind[1129]: New session 6 of user core. Feb 9 10:08:19.017869 systemd[1]: Started session-6.scope. Feb 9 10:08:19.068899 sudo[1244]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 9 10:08:19.069103 sudo[1244]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 10:08:19.071407 sudo[1244]: pam_unix(sudo:session): session closed for user root Feb 9 10:08:19.075252 sudo[1243]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 9 10:08:19.075466 sudo[1243]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 10:08:19.083172 systemd[1]: Stopping audit-rules.service... Feb 9 10:08:19.083000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 10:08:19.084793 kernel: kauditd_printk_skb: 136 callbacks suppressed Feb 9 10:08:19.084827 kernel: audit: type=1305 audit(1707473299.083:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 10:08:19.084964 auditctl[1247]: No rules Feb 9 10:08:19.085231 systemd[1]: audit-rules.service: Deactivated successfully. Feb 9 10:08:19.085406 systemd[1]: Stopped audit-rules.service. Feb 9 10:08:19.083000 audit[1247]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcc883b80 a2=420 a3=0 items=0 ppid=1 pid=1247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:19.086734 systemd[1]: Starting audit-rules.service... Feb 9 10:08:19.088609 kernel: audit: type=1300 audit(1707473299.083:169): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcc883b80 a2=420 a3=0 items=0 ppid=1 pid=1247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:19.088656 kernel: audit: type=1327 audit(1707473299.083:169): proctitle=2F7362696E2F617564697463746C002D44 Feb 9 10:08:19.083000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 9 10:08:19.089339 kernel: audit: type=1131 audit(1707473299.084:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.103609 augenrules[1264]: No rules Feb 9 10:08:19.104239 systemd[1]: Finished audit-rules.service. Feb 9 10:08:19.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.106330 kernel: audit: type=1130 audit(1707473299.104:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.106435 sudo[1243]: pam_unix(sudo:session): session closed for user root Feb 9 10:08:19.106000 audit[1243]: USER_END pid=1243 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.106000 audit[1243]: CRED_DISP pid=1243 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.109776 sshd[1240]: pam_unix(sshd:session): session closed for user core Feb 9 10:08:19.111550 kernel: audit: type=1106 audit(1707473299.106:172): pid=1243 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.111607 kernel: audit: type=1104 audit(1707473299.106:173): pid=1243 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.111625 kernel: audit: type=1106 audit(1707473299.109:174): pid=1240 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:19.109000 audit[1240]: USER_END pid=1240 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:19.112830 systemd[1]: Started sshd@6-10.0.0.131:22-10.0.0.1:51828.service. Feb 9 10:08:19.109000 audit[1240]: CRED_DISP pid=1240 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:19.113278 systemd[1]: sshd@5-10.0.0.131:22-10.0.0.1:51826.service: Deactivated successfully. Feb 9 10:08:19.113885 systemd[1]: session-6.scope: Deactivated successfully. Feb 9 10:08:19.114925 systemd-logind[1129]: Session 6 logged out. Waiting for processes to exit. Feb 9 10:08:19.115811 systemd-logind[1129]: Removed session 6. Feb 9 10:08:19.116305 kernel: audit: type=1104 audit(1707473299.109:175): pid=1240 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:19.116416 kernel: audit: type=1130 audit(1707473299.111:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.131:22-10.0.0.1:51828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.131:22-10.0.0.1:51828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.131:22-10.0.0.1:51826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.155000 audit[1269]: USER_ACCT pid=1269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:19.155976 sshd[1269]: Accepted publickey for core from 10.0.0.1 port 51828 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:08:19.156000 audit[1269]: CRED_ACQ pid=1269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:19.156000 audit[1269]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe8f3b5e0 a2=3 a3=1 items=0 ppid=1 pid=1269 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:19.156000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:08:19.157073 sshd[1269]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:08:19.160810 systemd-logind[1129]: New session 7 of user core. Feb 9 10:08:19.161214 systemd[1]: Started session-7.scope. Feb 9 10:08:19.164000 audit[1269]: USER_START pid=1269 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:19.165000 audit[1272]: CRED_ACQ pid=1272 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:19.212000 audit[1273]: USER_ACCT pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.212499 sudo[1273]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 9 10:08:19.212000 audit[1273]: CRED_REFR pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.212710 sudo[1273]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 10:08:19.213000 audit[1273]: USER_START pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.773865 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 9 10:08:19.780630 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 9 10:08:19.780000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:19.780953 systemd[1]: Reached target network-online.target. Feb 9 10:08:19.782268 systemd[1]: Starting docker.service... Feb 9 10:08:19.890903 env[1291]: time="2024-02-09T10:08:19.890842880Z" level=info msg="Starting up" Feb 9 10:08:19.892753 env[1291]: time="2024-02-09T10:08:19.892719332Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 10:08:19.892753 env[1291]: time="2024-02-09T10:08:19.892737103Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 10:08:19.892827 env[1291]: time="2024-02-09T10:08:19.892755394Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 10:08:19.892827 env[1291]: time="2024-02-09T10:08:19.892765418Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 10:08:19.894818 env[1291]: time="2024-02-09T10:08:19.894769743Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 10:08:19.894818 env[1291]: time="2024-02-09T10:08:19.894790949Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 10:08:19.894818 env[1291]: time="2024-02-09T10:08:19.894806244Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 10:08:19.894818 env[1291]: time="2024-02-09T10:08:19.894815629Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 10:08:20.109422 env[1291]: time="2024-02-09T10:08:20.109328597Z" level=info msg="Loading containers: start." Feb 9 10:08:20.146000 audit[1326]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.146000 audit[1326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffcfe7c900 a2=0 a3=1 items=0 ppid=1291 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.146000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 9 10:08:20.148000 audit[1328]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.148000 audit[1328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffea6835c0 a2=0 a3=1 items=0 ppid=1291 pid=1328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.148000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 9 10:08:20.150000 audit[1330]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.150000 audit[1330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd526bc60 a2=0 a3=1 items=0 ppid=1291 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.150000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 10:08:20.151000 audit[1332]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.151000 audit[1332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffc09e810 a2=0 a3=1 items=0 ppid=1291 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.151000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 10:08:20.154000 audit[1334]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.154000 audit[1334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff87330d0 a2=0 a3=1 items=0 ppid=1291 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.154000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 9 10:08:20.177000 audit[1339]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.177000 audit[1339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcde55970 a2=0 a3=1 items=0 ppid=1291 pid=1339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.177000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 9 10:08:20.189000 audit[1341]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.189000 audit[1341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdf6b0880 a2=0 a3=1 items=0 ppid=1291 pid=1341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.189000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 9 10:08:20.190000 audit[1343]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.190000 audit[1343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffcc2576d0 a2=0 a3=1 items=0 ppid=1291 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.190000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 9 10:08:20.192000 audit[1345]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.192000 audit[1345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff7257c60 a2=0 a3=1 items=0 ppid=1291 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.192000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 10:08:20.211000 audit[1349]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.211000 audit[1349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd1a0ea30 a2=0 a3=1 items=0 ppid=1291 pid=1349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.211000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 10:08:20.212000 audit[1350]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.212000 audit[1350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcc4cf2a0 a2=0 a3=1 items=0 ppid=1291 pid=1350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.212000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 10:08:20.220327 kernel: Initializing XFRM netlink socket Feb 9 10:08:20.242455 env[1291]: time="2024-02-09T10:08:20.242411172Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 9 10:08:20.257000 audit[1358]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1358 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.257000 audit[1358]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffffd98a670 a2=0 a3=1 items=0 ppid=1291 pid=1358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.257000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 9 10:08:20.272000 audit[1361]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.272000 audit[1361]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffffc7a7430 a2=0 a3=1 items=0 ppid=1291 pid=1361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.272000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 9 10:08:20.275000 audit[1364]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1364 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.275000 audit[1364]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffe57bb990 a2=0 a3=1 items=0 ppid=1291 pid=1364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.275000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 9 10:08:20.276000 audit[1366]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.276000 audit[1366]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffce872c30 a2=0 a3=1 items=0 ppid=1291 pid=1366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.276000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 9 10:08:20.278000 audit[1368]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1368 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.278000 audit[1368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=fffffbfd7140 a2=0 a3=1 items=0 ppid=1291 pid=1368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.278000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 9 10:08:20.280000 audit[1370]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.280000 audit[1370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe2d87090 a2=0 a3=1 items=0 ppid=1291 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.280000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 9 10:08:20.282000 audit[1372]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1372 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.282000 audit[1372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffcfe3e980 a2=0 a3=1 items=0 ppid=1291 pid=1372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.282000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 9 10:08:20.292000 audit[1375]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1375 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.292000 audit[1375]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffedc80d90 a2=0 a3=1 items=0 ppid=1291 pid=1375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.292000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 9 10:08:20.293000 audit[1377]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1377 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.293000 audit[1377]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffee57ef50 a2=0 a3=1 items=0 ppid=1291 pid=1377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.293000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 10:08:20.295000 audit[1379]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.295000 audit[1379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=fffffc85c800 a2=0 a3=1 items=0 ppid=1291 pid=1379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.295000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 10:08:20.297000 audit[1381]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1381 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.297000 audit[1381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd2bbead0 a2=0 a3=1 items=0 ppid=1291 pid=1381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.297000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 9 10:08:20.298791 systemd-networkd[1036]: docker0: Link UP Feb 9 10:08:20.324000 audit[1385]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.324000 audit[1385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd74a4410 a2=0 a3=1 items=0 ppid=1291 pid=1385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.324000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 10:08:20.325000 audit[1386]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1386 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:20.325000 audit[1386]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffcb6816d0 a2=0 a3=1 items=0 ppid=1291 pid=1386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:20.325000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 10:08:20.326472 env[1291]: time="2024-02-09T10:08:20.326430841Z" level=info msg="Loading containers: done." Feb 9 10:08:20.350764 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2325127200-merged.mount: Deactivated successfully. Feb 9 10:08:20.357826 env[1291]: time="2024-02-09T10:08:20.357773351Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 9 10:08:20.358137 env[1291]: time="2024-02-09T10:08:20.358115274Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 9 10:08:20.358344 env[1291]: time="2024-02-09T10:08:20.358298397Z" level=info msg="Daemon has completed initialization" Feb 9 10:08:20.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:20.375758 systemd[1]: Started docker.service. Feb 9 10:08:20.381901 env[1291]: time="2024-02-09T10:08:20.381848973Z" level=info msg="API listen on /run/docker.sock" Feb 9 10:08:20.399195 systemd[1]: Reloading. Feb 9 10:08:20.445236 /usr/lib/systemd/system-generators/torcx-generator[1435]: time="2024-02-09T10:08:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 10:08:20.445367 /usr/lib/systemd/system-generators/torcx-generator[1435]: time="2024-02-09T10:08:20Z" level=info msg="torcx already run" Feb 9 10:08:20.498610 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 10:08:20.498629 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 10:08:20.513550 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit: BPF prog-id=37 op=LOAD Feb 9 10:08:20.560000 audit: BPF prog-id=27 op=UNLOAD Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit: BPF prog-id=38 op=LOAD Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.560000 audit: BPF prog-id=39 op=LOAD Feb 9 10:08:20.560000 audit: BPF prog-id=28 op=UNLOAD Feb 9 10:08:20.560000 audit: BPF prog-id=29 op=UNLOAD Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.561000 audit: BPF prog-id=40 op=LOAD Feb 9 10:08:20.561000 audit: BPF prog-id=35 op=UNLOAD Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.562000 audit: BPF prog-id=41 op=LOAD Feb 9 10:08:20.562000 audit: BPF prog-id=26 op=UNLOAD Feb 9 10:08:20.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit: BPF prog-id=42 op=LOAD Feb 9 10:08:20.564000 audit: BPF prog-id=32 op=UNLOAD Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit: BPF prog-id=43 op=LOAD Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.564000 audit: BPF prog-id=44 op=LOAD Feb 9 10:08:20.564000 audit: BPF prog-id=33 op=UNLOAD Feb 9 10:08:20.564000 audit: BPF prog-id=34 op=UNLOAD Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit: BPF prog-id=45 op=LOAD Feb 9 10:08:20.565000 audit: BPF prog-id=21 op=UNLOAD Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit: BPF prog-id=46 op=LOAD Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.565000 audit: BPF prog-id=47 op=LOAD Feb 9 10:08:20.565000 audit: BPF prog-id=22 op=UNLOAD Feb 9 10:08:20.565000 audit: BPF prog-id=23 op=UNLOAD Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit: BPF prog-id=48 op=LOAD Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit: BPF prog-id=49 op=LOAD Feb 9 10:08:20.566000 audit: BPF prog-id=24 op=UNLOAD Feb 9 10:08:20.566000 audit: BPF prog-id=25 op=UNLOAD Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.566000 audit: BPF prog-id=50 op=LOAD Feb 9 10:08:20.566000 audit: BPF prog-id=31 op=UNLOAD Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:20.567000 audit: BPF prog-id=51 op=LOAD Feb 9 10:08:20.567000 audit: BPF prog-id=30 op=UNLOAD Feb 9 10:08:20.574419 systemd[1]: Started kubelet.service. Feb 9 10:08:20.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:20.700831 kubelet[1472]: E0209 10:08:20.700775 1472 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 9 10:08:20.702946 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 10:08:20.703069 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 10:08:20.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 10:08:20.936049 env[1143]: time="2024-02-09T10:08:20.935992038Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.6\"" Feb 9 10:08:21.578629 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1972712949.mount: Deactivated successfully. Feb 9 10:08:23.527034 env[1143]: time="2024-02-09T10:08:23.526986281Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:23.528292 env[1143]: time="2024-02-09T10:08:23.528262252Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:68142d88471bf00b1317307442bd31edbbc7532061d623e85659df2d417308fb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:23.530702 env[1143]: time="2024-02-09T10:08:23.530663979Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:23.532214 env[1143]: time="2024-02-09T10:08:23.532185523Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:98a686df810b9f1de8e3b2ae869e79c51a36e7434d33c53f011852618aec0a68,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:23.533588 env[1143]: time="2024-02-09T10:08:23.533058395Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.6\" returns image reference \"sha256:68142d88471bf00b1317307442bd31edbbc7532061d623e85659df2d417308fb\"" Feb 9 10:08:23.543980 env[1143]: time="2024-02-09T10:08:23.543948586Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.6\"" Feb 9 10:08:25.834395 env[1143]: time="2024-02-09T10:08:25.834337570Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:25.835896 env[1143]: time="2024-02-09T10:08:25.835862540Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8dbd4fd1241644100b94eb40a9d284c5cf08fa7f2d15cafdf1ca8cec8443b31f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:25.838153 env[1143]: time="2024-02-09T10:08:25.838124103Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:25.840095 env[1143]: time="2024-02-09T10:08:25.840065378Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:80bdcd72cfe26028bb2fed75732fc2f511c35fa8d1edc03deae11f3490713c9e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:25.843199 env[1143]: time="2024-02-09T10:08:25.843160229Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.6\" returns image reference \"sha256:8dbd4fd1241644100b94eb40a9d284c5cf08fa7f2d15cafdf1ca8cec8443b31f\"" Feb 9 10:08:25.852463 env[1143]: time="2024-02-09T10:08:25.852434194Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.6\"" Feb 9 10:08:27.268597 env[1143]: time="2024-02-09T10:08:27.268539260Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:27.269847 env[1143]: time="2024-02-09T10:08:27.269821826Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:541cddf10a6c9bb71f141eeefea4203714984b67ec3582fb4538058af9e43663,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:27.271402 env[1143]: time="2024-02-09T10:08:27.271375132Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:27.273525 env[1143]: time="2024-02-09T10:08:27.273491495Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:a89db556c34d652d403d909882dbd97336f2e935b1c726b2e2b2c0400186ac39,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:27.274289 env[1143]: time="2024-02-09T10:08:27.274245849Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.6\" returns image reference \"sha256:541cddf10a6c9bb71f141eeefea4203714984b67ec3582fb4538058af9e43663\"" Feb 9 10:08:27.282679 env[1143]: time="2024-02-09T10:08:27.282648484Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.6\"" Feb 9 10:08:28.316207 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount878274783.mount: Deactivated successfully. Feb 9 10:08:28.826984 env[1143]: time="2024-02-09T10:08:28.826935592Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:28.828027 env[1143]: time="2024-02-09T10:08:28.828001471Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2d8b4f784b5f439fa536676861ad1144130a981e5ac011d08829ed921477ec74,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:28.829276 env[1143]: time="2024-02-09T10:08:28.829238715Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:28.830785 env[1143]: time="2024-02-09T10:08:28.830747993Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:3898a1671ae42be1cd3c2e777549bc7b5b306b8da3a224b747365f6679fb902a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:28.831264 env[1143]: time="2024-02-09T10:08:28.831233675Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.6\" returns image reference \"sha256:2d8b4f784b5f439fa536676861ad1144130a981e5ac011d08829ed921477ec74\"" Feb 9 10:08:28.840722 env[1143]: time="2024-02-09T10:08:28.840683710Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 9 10:08:29.296741 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount510240160.mount: Deactivated successfully. Feb 9 10:08:29.313850 env[1143]: time="2024-02-09T10:08:29.313767084Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:29.318374 env[1143]: time="2024-02-09T10:08:29.318332383Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:29.319963 env[1143]: time="2024-02-09T10:08:29.319927195Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:29.322765 env[1143]: time="2024-02-09T10:08:29.322729425Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:29.323295 env[1143]: time="2024-02-09T10:08:29.323262974Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Feb 9 10:08:29.332286 env[1143]: time="2024-02-09T10:08:29.332229351Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Feb 9 10:08:29.960834 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1032322913.mount: Deactivated successfully. Feb 9 10:08:30.914573 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 9 10:08:30.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:30.914737 systemd[1]: Stopped kubelet.service. Feb 9 10:08:30.916176 systemd[1]: Started kubelet.service. Feb 9 10:08:30.917042 kernel: kauditd_printk_skb: 259 callbacks suppressed Feb 9 10:08:30.917092 kernel: audit: type=1130 audit(1707473310.913:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:30.917117 kernel: audit: type=1131 audit(1707473310.913:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:30.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:30.918768 kernel: audit: type=1130 audit(1707473310.914:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:30.914000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:30.953773 kubelet[1527]: E0209 10:08:30.953717 1527 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 9 10:08:30.956902 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 10:08:30.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 10:08:30.957019 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 10:08:30.959331 kernel: audit: type=1131 audit(1707473310.955:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 10:08:33.486235 env[1143]: time="2024-02-09T10:08:33.486182728Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:33.487946 env[1143]: time="2024-02-09T10:08:33.487904483Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:33.490671 env[1143]: time="2024-02-09T10:08:33.490645733Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:33.492671 env[1143]: time="2024-02-09T10:08:33.492631636Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:33.495417 env[1143]: time="2024-02-09T10:08:33.495377562Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Feb 9 10:08:33.503737 env[1143]: time="2024-02-09T10:08:33.503709401Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Feb 9 10:08:34.050905 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3608219765.mount: Deactivated successfully. Feb 9 10:08:34.756933 env[1143]: time="2024-02-09T10:08:34.756880334Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:34.758980 env[1143]: time="2024-02-09T10:08:34.758947948Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:34.760807 env[1143]: time="2024-02-09T10:08:34.760771032Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:34.762355 env[1143]: time="2024-02-09T10:08:34.762327759Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:34.762816 env[1143]: time="2024-02-09T10:08:34.762788917Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Feb 9 10:08:38.560913 systemd[1]: Stopped kubelet.service. Feb 9 10:08:38.559000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:38.559000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:38.564829 kernel: audit: type=1130 audit(1707473318.559:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:38.564892 kernel: audit: type=1131 audit(1707473318.559:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:38.572854 systemd[1]: Reloading. Feb 9 10:08:38.624558 /usr/lib/systemd/system-generators/torcx-generator[1643]: time="2024-02-09T10:08:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 10:08:38.624583 /usr/lib/systemd/system-generators/torcx-generator[1643]: time="2024-02-09T10:08:38Z" level=info msg="torcx already run" Feb 9 10:08:38.679200 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 10:08:38.679216 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 10:08:38.694035 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 10:08:38.740000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.745324 kernel: audit: type=1400 audit(1707473318.740:392): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.745377 kernel: audit: type=1400 audit(1707473318.741:393): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.745399 kernel: audit: type=1400 audit(1707473318.741:394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748662 kernel: audit: type=1400 audit(1707473318.741:395): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748714 kernel: audit: type=1400 audit(1707473318.741:396): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751912 kernel: audit: type=1400 audit(1707473318.741:397): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751961 kernel: audit: type=1400 audit(1707473318.741:398): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755231 kernel: audit: type=1400 audit(1707473318.741:399): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.742000 audit: BPF prog-id=52 op=LOAD Feb 9 10:08:38.742000 audit: BPF prog-id=37 op=UNLOAD Feb 9 10:08:38.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.744000 audit: BPF prog-id=53 op=LOAD Feb 9 10:08:38.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit: BPF prog-id=54 op=LOAD Feb 9 10:08:38.746000 audit: BPF prog-id=38 op=UNLOAD Feb 9 10:08:38.746000 audit: BPF prog-id=39 op=UNLOAD Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.747000 audit: BPF prog-id=55 op=LOAD Feb 9 10:08:38.747000 audit: BPF prog-id=40 op=UNLOAD Feb 9 10:08:38.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.748000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.749000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.749000 audit: BPF prog-id=56 op=LOAD Feb 9 10:08:38.749000 audit: BPF prog-id=41 op=UNLOAD Feb 9 10:08:38.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.751000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.752000 audit: BPF prog-id=57 op=LOAD Feb 9 10:08:38.752000 audit: BPF prog-id=42 op=UNLOAD Feb 9 10:08:38.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.752000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755000 audit: BPF prog-id=58 op=LOAD Feb 9 10:08:38.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.756000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.756000 audit: BPF prog-id=59 op=LOAD Feb 9 10:08:38.756000 audit: BPF prog-id=43 op=UNLOAD Feb 9 10:08:38.756000 audit: BPF prog-id=44 op=UNLOAD Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit: BPF prog-id=60 op=LOAD Feb 9 10:08:38.757000 audit: BPF prog-id=45 op=UNLOAD Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.757000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit: BPF prog-id=61 op=LOAD Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.758000 audit: BPF prog-id=62 op=LOAD Feb 9 10:08:38.758000 audit: BPF prog-id=46 op=UNLOAD Feb 9 10:08:38.758000 audit: BPF prog-id=47 op=UNLOAD Feb 9 10:08:38.758000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit: BPF prog-id=63 op=LOAD Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit: BPF prog-id=64 op=LOAD Feb 9 10:08:38.759000 audit: BPF prog-id=48 op=UNLOAD Feb 9 10:08:38.759000 audit: BPF prog-id=49 op=UNLOAD Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.759000 audit: BPF prog-id=65 op=LOAD Feb 9 10:08:38.759000 audit: BPF prog-id=50 op=UNLOAD Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:38.760000 audit: BPF prog-id=66 op=LOAD Feb 9 10:08:38.760000 audit: BPF prog-id=51 op=UNLOAD Feb 9 10:08:38.771549 systemd[1]: Started kubelet.service. Feb 9 10:08:38.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:38.811294 kubelet[1680]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 10:08:38.811294 kubelet[1680]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 10:08:38.811294 kubelet[1680]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 10:08:38.811589 kubelet[1680]: I0209 10:08:38.811269 1680 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 10:08:39.807276 kubelet[1680]: I0209 10:08:39.807239 1680 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Feb 9 10:08:39.807276 kubelet[1680]: I0209 10:08:39.807273 1680 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 10:08:39.807506 kubelet[1680]: I0209 10:08:39.807490 1680 server.go:895] "Client rotation is on, will bootstrap in background" Feb 9 10:08:39.815004 kubelet[1680]: I0209 10:08:39.814971 1680 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 10:08:39.815637 kubelet[1680]: E0209 10:08:39.815621 1680 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.131:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:39.819701 kubelet[1680]: W0209 10:08:39.819684 1680 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 10:08:39.820457 kubelet[1680]: I0209 10:08:39.820440 1680 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 10:08:39.820724 kubelet[1680]: I0209 10:08:39.820712 1680 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 10:08:39.820933 kubelet[1680]: I0209 10:08:39.820919 1680 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Feb 9 10:08:39.821054 kubelet[1680]: I0209 10:08:39.821042 1680 topology_manager.go:138] "Creating topology manager with none policy" Feb 9 10:08:39.821124 kubelet[1680]: I0209 10:08:39.821114 1680 container_manager_linux.go:301] "Creating device plugin manager" Feb 9 10:08:39.821261 kubelet[1680]: I0209 10:08:39.821250 1680 state_mem.go:36] "Initialized new in-memory state store" Feb 9 10:08:39.821641 kubelet[1680]: I0209 10:08:39.821629 1680 kubelet.go:393] "Attempting to sync node with API server" Feb 9 10:08:39.821720 kubelet[1680]: I0209 10:08:39.821711 1680 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 10:08:39.821782 kubelet[1680]: I0209 10:08:39.821773 1680 kubelet.go:309] "Adding apiserver pod source" Feb 9 10:08:39.821850 kubelet[1680]: I0209 10:08:39.821841 1680 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 10:08:39.822235 kubelet[1680]: W0209 10:08:39.822055 1680 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.131:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:39.822235 kubelet[1680]: E0209 10:08:39.822117 1680 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.131:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:39.822591 kubelet[1680]: W0209 10:08:39.822526 1680 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.131:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:39.822591 kubelet[1680]: E0209 10:08:39.822564 1680 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.131:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:39.823161 kubelet[1680]: I0209 10:08:39.823140 1680 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 10:08:39.823684 kubelet[1680]: W0209 10:08:39.823659 1680 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 9 10:08:39.824507 kubelet[1680]: I0209 10:08:39.824485 1680 server.go:1232] "Started kubelet" Feb 9 10:08:39.825143 kubelet[1680]: I0209 10:08:39.825121 1680 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 10:08:39.825213 kubelet[1680]: I0209 10:08:39.825191 1680 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 10:08:39.826035 kubelet[1680]: I0209 10:08:39.826008 1680 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Feb 9 10:08:39.826274 kubelet[1680]: E0209 10:08:39.826179 1680 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.17b229f01398163d", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2024, time.February, 9, 10, 8, 39, 824463421, time.Local), LastTimestamp:time.Date(2024, time.February, 9, 10, 8, 39, 824463421, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"localhost"}': 'Post "https://10.0.0.131:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.131:6443: connect: connection refused'(may retry after sleeping) Feb 9 10:08:39.827015 kubelet[1680]: E0209 10:08:39.826987 1680 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 10:08:39.827078 kubelet[1680]: E0209 10:08:39.827054 1680 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 10:08:39.827351 kubelet[1680]: I0209 10:08:39.827332 1680 server.go:462] "Adding debug handlers to kubelet server" Feb 9 10:08:39.829000 audit[1680]: AVC avc: denied { mac_admin } for pid=1680 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:39.829000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 10:08:39.829000 audit[1680]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000df2300 a1=4000c04660 a2=4000df22d0 a3=25 items=0 ppid=1 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.829000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 10:08:39.829000 audit[1680]: AVC avc: denied { mac_admin } for pid=1680 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:39.829000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 10:08:39.829000 audit[1680]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c74200 a1=4000c04678 a2=4000df2390 a3=25 items=0 ppid=1 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.829000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 10:08:39.830007 kubelet[1680]: I0209 10:08:39.829712 1680 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 10:08:39.830007 kubelet[1680]: I0209 10:08:39.829755 1680 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 10:08:39.830007 kubelet[1680]: I0209 10:08:39.829808 1680 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 10:08:39.830351 kubelet[1680]: I0209 10:08:39.830339 1680 volume_manager.go:291] "Starting Kubelet Volume Manager" Feb 9 10:08:39.830494 kubelet[1680]: I0209 10:08:39.830483 1680 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 9 10:08:39.830647 kubelet[1680]: I0209 10:08:39.830636 1680 reconciler_new.go:29] "Reconciler: start to sync state" Feb 9 10:08:39.831007 kubelet[1680]: W0209 10:08:39.830975 1680 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.131:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:39.831095 kubelet[1680]: E0209 10:08:39.831082 1680 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.131:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:39.831499 kubelet[1680]: E0209 10:08:39.831484 1680 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.131:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.131:6443: connect: connection refused" interval="200ms" Feb 9 10:08:39.833000 audit[1692]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1692 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:39.833000 audit[1692]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff5a2f8d0 a2=0 a3=1 items=0 ppid=1680 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.833000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 10:08:39.834000 audit[1693]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:39.834000 audit[1693]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca7fb000 a2=0 a3=1 items=0 ppid=1680 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.834000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 10:08:39.836000 audit[1695]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1695 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:39.836000 audit[1695]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffdca97720 a2=0 a3=1 items=0 ppid=1680 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.836000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 10:08:39.837000 audit[1697]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1697 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:39.837000 audit[1697]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe2b99130 a2=0 a3=1 items=0 ppid=1680 pid=1697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.837000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 10:08:39.843000 audit[1701]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:39.843000 audit[1701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff4577de0 a2=0 a3=1 items=0 ppid=1680 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.843000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 9 10:08:39.844564 kubelet[1680]: I0209 10:08:39.844542 1680 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Feb 9 10:08:39.844000 audit[1702]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1702 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:08:39.844000 audit[1702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd00ee350 a2=0 a3=1 items=0 ppid=1680 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 10:08:39.845501 kubelet[1680]: I0209 10:08:39.845485 1680 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Feb 9 10:08:39.845551 kubelet[1680]: I0209 10:08:39.845509 1680 status_manager.go:217] "Starting to sync pod status with apiserver" Feb 9 10:08:39.845551 kubelet[1680]: I0209 10:08:39.845524 1680 kubelet.go:2303] "Starting kubelet main sync loop" Feb 9 10:08:39.845596 kubelet[1680]: E0209 10:08:39.845563 1680 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 10:08:39.845000 audit[1704]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1704 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:39.845000 audit[1704]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd6810660 a2=0 a3=1 items=0 ppid=1680 pid=1704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.845000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 10:08:39.847679 kubelet[1680]: W0209 10:08:39.847639 1680 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.131:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:39.847742 kubelet[1680]: E0209 10:08:39.847678 1680 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.131:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:39.847000 audit[1708]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1708 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:08:39.847000 audit[1708]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdeae40b0 a2=0 a3=1 items=0 ppid=1680 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.847000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 10:08:39.848018 kubelet[1680]: I0209 10:08:39.847998 1680 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 10:08:39.848018 kubelet[1680]: I0209 10:08:39.848013 1680 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 10:08:39.848076 kubelet[1680]: I0209 10:08:39.848031 1680 state_mem.go:36] "Initialized new in-memory state store" Feb 9 10:08:39.848000 audit[1709]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:39.848000 audit[1709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9db91d0 a2=0 a3=1 items=0 ppid=1680 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.848000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 10:08:39.848000 audit[1711]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:08:39.848000 audit[1711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc8cc61b0 a2=0 a3=1 items=0 ppid=1680 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.848000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 10:08:39.849000 audit[1712]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:08:39.849000 audit[1712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc159e030 a2=0 a3=1 items=0 ppid=1680 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.849000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 10:08:39.849000 audit[1713]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:08:39.849000 audit[1713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdaeb0c80 a2=0 a3=1 items=0 ppid=1680 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.849000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 10:08:39.884240 kubelet[1680]: I0209 10:08:39.884198 1680 policy_none.go:49] "None policy: Start" Feb 9 10:08:39.884988 kubelet[1680]: I0209 10:08:39.884969 1680 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 10:08:39.885045 kubelet[1680]: I0209 10:08:39.884998 1680 state_mem.go:35] "Initializing new in-memory state store" Feb 9 10:08:39.889199 systemd[1]: Created slice kubepods.slice. Feb 9 10:08:39.892974 systemd[1]: Created slice kubepods-burstable.slice. Feb 9 10:08:39.895010 systemd[1]: Created slice kubepods-besteffort.slice. Feb 9 10:08:39.904987 kubelet[1680]: I0209 10:08:39.904957 1680 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 10:08:39.904000 audit[1680]: AVC avc: denied { mac_admin } for pid=1680 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:39.904000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 10:08:39.904000 audit[1680]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a91020 a1=4000a25ae8 a2=4000a90ff0 a3=25 items=0 ppid=1 pid=1680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:39.904000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 10:08:39.905189 kubelet[1680]: I0209 10:08:39.905044 1680 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 10:08:39.905215 kubelet[1680]: I0209 10:08:39.905204 1680 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 10:08:39.906266 kubelet[1680]: E0209 10:08:39.906246 1680 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Feb 9 10:08:39.932193 kubelet[1680]: I0209 10:08:39.932173 1680 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 10:08:39.932517 kubelet[1680]: E0209 10:08:39.932501 1680 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.131:6443/api/v1/nodes\": dial tcp 10.0.0.131:6443: connect: connection refused" node="localhost" Feb 9 10:08:39.946685 kubelet[1680]: I0209 10:08:39.946668 1680 topology_manager.go:215] "Topology Admit Handler" podUID="9c695ee8d5f5aba1074397bdcf82b698" podNamespace="kube-system" podName="kube-apiserver-localhost" Feb 9 10:08:39.947500 kubelet[1680]: I0209 10:08:39.947468 1680 topology_manager.go:215] "Topology Admit Handler" podUID="212dcc5e2f08bec92c239ac5786b7e2b" podNamespace="kube-system" podName="kube-controller-manager-localhost" Feb 9 10:08:39.948261 kubelet[1680]: I0209 10:08:39.948215 1680 topology_manager.go:215] "Topology Admit Handler" podUID="d0325d16aab19669b5fea4b6623890e6" podNamespace="kube-system" podName="kube-scheduler-localhost" Feb 9 10:08:39.952334 systemd[1]: Created slice kubepods-burstable-pod9c695ee8d5f5aba1074397bdcf82b698.slice. Feb 9 10:08:39.969370 systemd[1]: Created slice kubepods-burstable-pod212dcc5e2f08bec92c239ac5786b7e2b.slice. Feb 9 10:08:39.987103 systemd[1]: Created slice kubepods-burstable-podd0325d16aab19669b5fea4b6623890e6.slice. Feb 9 10:08:40.032024 kubelet[1680]: E0209 10:08:40.031984 1680 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.131:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.131:6443: connect: connection refused" interval="400ms" Feb 9 10:08:40.132608 kubelet[1680]: I0209 10:08:40.132484 1680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9c695ee8d5f5aba1074397bdcf82b698-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9c695ee8d5f5aba1074397bdcf82b698\") " pod="kube-system/kube-apiserver-localhost" Feb 9 10:08:40.132608 kubelet[1680]: I0209 10:08:40.132527 1680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:40.132608 kubelet[1680]: I0209 10:08:40.132563 1680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:40.132608 kubelet[1680]: I0209 10:08:40.132582 1680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:40.132608 kubelet[1680]: I0209 10:08:40.132602 1680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:40.132811 kubelet[1680]: I0209 10:08:40.132623 1680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d0325d16aab19669b5fea4b6623890e6-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d0325d16aab19669b5fea4b6623890e6\") " pod="kube-system/kube-scheduler-localhost" Feb 9 10:08:40.132811 kubelet[1680]: I0209 10:08:40.132642 1680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9c695ee8d5f5aba1074397bdcf82b698-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9c695ee8d5f5aba1074397bdcf82b698\") " pod="kube-system/kube-apiserver-localhost" Feb 9 10:08:40.132811 kubelet[1680]: I0209 10:08:40.132660 1680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:40.132811 kubelet[1680]: I0209 10:08:40.132678 1680 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9c695ee8d5f5aba1074397bdcf82b698-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9c695ee8d5f5aba1074397bdcf82b698\") " pod="kube-system/kube-apiserver-localhost" Feb 9 10:08:40.134371 kubelet[1680]: I0209 10:08:40.134338 1680 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 10:08:40.134701 kubelet[1680]: E0209 10:08:40.134671 1680 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.131:6443/api/v1/nodes\": dial tcp 10.0.0.131:6443: connect: connection refused" node="localhost" Feb 9 10:08:40.268381 kubelet[1680]: E0209 10:08:40.268285 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:40.269035 env[1143]: time="2024-02-09T10:08:40.268986480Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9c695ee8d5f5aba1074397bdcf82b698,Namespace:kube-system,Attempt:0,}" Feb 9 10:08:40.285647 kubelet[1680]: E0209 10:08:40.285615 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:40.286954 env[1143]: time="2024-02-09T10:08:40.286865649Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:212dcc5e2f08bec92c239ac5786b7e2b,Namespace:kube-system,Attempt:0,}" Feb 9 10:08:40.289104 kubelet[1680]: E0209 10:08:40.289089 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:40.289424 env[1143]: time="2024-02-09T10:08:40.289396437Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d0325d16aab19669b5fea4b6623890e6,Namespace:kube-system,Attempt:0,}" Feb 9 10:08:40.432872 kubelet[1680]: E0209 10:08:40.432840 1680 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.131:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.131:6443: connect: connection refused" interval="800ms" Feb 9 10:08:40.536423 kubelet[1680]: I0209 10:08:40.536395 1680 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 10:08:40.536808 kubelet[1680]: E0209 10:08:40.536772 1680 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.131:6443/api/v1/nodes\": dial tcp 10.0.0.131:6443: connect: connection refused" node="localhost" Feb 9 10:08:40.662684 kubelet[1680]: W0209 10:08:40.662618 1680 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.131:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:40.662684 kubelet[1680]: E0209 10:08:40.662664 1680 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.131:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:40.760271 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2561322800.mount: Deactivated successfully. Feb 9 10:08:40.765834 env[1143]: time="2024-02-09T10:08:40.765796082Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.767614 env[1143]: time="2024-02-09T10:08:40.767577661Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.768404 env[1143]: time="2024-02-09T10:08:40.768380408Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.769618 env[1143]: time="2024-02-09T10:08:40.769584747Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.771902 env[1143]: time="2024-02-09T10:08:40.771810302Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.774097 env[1143]: time="2024-02-09T10:08:40.774047692Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.774830 env[1143]: time="2024-02-09T10:08:40.774794102Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.775520 kubelet[1680]: W0209 10:08:40.775440 1680 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.131:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:40.775520 kubelet[1680]: E0209 10:08:40.775501 1680 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.131:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:40.778349 env[1143]: time="2024-02-09T10:08:40.778322116Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.781238 env[1143]: time="2024-02-09T10:08:40.781205398Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.782440 env[1143]: time="2024-02-09T10:08:40.782405699Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.783399 env[1143]: time="2024-02-09T10:08:40.783374216Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.784501 env[1143]: time="2024-02-09T10:08:40.784448090Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:08:40.814471 env[1143]: time="2024-02-09T10:08:40.814387967Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:08:40.814830 env[1143]: time="2024-02-09T10:08:40.814446982Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:08:40.814830 env[1143]: time="2024-02-09T10:08:40.814460696Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:08:40.814938 env[1143]: time="2024-02-09T10:08:40.814695919Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:08:40.814938 env[1143]: time="2024-02-09T10:08:40.814727346Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:08:40.814938 env[1143]: time="2024-02-09T10:08:40.814737261Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:08:40.815074 env[1143]: time="2024-02-09T10:08:40.814965527Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f2c9aebac86f10d3a39cf2d49aa62dc3589d3ec7bdddff4acb3b2f61b003758e pid=1738 runtime=io.containerd.runc.v2 Feb 9 10:08:40.815123 env[1143]: time="2024-02-09T10:08:40.815026301Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:08:40.815123 env[1143]: time="2024-02-09T10:08:40.815052970Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:08:40.815123 env[1143]: time="2024-02-09T10:08:40.815062286Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:08:40.815357 env[1143]: time="2024-02-09T10:08:40.815231816Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5798ac762dfd363fc06becc588455e18a221a141d4fced6f79bad6267a1425e7 pid=1735 runtime=io.containerd.runc.v2 Feb 9 10:08:40.815913 env[1143]: time="2024-02-09T10:08:40.815405864Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3aabf83261245e39e18df30c905cfc65d937844e2694761823ccffe6655251fd pid=1737 runtime=io.containerd.runc.v2 Feb 9 10:08:40.828115 systemd[1]: Started cri-containerd-3aabf83261245e39e18df30c905cfc65d937844e2694761823ccffe6655251fd.scope. Feb 9 10:08:40.835910 systemd[1]: Started cri-containerd-5798ac762dfd363fc06becc588455e18a221a141d4fced6f79bad6267a1425e7.scope. Feb 9 10:08:40.850426 systemd[1]: Started cri-containerd-f2c9aebac86f10d3a39cf2d49aa62dc3589d3ec7bdddff4acb3b2f61b003758e.scope. Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.870000 audit: BPF prog-id=67 op=LOAD Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616266383332363132343565333965313864663330633930356366 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616266383332363132343565333965313864663330633930356366 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit: BPF prog-id=68 op=LOAD Feb 9 10:08:40.871000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616266383332363132343565333965313864663330633930356366 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit: BPF prog-id=69 op=LOAD Feb 9 10:08:40.871000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616266383332363132343565333965313864663330633930356366 Feb 9 10:08:40.871000 audit: BPF prog-id=69 op=UNLOAD Feb 9 10:08:40.871000 audit: BPF prog-id=68 op=UNLOAD Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.871000 audit: BPF prog-id=70 op=LOAD Feb 9 10:08:40.871000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361616266383332363132343565333965313864663330633930356366 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.872000 audit: BPF prog-id=71 op=LOAD Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1735 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537393861633736326466643336336663303662656363353838343535 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1735 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537393861633736326466643336336663303662656363353838343535 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit: BPF prog-id=72 op=LOAD Feb 9 10:08:40.873000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1735 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537393861633736326466643336336663303662656363353838343535 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.873000 audit: BPF prog-id=73 op=LOAD Feb 9 10:08:40.873000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1735 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537393861633736326466643336336663303662656363353838343535 Feb 9 10:08:40.873000 audit: BPF prog-id=73 op=UNLOAD Feb 9 10:08:40.873000 audit: BPF prog-id=72 op=UNLOAD Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit: BPF prog-id=74 op=LOAD Feb 9 10:08:40.874000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1735 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537393861633736326466643336336663303662656363353838343535 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.874000 audit: BPF prog-id=75 op=LOAD Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1738 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632633961656261633836663130643361333963663264343961613632 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1738 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632633961656261633836663130643361333963663264343961613632 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit: BPF prog-id=76 op=LOAD Feb 9 10:08:40.875000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1738 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632633961656261633836663130643361333963663264343961613632 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit: BPF prog-id=77 op=LOAD Feb 9 10:08:40.875000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1738 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632633961656261633836663130643361333963663264343961613632 Feb 9 10:08:40.875000 audit: BPF prog-id=77 op=UNLOAD Feb 9 10:08:40.875000 audit: BPF prog-id=76 op=UNLOAD Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { perfmon } for pid=1769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit[1769]: AVC avc: denied { bpf } for pid=1769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.875000 audit: BPF prog-id=78 op=LOAD Feb 9 10:08:40.875000 audit[1769]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1738 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.875000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632633961656261633836663130643361333963663264343961613632 Feb 9 10:08:40.895924 env[1143]: time="2024-02-09T10:08:40.895868703Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:212dcc5e2f08bec92c239ac5786b7e2b,Namespace:kube-system,Attempt:0,} returns sandbox id \"3aabf83261245e39e18df30c905cfc65d937844e2694761823ccffe6655251fd\"" Feb 9 10:08:40.896988 kubelet[1680]: E0209 10:08:40.896805 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:40.900033 env[1143]: time="2024-02-09T10:08:40.899994668Z" level=info msg="CreateContainer within sandbox \"3aabf83261245e39e18df30c905cfc65d937844e2694761823ccffe6655251fd\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 9 10:08:40.903070 env[1143]: time="2024-02-09T10:08:40.901027199Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:9c695ee8d5f5aba1074397bdcf82b698,Namespace:kube-system,Attempt:0,} returns sandbox id \"5798ac762dfd363fc06becc588455e18a221a141d4fced6f79bad6267a1425e7\"" Feb 9 10:08:40.903172 kubelet[1680]: E0209 10:08:40.901568 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:40.904280 env[1143]: time="2024-02-09T10:08:40.904223470Z" level=info msg="CreateContainer within sandbox \"5798ac762dfd363fc06becc588455e18a221a141d4fced6f79bad6267a1425e7\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 9 10:08:40.912251 env[1143]: time="2024-02-09T10:08:40.912212550Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d0325d16aab19669b5fea4b6623890e6,Namespace:kube-system,Attempt:0,} returns sandbox id \"f2c9aebac86f10d3a39cf2d49aa62dc3589d3ec7bdddff4acb3b2f61b003758e\"" Feb 9 10:08:40.913058 kubelet[1680]: E0209 10:08:40.912892 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:40.914617 env[1143]: time="2024-02-09T10:08:40.913802209Z" level=info msg="CreateContainer within sandbox \"3aabf83261245e39e18df30c905cfc65d937844e2694761823ccffe6655251fd\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"0123c56d81ab6941141d2de9284365ef3d5be32c304ad60bb94065784e267027\"" Feb 9 10:08:40.914617 env[1143]: time="2024-02-09T10:08:40.914508276Z" level=info msg="StartContainer for \"0123c56d81ab6941141d2de9284365ef3d5be32c304ad60bb94065784e267027\"" Feb 9 10:08:40.914957 env[1143]: time="2024-02-09T10:08:40.914929581Z" level=info msg="CreateContainer within sandbox \"f2c9aebac86f10d3a39cf2d49aa62dc3589d3ec7bdddff4acb3b2f61b003758e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 9 10:08:40.919761 env[1143]: time="2024-02-09T10:08:40.919719430Z" level=info msg="CreateContainer within sandbox \"5798ac762dfd363fc06becc588455e18a221a141d4fced6f79bad6267a1425e7\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"a6af93ea957e915419da0bf5ed47b047c68eac3753e3dee2158e1dd175531883\"" Feb 9 10:08:40.920155 env[1143]: time="2024-02-09T10:08:40.920124222Z" level=info msg="StartContainer for \"a6af93ea957e915419da0bf5ed47b047c68eac3753e3dee2158e1dd175531883\"" Feb 9 10:08:40.926445 env[1143]: time="2024-02-09T10:08:40.926391857Z" level=info msg="CreateContainer within sandbox \"f2c9aebac86f10d3a39cf2d49aa62dc3589d3ec7bdddff4acb3b2f61b003758e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"491f36882d185cc97296c03f34d656ecf8e49f4023c69c93559ae8c294a3a31a\"" Feb 9 10:08:40.926954 env[1143]: time="2024-02-09T10:08:40.926914160Z" level=info msg="StartContainer for \"491f36882d185cc97296c03f34d656ecf8e49f4023c69c93559ae8c294a3a31a\"" Feb 9 10:08:40.931895 systemd[1]: Started cri-containerd-0123c56d81ab6941141d2de9284365ef3d5be32c304ad60bb94065784e267027.scope. Feb 9 10:08:40.938095 systemd[1]: Started cri-containerd-a6af93ea957e915419da0bf5ed47b047c68eac3753e3dee2158e1dd175531883.scope. Feb 9 10:08:40.953467 systemd[1]: Started cri-containerd-491f36882d185cc97296c03f34d656ecf8e49f4023c69c93559ae8c294a3a31a.scope. Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.963000 audit: BPF prog-id=79 op=LOAD Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1737 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323363353664383161623639343131343164326465393238343336 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1737 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323363353664383161623639343131343164326465393238343336 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.964000 audit: BPF prog-id=80 op=LOAD Feb 9 10:08:40.964000 audit[1849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1737 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.964000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323363353664383161623639343131343164326465393238343336 Feb 9 10:08:40.967000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.967000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.967000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.967000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.967000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.967000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.967000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.967000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.967000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.967000 audit: BPF prog-id=81 op=LOAD Feb 9 10:08:40.967000 audit[1849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1737 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.967000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323363353664383161623639343131343164326465393238343336 Feb 9 10:08:40.968000 audit: BPF prog-id=81 op=UNLOAD Feb 9 10:08:40.968000 audit: BPF prog-id=80 op=UNLOAD Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { perfmon } for pid=1849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit[1849]: AVC avc: denied { bpf } for pid=1849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.968000 audit: BPF prog-id=82 op=LOAD Feb 9 10:08:40.968000 audit[1849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1737 pid=1849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.968000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031323363353664383161623639343131343164326465393238343336 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.975000 audit: BPF prog-id=83 op=LOAD Feb 9 10:08:40.976000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.976000 audit[1862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1735 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136616639336561393537653931353431396461306266356564343762 Feb 9 10:08:40.976000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.976000 audit[1862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1735 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.976000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136616639336561393537653931353431396461306266356564343762 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit: BPF prog-id=84 op=LOAD Feb 9 10:08:40.977000 audit[1862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1735 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136616639336561393537653931353431396461306266356564343762 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.977000 audit: BPF prog-id=85 op=LOAD Feb 9 10:08:40.977000 audit[1862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1735 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136616639336561393537653931353431396461306266356564343762 Feb 9 10:08:40.978000 audit: BPF prog-id=85 op=UNLOAD Feb 9 10:08:40.978000 audit: BPF prog-id=84 op=UNLOAD Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { perfmon } for pid=1862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit[1862]: AVC avc: denied { bpf } for pid=1862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.978000 audit: BPF prog-id=86 op=LOAD Feb 9 10:08:40.978000 audit[1862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1735 pid=1862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136616639336561393537653931353431396461306266356564343762 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.981000 audit: BPF prog-id=87 op=LOAD Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1738 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439316633363838326431383563633937323936633033663334643635 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1738 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439316633363838326431383563633937323936633033663334643635 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit: BPF prog-id=88 op=LOAD Feb 9 10:08:40.984000 audit[1888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1738 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439316633363838326431383563633937323936633033663334643635 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit: BPF prog-id=89 op=LOAD Feb 9 10:08:40.984000 audit[1888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1738 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439316633363838326431383563633937323936633033663334643635 Feb 9 10:08:40.984000 audit: BPF prog-id=89 op=UNLOAD Feb 9 10:08:40.984000 audit: BPF prog-id=88 op=UNLOAD Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { perfmon } for pid=1888 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit[1888]: AVC avc: denied { bpf } for pid=1888 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:40.984000 audit: BPF prog-id=90 op=LOAD Feb 9 10:08:40.984000 audit[1888]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1738 pid=1888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:40.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439316633363838326431383563633937323936633033663334643635 Feb 9 10:08:41.008740 env[1143]: time="2024-02-09T10:08:41.008691884Z" level=info msg="StartContainer for \"0123c56d81ab6941141d2de9284365ef3d5be32c304ad60bb94065784e267027\" returns successfully" Feb 9 10:08:41.012025 env[1143]: time="2024-02-09T10:08:41.011938819Z" level=info msg="StartContainer for \"a6af93ea957e915419da0bf5ed47b047c68eac3753e3dee2158e1dd175531883\" returns successfully" Feb 9 10:08:41.041303 env[1143]: time="2024-02-09T10:08:41.041260515Z" level=info msg="StartContainer for \"491f36882d185cc97296c03f34d656ecf8e49f4023c69c93559ae8c294a3a31a\" returns successfully" Feb 9 10:08:41.116996 kubelet[1680]: W0209 10:08:41.116903 1680 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.131:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:41.116996 kubelet[1680]: E0209 10:08:41.116972 1680 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.131:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.131:6443: connect: connection refused Feb 9 10:08:41.338349 kubelet[1680]: I0209 10:08:41.337983 1680 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 10:08:41.851613 kubelet[1680]: E0209 10:08:41.851590 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:41.853088 kubelet[1680]: E0209 10:08:41.853053 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:41.854131 kubelet[1680]: E0209 10:08:41.854108 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:42.322000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:42.322000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40005c4240 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:42.322000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:42.323000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:42.323000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40001b2240 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:42.323000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:42.735000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:42.735000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:42.735000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4004ac6000 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:08:42.735000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40037f2040 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:08:42.735000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:08:42.735000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:08:42.735000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:42.735000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=4004cbc0f0 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:08:42.735000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:08:42.741000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:42.741000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6a a1=4003f7e000 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:08:42.741000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:08:42.743000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:42.743000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=4007070300 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:08:42.743000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:08:42.743000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:42.743000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6e a1=4003f7e9c0 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:08:42.743000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:08:42.830877 kubelet[1680]: E0209 10:08:42.830824 1680 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Feb 9 10:08:42.833129 kubelet[1680]: I0209 10:08:42.833088 1680 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 9 10:08:42.937830 kubelet[1680]: E0209 10:08:42.937785 1680 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Feb 9 10:08:42.938274 kubelet[1680]: E0209 10:08:42.938253 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:43.702106 kubelet[1680]: E0209 10:08:43.702064 1680 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Feb 9 10:08:43.702389 kubelet[1680]: E0209 10:08:43.702375 1680 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:43.824192 kubelet[1680]: I0209 10:08:43.824157 1680 apiserver.go:52] "Watching apiserver" Feb 9 10:08:43.831093 kubelet[1680]: I0209 10:08:43.831062 1680 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 9 10:08:45.353735 systemd[1]: Reloading. Feb 9 10:08:45.417619 /usr/lib/systemd/system-generators/torcx-generator[1980]: time="2024-02-09T10:08:45Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 10:08:45.417650 /usr/lib/systemd/system-generators/torcx-generator[1980]: time="2024-02-09T10:08:45Z" level=info msg="torcx already run" Feb 9 10:08:45.472788 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 10:08:45.472807 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 10:08:45.487895 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.548685 kernel: kauditd_printk_skb: 589 callbacks suppressed Feb 9 10:08:45.548777 kernel: audit: type=1400 audit(1707473325.546:691): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.548804 kernel: audit: type=1400 audit(1707473325.546:692): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550356 kernel: audit: type=1400 audit(1707473325.546:693): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.552016 kernel: audit: type=1400 audit(1707473325.546:694): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553705 kernel: audit: type=1400 audit(1707473325.546:695): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.555375 kernel: audit: type=1400 audit(1707473325.546:696): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.556993 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.557499 kernel: audit: type=1400 audit(1707473325.546:697): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.557533 kernel: audit: audit_lost=6 audit_rate_limit=0 audit_backlog_limit=64 Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.559718 kernel: audit: type=1400 audit(1707473325.546:698): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.546000 audit: BPF prog-id=91 op=LOAD Feb 9 10:08:45.546000 audit: BPF prog-id=75 op=UNLOAD Feb 9 10:08:45.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.548000 audit: BPF prog-id=92 op=LOAD Feb 9 10:08:45.548000 audit: BPF prog-id=83 op=UNLOAD Feb 9 10:08:45.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.549000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550000 audit: BPF prog-id=93 op=LOAD Feb 9 10:08:45.550000 audit: BPF prog-id=52 op=UNLOAD Feb 9 10:08:45.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.551000 audit: BPF prog-id=94 op=LOAD Feb 9 10:08:45.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit: BPF prog-id=95 op=LOAD Feb 9 10:08:45.553000 audit: BPF prog-id=53 op=UNLOAD Feb 9 10:08:45.553000 audit: BPF prog-id=54 op=UNLOAD Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.555000 audit: BPF prog-id=96 op=LOAD Feb 9 10:08:45.555000 audit: BPF prog-id=55 op=UNLOAD Feb 9 10:08:45.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.561000 audit: BPF prog-id=56 op=UNLOAD Feb 9 10:08:45.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.562000 audit: BPF prog-id=98 op=LOAD Feb 9 10:08:45.562000 audit: BPF prog-id=87 op=UNLOAD Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit: BPF prog-id=99 op=LOAD Feb 9 10:08:45.563000 audit: BPF prog-id=57 op=UNLOAD Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit: BPF prog-id=100 op=LOAD Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.563000 audit: BPF prog-id=101 op=LOAD Feb 9 10:08:45.563000 audit: BPF prog-id=58 op=UNLOAD Feb 9 10:08:45.563000 audit: BPF prog-id=59 op=UNLOAD Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.564000 audit: BPF prog-id=102 op=LOAD Feb 9 10:08:45.564000 audit: BPF prog-id=79 op=UNLOAD Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit: BPF prog-id=103 op=LOAD Feb 9 10:08:45.565000 audit: BPF prog-id=60 op=UNLOAD Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit: BPF prog-id=104 op=LOAD Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.565000 audit: BPF prog-id=105 op=LOAD Feb 9 10:08:45.565000 audit: BPF prog-id=61 op=UNLOAD Feb 9 10:08:45.565000 audit: BPF prog-id=62 op=UNLOAD Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit: BPF prog-id=106 op=LOAD Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit: BPF prog-id=107 op=LOAD Feb 9 10:08:45.566000 audit: BPF prog-id=63 op=UNLOAD Feb 9 10:08:45.566000 audit: BPF prog-id=64 op=UNLOAD Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.566000 audit: BPF prog-id=108 op=LOAD Feb 9 10:08:45.566000 audit: BPF prog-id=65 op=UNLOAD Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.567000 audit: BPF prog-id=109 op=LOAD Feb 9 10:08:45.567000 audit: BPF prog-id=71 op=UNLOAD Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.568000 audit: BPF prog-id=110 op=LOAD Feb 9 10:08:45.568000 audit: BPF prog-id=67 op=UNLOAD Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.569000 audit: BPF prog-id=111 op=LOAD Feb 9 10:08:45.569000 audit: BPF prog-id=66 op=UNLOAD Feb 9 10:08:45.578410 systemd[1]: Stopping kubelet.service... Feb 9 10:08:45.601682 systemd[1]: kubelet.service: Deactivated successfully. Feb 9 10:08:45.601887 systemd[1]: Stopped kubelet.service. Feb 9 10:08:45.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:45.601939 systemd[1]: kubelet.service: Consumed 1.304s CPU time. Feb 9 10:08:45.603504 systemd[1]: Started kubelet.service. Feb 9 10:08:45.603000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:45.657236 kubelet[2018]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 10:08:45.657584 kubelet[2018]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 10:08:45.657630 kubelet[2018]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 10:08:45.657763 kubelet[2018]: I0209 10:08:45.657726 2018 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 10:08:45.661858 kubelet[2018]: I0209 10:08:45.661822 2018 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Feb 9 10:08:45.661858 kubelet[2018]: I0209 10:08:45.661851 2018 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 10:08:45.662067 kubelet[2018]: I0209 10:08:45.662041 2018 server.go:895] "Client rotation is on, will bootstrap in background" Feb 9 10:08:45.664699 kubelet[2018]: I0209 10:08:45.664663 2018 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 9 10:08:45.665792 kubelet[2018]: I0209 10:08:45.665768 2018 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 10:08:45.671788 kubelet[2018]: W0209 10:08:45.671773 2018 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 10:08:45.672535 kubelet[2018]: I0209 10:08:45.672519 2018 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 10:08:45.672724 kubelet[2018]: I0209 10:08:45.672710 2018 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 10:08:45.672853 kubelet[2018]: I0209 10:08:45.672837 2018 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Feb 9 10:08:45.672925 kubelet[2018]: I0209 10:08:45.672860 2018 topology_manager.go:138] "Creating topology manager with none policy" Feb 9 10:08:45.672925 kubelet[2018]: I0209 10:08:45.672868 2018 container_manager_linux.go:301] "Creating device plugin manager" Feb 9 10:08:45.672925 kubelet[2018]: I0209 10:08:45.672896 2018 state_mem.go:36] "Initialized new in-memory state store" Feb 9 10:08:45.672999 kubelet[2018]: I0209 10:08:45.672974 2018 kubelet.go:393] "Attempting to sync node with API server" Feb 9 10:08:45.672999 kubelet[2018]: I0209 10:08:45.672990 2018 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 10:08:45.673040 kubelet[2018]: I0209 10:08:45.673010 2018 kubelet.go:309] "Adding apiserver pod source" Feb 9 10:08:45.673040 kubelet[2018]: I0209 10:08:45.673024 2018 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 10:08:45.673894 kubelet[2018]: I0209 10:08:45.673876 2018 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 10:08:45.674450 kubelet[2018]: I0209 10:08:45.674431 2018 server.go:1232] "Started kubelet" Feb 9 10:08:45.675878 kubelet[2018]: I0209 10:08:45.675856 2018 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 10:08:45.675985 kubelet[2018]: I0209 10:08:45.675971 2018 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 10:08:45.676049 kubelet[2018]: I0209 10:08:45.676039 2018 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 10:08:45.677763 kubelet[2018]: E0209 10:08:45.677742 2018 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 10:08:45.677763 kubelet[2018]: E0209 10:08:45.677767 2018 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 10:08:45.678674 kubelet[2018]: I0209 10:08:45.678657 2018 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 10:08:45.675000 audit[2018]: AVC avc: denied { mac_admin } for pid=2018 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.675000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 10:08:45.675000 audit[2018]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a71950 a1=40006377e8 a2=4000a71920 a3=25 items=0 ppid=1 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:45.675000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 10:08:45.675000 audit[2018]: AVC avc: denied { mac_admin } for pid=2018 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.675000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 10:08:45.675000 audit[2018]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000960880 a1=4000637800 a2=4000a719e0 a3=25 items=0 ppid=1 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:45.675000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 10:08:45.683360 kubelet[2018]: I0209 10:08:45.683329 2018 server.go:462] "Adding debug handlers to kubelet server" Feb 9 10:08:45.684242 kubelet[2018]: I0209 10:08:45.684192 2018 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 10:08:45.684424 kubelet[2018]: I0209 10:08:45.684406 2018 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Feb 9 10:08:45.687361 kubelet[2018]: I0209 10:08:45.687303 2018 volume_manager.go:291] "Starting Kubelet Volume Manager" Feb 9 10:08:45.688726 kubelet[2018]: I0209 10:08:45.688705 2018 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 9 10:08:45.688916 kubelet[2018]: I0209 10:08:45.688902 2018 reconciler_new.go:29] "Reconciler: start to sync state" Feb 9 10:08:45.693372 kubelet[2018]: I0209 10:08:45.693353 2018 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Feb 9 10:08:45.702570 kubelet[2018]: I0209 10:08:45.702550 2018 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Feb 9 10:08:45.702666 kubelet[2018]: I0209 10:08:45.702655 2018 status_manager.go:217] "Starting to sync pod status with apiserver" Feb 9 10:08:45.702738 kubelet[2018]: I0209 10:08:45.702728 2018 kubelet.go:2303] "Starting kubelet main sync loop" Feb 9 10:08:45.702879 kubelet[2018]: E0209 10:08:45.702868 2018 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 10:08:45.742294 kubelet[2018]: I0209 10:08:45.742235 2018 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 10:08:45.742294 kubelet[2018]: I0209 10:08:45.742261 2018 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 10:08:45.742294 kubelet[2018]: I0209 10:08:45.742294 2018 state_mem.go:36] "Initialized new in-memory state store" Feb 9 10:08:45.742566 kubelet[2018]: I0209 10:08:45.742527 2018 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 9 10:08:45.742566 kubelet[2018]: I0209 10:08:45.742557 2018 state_mem.go:96] "Updated CPUSet assignments" assignments={} Feb 9 10:08:45.742627 kubelet[2018]: I0209 10:08:45.742565 2018 policy_none.go:49] "None policy: Start" Feb 9 10:08:45.743377 kubelet[2018]: I0209 10:08:45.743357 2018 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 10:08:45.743471 kubelet[2018]: I0209 10:08:45.743460 2018 state_mem.go:35] "Initializing new in-memory state store" Feb 9 10:08:45.743696 kubelet[2018]: I0209 10:08:45.743667 2018 state_mem.go:75] "Updated machine memory state" Feb 9 10:08:45.750801 kubelet[2018]: I0209 10:08:45.750781 2018 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 10:08:45.750889 kubelet[2018]: I0209 10:08:45.750843 2018 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 10:08:45.750000 audit[2018]: AVC avc: denied { mac_admin } for pid=2018 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:08:45.750000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 10:08:45.750000 audit[2018]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400128a600 a1=4000ab1008 a2=400128a5d0 a3=25 items=0 ppid=1 pid=2018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:08:45.750000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 10:08:45.751091 kubelet[2018]: I0209 10:08:45.751026 2018 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 10:08:45.791467 kubelet[2018]: I0209 10:08:45.791437 2018 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 10:08:45.799459 kubelet[2018]: I0209 10:08:45.799436 2018 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Feb 9 10:08:45.799623 kubelet[2018]: I0209 10:08:45.799611 2018 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 9 10:08:45.803008 kubelet[2018]: I0209 10:08:45.802990 2018 topology_manager.go:215] "Topology Admit Handler" podUID="9c695ee8d5f5aba1074397bdcf82b698" podNamespace="kube-system" podName="kube-apiserver-localhost" Feb 9 10:08:45.803176 kubelet[2018]: I0209 10:08:45.803159 2018 topology_manager.go:215] "Topology Admit Handler" podUID="212dcc5e2f08bec92c239ac5786b7e2b" podNamespace="kube-system" podName="kube-controller-manager-localhost" Feb 9 10:08:45.803292 kubelet[2018]: I0209 10:08:45.803279 2018 topology_manager.go:215] "Topology Admit Handler" podUID="d0325d16aab19669b5fea4b6623890e6" podNamespace="kube-system" podName="kube-scheduler-localhost" Feb 9 10:08:45.889781 kubelet[2018]: I0209 10:08:45.889730 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/9c695ee8d5f5aba1074397bdcf82b698-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"9c695ee8d5f5aba1074397bdcf82b698\") " pod="kube-system/kube-apiserver-localhost" Feb 9 10:08:45.889781 kubelet[2018]: I0209 10:08:45.889782 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:45.889924 kubelet[2018]: I0209 10:08:45.889804 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d0325d16aab19669b5fea4b6623890e6-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d0325d16aab19669b5fea4b6623890e6\") " pod="kube-system/kube-scheduler-localhost" Feb 9 10:08:45.889924 kubelet[2018]: I0209 10:08:45.889852 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/9c695ee8d5f5aba1074397bdcf82b698-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"9c695ee8d5f5aba1074397bdcf82b698\") " pod="kube-system/kube-apiserver-localhost" Feb 9 10:08:45.889924 kubelet[2018]: I0209 10:08:45.889877 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:45.889924 kubelet[2018]: I0209 10:08:45.889894 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:45.889924 kubelet[2018]: I0209 10:08:45.889913 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:45.890121 kubelet[2018]: I0209 10:08:45.889952 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/9c695ee8d5f5aba1074397bdcf82b698-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"9c695ee8d5f5aba1074397bdcf82b698\") " pod="kube-system/kube-apiserver-localhost" Feb 9 10:08:45.890121 kubelet[2018]: I0209 10:08:45.889971 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 10:08:46.109338 kubelet[2018]: E0209 10:08:46.109272 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:46.109865 kubelet[2018]: E0209 10:08:46.109834 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:46.110084 kubelet[2018]: E0209 10:08:46.110057 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:46.673618 kubelet[2018]: I0209 10:08:46.673574 2018 apiserver.go:52] "Watching apiserver" Feb 9 10:08:46.688973 kubelet[2018]: I0209 10:08:46.688940 2018 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 9 10:08:46.715656 kubelet[2018]: E0209 10:08:46.715630 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:46.720688 kubelet[2018]: E0209 10:08:46.720637 2018 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Feb 9 10:08:46.720945 kubelet[2018]: E0209 10:08:46.720926 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:46.722069 kubelet[2018]: E0209 10:08:46.722044 2018 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Feb 9 10:08:46.722502 kubelet[2018]: E0209 10:08:46.722486 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:46.733961 kubelet[2018]: I0209 10:08:46.733924 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.7338757500000002 podCreationTimestamp="2024-02-09 10:08:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 10:08:46.733864113 +0000 UTC m=+1.125403156" watchObservedRunningTime="2024-02-09 10:08:46.73387575 +0000 UTC m=+1.125414793" Feb 9 10:08:46.757231 kubelet[2018]: I0209 10:08:46.757195 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.7571603 podCreationTimestamp="2024-02-09 10:08:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 10:08:46.745373146 +0000 UTC m=+1.136912189" watchObservedRunningTime="2024-02-09 10:08:46.7571603 +0000 UTC m=+1.148699343" Feb 9 10:08:47.716706 kubelet[2018]: E0209 10:08:47.716678 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:47.717336 kubelet[2018]: E0209 10:08:47.717303 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:47.744573 kubelet[2018]: E0209 10:08:47.744546 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:48.718749 kubelet[2018]: E0209 10:08:48.718717 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:49.720371 kubelet[2018]: E0209 10:08:49.720337 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:50.386833 sudo[1273]: pam_unix(sudo:session): session closed for user root Feb 9 10:08:50.385000 audit[1273]: USER_END pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 10:08:50.386000 audit[1273]: CRED_DISP pid=1273 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 10:08:50.388970 sshd[1269]: pam_unix(sshd:session): session closed for user core Feb 9 10:08:50.388000 audit[1269]: USER_END pid=1269 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:50.388000 audit[1269]: CRED_DISP pid=1269 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:08:50.391502 systemd[1]: sshd@6-10.0.0.131:22-10.0.0.1:51828.service: Deactivated successfully. Feb 9 10:08:50.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.131:22-10.0.0.1:51828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:08:50.392217 systemd[1]: session-7.scope: Deactivated successfully. Feb 9 10:08:50.392399 systemd[1]: session-7.scope: Consumed 5.723s CPU time. Feb 9 10:08:50.392763 systemd-logind[1129]: Session 7 logged out. Waiting for processes to exit. Feb 9 10:08:50.393606 systemd-logind[1129]: Removed session 7. Feb 9 10:08:56.342000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:56.346212 kernel: kauditd_printk_skb: 269 callbacks suppressed Feb 9 10:08:56.346270 kernel: audit: type=1400 audit(1707473336.342:937): avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:56.346289 kernel: audit: type=1400 audit(1707473336.342:938): avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:56.342000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:56.342000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f3ef40 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:56.351128 kernel: audit: type=1300 audit(1707473336.342:938): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000f3ef40 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:56.351155 kernel: audit: type=1327 audit(1707473336.342:938): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:56.342000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:56.342000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001076800 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:56.356295 kernel: audit: type=1300 audit(1707473336.342:937): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001076800 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:56.356343 kernel: audit: type=1327 audit(1707473336.342:937): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:56.342000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:56.358671 kernel: audit: type=1400 audit(1707473336.343:939): avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:56.343000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:56.360790 kernel: audit: type=1300 audit(1707473336.343:939): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f3f080 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:56.343000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f3f080 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:56.363619 kernel: audit: type=1327 audit(1707473336.343:939): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:56.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:56.365958 kernel: audit: type=1400 audit(1707473336.344:940): avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:56.344000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:08:56.344000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f3f1c0 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:56.344000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:56.612244 kubelet[2018]: E0209 10:08:56.612129 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:56.619273 kubelet[2018]: I0209 10:08:56.619223 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=11.619191164 podCreationTimestamp="2024-02-09 10:08:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 10:08:46.757659919 +0000 UTC m=+1.149198962" watchObservedRunningTime="2024-02-09 10:08:56.619191164 +0000 UTC m=+11.010730247" Feb 9 10:08:57.753132 kubelet[2018]: E0209 10:08:57.753096 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:58.993000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 9 10:08:58.993000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000ea0140 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:08:58.993000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:08:59.125899 kubelet[2018]: E0209 10:08:59.125864 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:59.487087 kubelet[2018]: I0209 10:08:59.487056 2018 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 9 10:08:59.487469 env[1143]: time="2024-02-09T10:08:59.487437279Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 9 10:08:59.487984 kubelet[2018]: I0209 10:08:59.487967 2018 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 9 10:08:59.733153 kubelet[2018]: E0209 10:08:59.733121 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:08:59.988585 update_engine[1134]: I0209 10:08:59.988382 1134 update_attempter.cc:509] Updating boot flags... Feb 9 10:09:00.357549 kubelet[2018]: I0209 10:09:00.357451 2018 topology_manager.go:215] "Topology Admit Handler" podUID="147dd668-ca13-4766-b5db-178f833d751c" podNamespace="kube-system" podName="kube-proxy-8zrrl" Feb 9 10:09:00.362798 systemd[1]: Created slice kubepods-besteffort-pod147dd668_ca13_4766_b5db_178f833d751c.slice. Feb 9 10:09:00.394349 kubelet[2018]: I0209 10:09:00.394321 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/147dd668-ca13-4766-b5db-178f833d751c-xtables-lock\") pod \"kube-proxy-8zrrl\" (UID: \"147dd668-ca13-4766-b5db-178f833d751c\") " pod="kube-system/kube-proxy-8zrrl" Feb 9 10:09:00.394531 kubelet[2018]: I0209 10:09:00.394515 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/147dd668-ca13-4766-b5db-178f833d751c-lib-modules\") pod \"kube-proxy-8zrrl\" (UID: \"147dd668-ca13-4766-b5db-178f833d751c\") " pod="kube-system/kube-proxy-8zrrl" Feb 9 10:09:00.394618 kubelet[2018]: I0209 10:09:00.394607 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/147dd668-ca13-4766-b5db-178f833d751c-kube-proxy\") pod \"kube-proxy-8zrrl\" (UID: \"147dd668-ca13-4766-b5db-178f833d751c\") " pod="kube-system/kube-proxy-8zrrl" Feb 9 10:09:00.394694 kubelet[2018]: I0209 10:09:00.394685 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vhqzs\" (UniqueName: \"kubernetes.io/projected/147dd668-ca13-4766-b5db-178f833d751c-kube-api-access-vhqzs\") pod \"kube-proxy-8zrrl\" (UID: \"147dd668-ca13-4766-b5db-178f833d751c\") " pod="kube-system/kube-proxy-8zrrl" Feb 9 10:09:00.479947 kubelet[2018]: I0209 10:09:00.479913 2018 topology_manager.go:215] "Topology Admit Handler" podUID="b5f1b6fc-0960-4386-a32c-36dfe8b4af07" podNamespace="tigera-operator" podName="tigera-operator-55585899bf-z6qzk" Feb 9 10:09:00.484688 systemd[1]: Created slice kubepods-besteffort-podb5f1b6fc_0960_4386_a32c_36dfe8b4af07.slice. Feb 9 10:09:00.495213 kubelet[2018]: I0209 10:09:00.495171 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/b5f1b6fc-0960-4386-a32c-36dfe8b4af07-var-lib-calico\") pod \"tigera-operator-55585899bf-z6qzk\" (UID: \"b5f1b6fc-0960-4386-a32c-36dfe8b4af07\") " pod="tigera-operator/tigera-operator-55585899bf-z6qzk" Feb 9 10:09:00.495299 kubelet[2018]: I0209 10:09:00.495229 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-b7tqg\" (UniqueName: \"kubernetes.io/projected/b5f1b6fc-0960-4386-a32c-36dfe8b4af07-kube-api-access-b7tqg\") pod \"tigera-operator-55585899bf-z6qzk\" (UID: \"b5f1b6fc-0960-4386-a32c-36dfe8b4af07\") " pod="tigera-operator/tigera-operator-55585899bf-z6qzk" Feb 9 10:09:00.672069 kubelet[2018]: E0209 10:09:00.672042 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:00.672743 env[1143]: time="2024-02-09T10:09:00.672707268Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8zrrl,Uid:147dd668-ca13-4766-b5db-178f833d751c,Namespace:kube-system,Attempt:0,}" Feb 9 10:09:00.690401 env[1143]: time="2024-02-09T10:09:00.689773238Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:09:00.690401 env[1143]: time="2024-02-09T10:09:00.689821272Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:09:00.690401 env[1143]: time="2024-02-09T10:09:00.689831591Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:09:00.690401 env[1143]: time="2024-02-09T10:09:00.689952977Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c8ed49e1a05e7077857b0ac8e9de13dead186b1ce487ffeab7ebccb2d1e2f2c0 pid=2128 runtime=io.containerd.runc.v2 Feb 9 10:09:00.703724 systemd[1]: Started cri-containerd-c8ed49e1a05e7077857b0ac8e9de13dead186b1ce487ffeab7ebccb2d1e2f2c0.scope. Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.723000 audit: BPF prog-id=112 op=LOAD Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2128 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338656434396531613035653730373738353762306163386539646531 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2128 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338656434396531613035653730373738353762306163386539646531 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit: BPF prog-id=113 op=LOAD Feb 9 10:09:00.724000 audit[2137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2128 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338656434396531613035653730373738353762306163386539646531 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit: BPF prog-id=114 op=LOAD Feb 9 10:09:00.724000 audit[2137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2128 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338656434396531613035653730373738353762306163386539646531 Feb 9 10:09:00.724000 audit: BPF prog-id=114 op=UNLOAD Feb 9 10:09:00.724000 audit: BPF prog-id=113 op=UNLOAD Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { perfmon } for pid=2137 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit[2137]: AVC avc: denied { bpf } for pid=2137 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.724000 audit: BPF prog-id=115 op=LOAD Feb 9 10:09:00.724000 audit[2137]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2128 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338656434396531613035653730373738353762306163386539646531 Feb 9 10:09:00.735280 env[1143]: time="2024-02-09T10:09:00.735225123Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8zrrl,Uid:147dd668-ca13-4766-b5db-178f833d751c,Namespace:kube-system,Attempt:0,} returns sandbox id \"c8ed49e1a05e7077857b0ac8e9de13dead186b1ce487ffeab7ebccb2d1e2f2c0\"" Feb 9 10:09:00.736080 kubelet[2018]: E0209 10:09:00.735912 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:00.737863 env[1143]: time="2024-02-09T10:09:00.737821267Z" level=info msg="CreateContainer within sandbox \"c8ed49e1a05e7077857b0ac8e9de13dead186b1ce487ffeab7ebccb2d1e2f2c0\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 9 10:09:00.760327 env[1143]: time="2024-02-09T10:09:00.760266382Z" level=info msg="CreateContainer within sandbox \"c8ed49e1a05e7077857b0ac8e9de13dead186b1ce487ffeab7ebccb2d1e2f2c0\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"664c7c399cadefd7cef26d89f46848e42ecfe5aa470814dc29693f9a688c3be0\"" Feb 9 10:09:00.760944 env[1143]: time="2024-02-09T10:09:00.760916187Z" level=info msg="StartContainer for \"664c7c399cadefd7cef26d89f46848e42ecfe5aa470814dc29693f9a688c3be0\"" Feb 9 10:09:00.777244 systemd[1]: Started cri-containerd-664c7c399cadefd7cef26d89f46848e42ecfe5aa470814dc29693f9a688c3be0.scope. Feb 9 10:09:00.790668 env[1143]: time="2024-02-09T10:09:00.790559800Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-55585899bf-z6qzk,Uid:b5f1b6fc-0960-4386-a32c-36dfe8b4af07,Namespace:tigera-operator,Attempt:0,}" Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2128 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636346337633339396361646566643763656632366438396634363834 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit: BPF prog-id=116 op=LOAD Feb 9 10:09:00.804000 audit[2169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2128 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636346337633339396361646566643763656632366438396634363834 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit: BPF prog-id=117 op=LOAD Feb 9 10:09:00.804000 audit[2169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2128 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636346337633339396361646566643763656632366438396634363834 Feb 9 10:09:00.804000 audit: BPF prog-id=117 op=UNLOAD Feb 9 10:09:00.804000 audit: BPF prog-id=116 op=UNLOAD Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { perfmon } for pid=2169 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit[2169]: AVC avc: denied { bpf } for pid=2169 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.804000 audit: BPF prog-id=118 op=LOAD Feb 9 10:09:00.804000 audit[2169]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2128 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.804000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636346337633339396361646566643763656632366438396634363834 Feb 9 10:09:00.808830 env[1143]: time="2024-02-09T10:09:00.808744002Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:09:00.808830 env[1143]: time="2024-02-09T10:09:00.808797875Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:09:00.808830 env[1143]: time="2024-02-09T10:09:00.808809274Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:09:00.809061 env[1143]: time="2024-02-09T10:09:00.809026329Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/42b00e2ac3941775db9173cff6df54e0d955cc1081a8b64478d3a02dce9c2626 pid=2194 runtime=io.containerd.runc.v2 Feb 9 10:09:00.831727 systemd[1]: Started cri-containerd-42b00e2ac3941775db9173cff6df54e0d955cc1081a8b64478d3a02dce9c2626.scope. Feb 9 10:09:00.831966 env[1143]: time="2024-02-09T10:09:00.831919153Z" level=info msg="StartContainer for \"664c7c399cadefd7cef26d89f46848e42ecfe5aa470814dc29693f9a688c3be0\" returns successfully" Feb 9 10:09:00.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.900000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.900000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit: BPF prog-id=119 op=LOAD Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2194 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432623030653261633339343137373564623931373363666636646635 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2194 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432623030653261633339343137373564623931373363666636646635 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit: BPF prog-id=120 op=LOAD Feb 9 10:09:00.901000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2194 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432623030653261633339343137373564623931373363666636646635 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit: BPF prog-id=121 op=LOAD Feb 9 10:09:00.901000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2194 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432623030653261633339343137373564623931373363666636646635 Feb 9 10:09:00.901000 audit: BPF prog-id=121 op=UNLOAD Feb 9 10:09:00.901000 audit: BPF prog-id=120 op=UNLOAD Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { perfmon } for pid=2204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit[2204]: AVC avc: denied { bpf } for pid=2204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:00.901000 audit: BPF prog-id=122 op=LOAD Feb 9 10:09:00.901000 audit[2204]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2194 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432623030653261633339343137373564623931373363666636646635 Feb 9 10:09:00.921420 env[1143]: time="2024-02-09T10:09:00.921370810Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-55585899bf-z6qzk,Uid:b5f1b6fc-0960-4386-a32c-36dfe8b4af07,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"42b00e2ac3941775db9173cff6df54e0d955cc1081a8b64478d3a02dce9c2626\"" Feb 9 10:09:00.923130 env[1143]: time="2024-02-09T10:09:00.923039540Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 9 10:09:00.978000 audit[2263]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:00.978000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe9252d90 a2=0 a3=ffff960576c0 items=0 ppid=2180 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 10:09:00.978000 audit[2262]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:00.978000 audit[2262]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc7794c80 a2=0 a3=ffff9096f6c0 items=0 ppid=2180 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.978000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 10:09:00.979000 audit[2264]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:00.979000 audit[2264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdddc5070 a2=0 a3=ffffa1c4a6c0 items=0 ppid=2180 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.979000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 10:09:00.981000 audit[2265]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:00.981000 audit[2265]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffee1f2940 a2=0 a3=ffff8a7f36c0 items=0 ppid=2180 pid=2265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.981000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 10:09:00.981000 audit[2266]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2266 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:00.981000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff48c6760 a2=0 a3=ffff917a76c0 items=0 ppid=2180 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.981000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 10:09:00.982000 audit[2267]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:00.982000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd8674000 a2=0 a3=ffff8d2d76c0 items=0 ppid=2180 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:00.982000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 10:09:01.079000 audit[2268]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2268 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.079000 audit[2268]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd47151d0 a2=0 a3=ffff83f626c0 items=0 ppid=2180 pid=2268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.079000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 10:09:01.083000 audit[2270]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2270 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.083000 audit[2270]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffdf19020 a2=0 a3=ffffa87bf6c0 items=0 ppid=2180 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.083000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 9 10:09:01.086000 audit[2273]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2273 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.086000 audit[2273]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffe5de2760 a2=0 a3=ffff9c4416c0 items=0 ppid=2180 pid=2273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.086000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 9 10:09:01.087000 audit[2274]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.087000 audit[2274]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff3dd0160 a2=0 a3=ffffab1046c0 items=0 ppid=2180 pid=2274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 10:09:01.089000 audit[2276]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.089000 audit[2276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd4e96e90 a2=0 a3=ffffa3fc06c0 items=0 ppid=2180 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.089000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 10:09:01.091000 audit[2277]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.091000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcac836b0 a2=0 a3=ffffaac156c0 items=0 ppid=2180 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.091000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 10:09:01.093000 audit[2279]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2279 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.093000 audit[2279]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd015b700 a2=0 a3=ffffb2add6c0 items=0 ppid=2180 pid=2279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 10:09:01.096000 audit[2282]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.096000 audit[2282]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdff8db70 a2=0 a3=ffff9ebb66c0 items=0 ppid=2180 pid=2282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 9 10:09:01.098000 audit[2283]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2283 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.098000 audit[2283]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc07397f0 a2=0 a3=ffffa9f246c0 items=0 ppid=2180 pid=2283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.098000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 10:09:01.101000 audit[2285]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2285 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.101000 audit[2285]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc1aae790 a2=0 a3=ffff845446c0 items=0 ppid=2180 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.101000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 10:09:01.101000 audit[2286]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.101000 audit[2286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff010d900 a2=0 a3=ffff950986c0 items=0 ppid=2180 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.101000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 10:09:01.104000 audit[2288]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.104000 audit[2288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffca6b910 a2=0 a3=ffffbe1446c0 items=0 ppid=2180 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.104000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 10:09:01.107000 audit[2291]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.107000 audit[2291]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffec57b350 a2=0 a3=ffffbbe4e6c0 items=0 ppid=2180 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 10:09:01.113000 audit[2294]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.113000 audit[2294]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd7098ad0 a2=0 a3=ffff814d26c0 items=0 ppid=2180 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.113000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 10:09:01.114000 audit[2295]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.114000 audit[2295]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff107faf0 a2=0 a3=ffff9df3f6c0 items=0 ppid=2180 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.114000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 10:09:01.117000 audit[2297]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.117000 audit[2297]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe5c3df20 a2=0 a3=ffffb72ce6c0 items=0 ppid=2180 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 10:09:01.120000 audit[2300]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.120000 audit[2300]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc9e8fd70 a2=0 a3=ffffb6e716c0 items=0 ppid=2180 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.120000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 10:09:01.121000 audit[2301]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.121000 audit[2301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee154220 a2=0 a3=ffff8c8f76c0 items=0 ppid=2180 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.121000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 10:09:01.124000 audit[2303]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2303 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 10:09:01.124000 audit[2303]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe160b4a0 a2=0 a3=ffffb294f6c0 items=0 ppid=2180 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.124000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 10:09:01.139000 audit[2309]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:01.139000 audit[2309]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=fffff1679040 a2=0 a3=ffff8f0b16c0 items=0 ppid=2180 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.139000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:01.144000 audit[2309]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:01.144000 audit[2309]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=fffff1679040 a2=0 a3=ffff8f0b16c0 items=0 ppid=2180 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.144000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:01.151000 audit[2313]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.151000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffec0916d0 a2=0 a3=ffffa9f226c0 items=0 ppid=2180 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.151000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 10:09:01.153000 audit[2315]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.153000 audit[2315]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd2518550 a2=0 a3=ffffac6ec6c0 items=0 ppid=2180 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 9 10:09:01.157000 audit[2319]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.157000 audit[2319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffd0c6dff0 a2=0 a3=ffff862ea6c0 items=0 ppid=2180 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.157000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 9 10:09:01.158000 audit[2320]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2320 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.158000 audit[2320]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc4dbea0 a2=0 a3=ffffac10f6c0 items=0 ppid=2180 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.158000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 10:09:01.160000 audit[2322]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.160000 audit[2322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd7b0ca80 a2=0 a3=ffffb2e0c6c0 items=0 ppid=2180 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.160000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 10:09:01.160000 audit[2323]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.160000 audit[2323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc36265a0 a2=0 a3=ffff977706c0 items=0 ppid=2180 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.160000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 10:09:01.163000 audit[2325]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.163000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff5741480 a2=0 a3=ffffac6676c0 items=0 ppid=2180 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.163000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 9 10:09:01.166000 audit[2328]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.166000 audit[2328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc61a8db0 a2=0 a3=ffff9b6746c0 items=0 ppid=2180 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 10:09:01.167000 audit[2329]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.167000 audit[2329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffa8ca080 a2=0 a3=ffffae1bc6c0 items=0 ppid=2180 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.167000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 10:09:01.169000 audit[2331]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.169000 audit[2331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdad3d340 a2=0 a3=ffffb1f936c0 items=0 ppid=2180 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 10:09:01.170000 audit[2332]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2332 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.170000 audit[2332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc4417db0 a2=0 a3=ffffad9ed6c0 items=0 ppid=2180 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.170000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 10:09:01.173000 audit[2334]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.173000 audit[2334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff86ac4d0 a2=0 a3=ffffba1bb6c0 items=0 ppid=2180 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.173000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 10:09:01.176000 audit[2337]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.176000 audit[2337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe3078ee0 a2=0 a3=ffff9a3296c0 items=0 ppid=2180 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.176000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 10:09:01.180000 audit[2340]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2340 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.180000 audit[2340]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff584f300 a2=0 a3=ffff8812a6c0 items=0 ppid=2180 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 9 10:09:01.181000 audit[2341]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2341 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.181000 audit[2341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc8e6d860 a2=0 a3=ffffa439e6c0 items=0 ppid=2180 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.181000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 10:09:01.183000 audit[2343]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2343 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.183000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffffa2d0db0 a2=0 a3=ffffb39c16c0 items=0 ppid=2180 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 10:09:01.186000 audit[2346]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.186000 audit[2346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe6d50170 a2=0 a3=ffff99c126c0 items=0 ppid=2180 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.186000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 10:09:01.187000 audit[2347]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.187000 audit[2347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdc912120 a2=0 a3=ffffaf0f76c0 items=0 ppid=2180 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.187000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 10:09:01.189000 audit[2349]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.189000 audit[2349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffff6c27f70 a2=0 a3=ffffae7db6c0 items=0 ppid=2180 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.189000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 10:09:01.190000 audit[2350]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.190000 audit[2350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff7961190 a2=0 a3=ffff91d7c6c0 items=0 ppid=2180 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.190000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 10:09:01.192000 audit[2352]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.192000 audit[2352]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffef194890 a2=0 a3=ffffb00646c0 items=0 ppid=2180 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.192000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 10:09:01.195000 audit[2355]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 10:09:01.195000 audit[2355]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc7637990 a2=0 a3=ffffa86b36c0 items=0 ppid=2180 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.195000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 10:09:01.197000 audit[2357]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 10:09:01.197000 audit[2357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffccf74870 a2=0 a3=ffff82a536c0 items=0 ppid=2180 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.197000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:01.198000 audit[2357]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 10:09:01.198000 audit[2357]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffccf74870 a2=0 a3=ffff82a536c0 items=0 ppid=2180 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:01.198000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:01.739016 kubelet[2018]: E0209 10:09:01.738982 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:01.763224 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2618058938.mount: Deactivated successfully. Feb 9 10:09:02.259195 env[1143]: time="2024-02-09T10:09:02.259147812Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:02.260734 env[1143]: time="2024-02-09T10:09:02.260692137Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:02.262241 env[1143]: time="2024-02-09T10:09:02.262204305Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:02.264029 env[1143]: time="2024-02-09T10:09:02.263999165Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:02.264561 env[1143]: time="2024-02-09T10:09:02.264531511Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f\"" Feb 9 10:09:02.267746 env[1143]: time="2024-02-09T10:09:02.267690114Z" level=info msg="CreateContainer within sandbox \"42b00e2ac3941775db9173cff6df54e0d955cc1081a8b64478d3a02dce9c2626\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 9 10:09:02.277218 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2573020279.mount: Deactivated successfully. Feb 9 10:09:02.278949 env[1143]: time="2024-02-09T10:09:02.278906708Z" level=info msg="CreateContainer within sandbox \"42b00e2ac3941775db9173cff6df54e0d955cc1081a8b64478d3a02dce9c2626\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"7102e772267247427561edf406d6901d9bf8e99fffa300011ca9d3307b54c550\"" Feb 9 10:09:02.280665 env[1143]: time="2024-02-09T10:09:02.279550683Z" level=info msg="StartContainer for \"7102e772267247427561edf406d6901d9bf8e99fffa300011ca9d3307b54c550\"" Feb 9 10:09:02.292931 systemd[1]: Started cri-containerd-7102e772267247427561edf406d6901d9bf8e99fffa300011ca9d3307b54c550.scope. Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320951 kernel: kauditd_printk_skb: 315 callbacks suppressed Feb 9 10:09:02.321019 kernel: audit: type=1400 audit(1707473342.318:1035): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.321127 kernel: audit: type=1400 audit(1707473342.318:1036): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.322756 kernel: audit: type=1400 audit(1707473342.318:1037): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.326405 kernel: audit: type=1400 audit(1707473342.318:1038): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.326465 kernel: audit: type=1400 audit(1707473342.318:1039): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.328218 kernel: audit: type=1400 audit(1707473342.318:1040): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.329921 kernel: audit: type=1400 audit(1707473342.318:1041): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.333819 kernel: audit: type=1400 audit(1707473342.318:1042): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.335960 kernel: audit: type=1400 audit(1707473342.318:1043): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.336007 kernel: audit: type=1400 audit(1707473342.318:1044): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit: BPF prog-id=123 op=LOAD Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2194 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:02.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731303265373732323637323437343237353631656466343036643639 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2194 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:02.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731303265373732323637323437343237353631656466343036643639 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit: BPF prog-id=124 op=LOAD Feb 9 10:09:02.318000 audit[2366]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2194 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:02.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731303265373732323637323437343237353631656466343036643639 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.318000 audit: BPF prog-id=125 op=LOAD Feb 9 10:09:02.318000 audit[2366]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2194 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:02.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731303265373732323637323437343237353631656466343036643639 Feb 9 10:09:02.320000 audit: BPF prog-id=125 op=UNLOAD Feb 9 10:09:02.320000 audit: BPF prog-id=124 op=UNLOAD Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { perfmon } for pid=2366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit[2366]: AVC avc: denied { bpf } for pid=2366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:02.320000 audit: BPF prog-id=126 op=LOAD Feb 9 10:09:02.320000 audit[2366]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2194 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:02.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731303265373732323637323437343237353631656466343036643639 Feb 9 10:09:02.354563 env[1143]: time="2024-02-09T10:09:02.354517313Z" level=info msg="StartContainer for \"7102e772267247427561edf406d6901d9bf8e99fffa300011ca9d3307b54c550\" returns successfully" Feb 9 10:09:02.748798 kubelet[2018]: I0209 10:09:02.748761 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-8zrrl" podStartSLOduration=2.748729878 podCreationTimestamp="2024-02-09 10:09:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 10:09:01.748386841 +0000 UTC m=+16.139925924" watchObservedRunningTime="2024-02-09 10:09:02.748729878 +0000 UTC m=+17.140268921" Feb 9 10:09:04.931000 audit[2399]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:04.931000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffe14d78f0 a2=0 a3=ffffb28b86c0 items=0 ppid=2180 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:04.931000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:04.931000 audit[2399]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2399 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:04.931000 audit[2399]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffe14d78f0 a2=0 a3=ffffb28b86c0 items=0 ppid=2180 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:04.931000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:04.943000 audit[2401]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:04.943000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffe7f0e460 a2=0 a3=ffff8db4e6c0 items=0 ppid=2180 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:04.943000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:04.953000 audit[2401]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2401 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:04.953000 audit[2401]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffe7f0e460 a2=0 a3=ffff8db4e6c0 items=0 ppid=2180 pid=2401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:04.953000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:05.057521 kubelet[2018]: I0209 10:09:05.057477 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-55585899bf-z6qzk" podStartSLOduration=3.714815217 podCreationTimestamp="2024-02-09 10:09:00 +0000 UTC" firstStartedPulling="2024-02-09 10:09:00.922493642 +0000 UTC m=+15.314032685" lastFinishedPulling="2024-02-09 10:09:02.265113973 +0000 UTC m=+16.656653016" observedRunningTime="2024-02-09 10:09:02.749168714 +0000 UTC m=+17.140707757" watchObservedRunningTime="2024-02-09 10:09:05.057435548 +0000 UTC m=+19.448974551" Feb 9 10:09:05.057907 kubelet[2018]: I0209 10:09:05.057596 2018 topology_manager.go:215] "Topology Admit Handler" podUID="6218b1a9-d751-4f21-823d-a33c00ea666b" podNamespace="calico-system" podName="calico-typha-6f9c677858-bp8bk" Feb 9 10:09:05.062389 systemd[1]: Created slice kubepods-besteffort-pod6218b1a9_d751_4f21_823d_a33c00ea666b.slice. Feb 9 10:09:05.109196 kubelet[2018]: I0209 10:09:05.109160 2018 topology_manager.go:215] "Topology Admit Handler" podUID="3c1a6e4b-5cf8-4ca4-addc-49461024a540" podNamespace="calico-system" podName="calico-node-rtlvq" Feb 9 10:09:05.113962 systemd[1]: Created slice kubepods-besteffort-pod3c1a6e4b_5cf8_4ca4_addc_49461024a540.slice. Feb 9 10:09:05.126211 kubelet[2018]: I0209 10:09:05.126180 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/3c1a6e4b-5cf8-4ca4-addc-49461024a540-var-run-calico\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126211 kubelet[2018]: I0209 10:09:05.126221 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/3c1a6e4b-5cf8-4ca4-addc-49461024a540-cni-net-dir\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126424 kubelet[2018]: I0209 10:09:05.126245 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/6218b1a9-d751-4f21-823d-a33c00ea666b-typha-certs\") pod \"calico-typha-6f9c677858-bp8bk\" (UID: \"6218b1a9-d751-4f21-823d-a33c00ea666b\") " pod="calico-system/calico-typha-6f9c677858-bp8bk" Feb 9 10:09:05.126424 kubelet[2018]: I0209 10:09:05.126266 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3c1a6e4b-5cf8-4ca4-addc-49461024a540-xtables-lock\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126424 kubelet[2018]: I0209 10:09:05.126283 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/3c1a6e4b-5cf8-4ca4-addc-49461024a540-cni-log-dir\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126424 kubelet[2018]: I0209 10:09:05.126302 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3c1a6e4b-5cf8-4ca4-addc-49461024a540-tigera-ca-bundle\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126424 kubelet[2018]: I0209 10:09:05.126335 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/3c1a6e4b-5cf8-4ca4-addc-49461024a540-flexvol-driver-host\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126543 kubelet[2018]: I0209 10:09:05.126359 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6218b1a9-d751-4f21-823d-a33c00ea666b-tigera-ca-bundle\") pod \"calico-typha-6f9c677858-bp8bk\" (UID: \"6218b1a9-d751-4f21-823d-a33c00ea666b\") " pod="calico-system/calico-typha-6f9c677858-bp8bk" Feb 9 10:09:05.126543 kubelet[2018]: I0209 10:09:05.126378 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/3c1a6e4b-5cf8-4ca4-addc-49461024a540-node-certs\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126543 kubelet[2018]: I0209 10:09:05.126399 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8g8ss\" (UniqueName: \"kubernetes.io/projected/6218b1a9-d751-4f21-823d-a33c00ea666b-kube-api-access-8g8ss\") pod \"calico-typha-6f9c677858-bp8bk\" (UID: \"6218b1a9-d751-4f21-823d-a33c00ea666b\") " pod="calico-system/calico-typha-6f9c677858-bp8bk" Feb 9 10:09:05.126543 kubelet[2018]: I0209 10:09:05.126421 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jc5xv\" (UniqueName: \"kubernetes.io/projected/3c1a6e4b-5cf8-4ca4-addc-49461024a540-kube-api-access-jc5xv\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126543 kubelet[2018]: I0209 10:09:05.126441 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3c1a6e4b-5cf8-4ca4-addc-49461024a540-var-lib-calico\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126657 kubelet[2018]: I0209 10:09:05.126459 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/3c1a6e4b-5cf8-4ca4-addc-49461024a540-cni-bin-dir\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126657 kubelet[2018]: I0209 10:09:05.126477 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3c1a6e4b-5cf8-4ca4-addc-49461024a540-lib-modules\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.126657 kubelet[2018]: I0209 10:09:05.126497 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/3c1a6e4b-5cf8-4ca4-addc-49461024a540-policysync\") pod \"calico-node-rtlvq\" (UID: \"3c1a6e4b-5cf8-4ca4-addc-49461024a540\") " pod="calico-system/calico-node-rtlvq" Feb 9 10:09:05.220886 kubelet[2018]: I0209 10:09:05.220492 2018 topology_manager.go:215] "Topology Admit Handler" podUID="62a8938c-27f7-4453-9d3b-b08056096e4f" podNamespace="calico-system" podName="csi-node-driver-gxc5v" Feb 9 10:09:05.220886 kubelet[2018]: E0209 10:09:05.220774 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gxc5v" podUID="62a8938c-27f7-4453-9d3b-b08056096e4f" Feb 9 10:09:05.230416 kubelet[2018]: E0209 10:09:05.230392 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.230551 kubelet[2018]: W0209 10:09:05.230536 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.230656 kubelet[2018]: E0209 10:09:05.230642 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.231601 kubelet[2018]: E0209 10:09:05.231583 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.231729 kubelet[2018]: W0209 10:09:05.231715 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.231808 kubelet[2018]: E0209 10:09:05.231797 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.233486 kubelet[2018]: E0209 10:09:05.233470 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.233585 kubelet[2018]: W0209 10:09:05.233572 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.233760 kubelet[2018]: E0209 10:09:05.233741 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.233878 kubelet[2018]: E0209 10:09:05.233866 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.233961 kubelet[2018]: W0209 10:09:05.233949 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.234119 kubelet[2018]: E0209 10:09:05.234103 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.234233 kubelet[2018]: E0209 10:09:05.234221 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.234305 kubelet[2018]: W0209 10:09:05.234287 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.235205 kubelet[2018]: E0209 10:09:05.234797 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.238448 kubelet[2018]: E0209 10:09:05.238419 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.238535 kubelet[2018]: W0209 10:09:05.238472 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.238610 kubelet[2018]: E0209 10:09:05.238594 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.244206 kubelet[2018]: E0209 10:09:05.241604 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.244206 kubelet[2018]: W0209 10:09:05.241625 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.244206 kubelet[2018]: E0209 10:09:05.241702 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.244206 kubelet[2018]: E0209 10:09:05.241807 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.244206 kubelet[2018]: W0209 10:09:05.241814 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.244206 kubelet[2018]: E0209 10:09:05.241870 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.244206 kubelet[2018]: E0209 10:09:05.242047 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.244206 kubelet[2018]: W0209 10:09:05.242055 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.244206 kubelet[2018]: E0209 10:09:05.242118 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.244206 kubelet[2018]: E0209 10:09:05.242203 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.244543 kubelet[2018]: W0209 10:09:05.242210 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.244543 kubelet[2018]: E0209 10:09:05.242268 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.244682 kubelet[2018]: E0209 10:09:05.244666 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.244761 kubelet[2018]: W0209 10:09:05.244746 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.244851 kubelet[2018]: E0209 10:09:05.244823 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.246779 kubelet[2018]: E0209 10:09:05.246761 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.246933 kubelet[2018]: W0209 10:09:05.246917 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.247045 kubelet[2018]: E0209 10:09:05.247017 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.252616 kubelet[2018]: E0209 10:09:05.252594 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.252730 kubelet[2018]: W0209 10:09:05.252715 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.252828 kubelet[2018]: E0209 10:09:05.252803 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.254780 kubelet[2018]: E0209 10:09:05.254762 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.254903 kubelet[2018]: W0209 10:09:05.254886 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.256398 kubelet[2018]: E0209 10:09:05.256367 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.256554 kubelet[2018]: E0209 10:09:05.256540 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.256614 kubelet[2018]: W0209 10:09:05.256603 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.256718 kubelet[2018]: E0209 10:09:05.256696 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.256925 kubelet[2018]: E0209 10:09:05.256911 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.257008 kubelet[2018]: W0209 10:09:05.256994 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.257383 kubelet[2018]: E0209 10:09:05.257359 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.257515 kubelet[2018]: E0209 10:09:05.257502 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.257578 kubelet[2018]: W0209 10:09:05.257566 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.257668 kubelet[2018]: E0209 10:09:05.257648 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.257889 kubelet[2018]: E0209 10:09:05.257875 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.257976 kubelet[2018]: W0209 10:09:05.257963 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.258078 kubelet[2018]: E0209 10:09:05.258059 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.259062 kubelet[2018]: E0209 10:09:05.259044 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.259191 kubelet[2018]: W0209 10:09:05.259145 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.259285 kubelet[2018]: E0209 10:09:05.259273 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.315714 kubelet[2018]: E0209 10:09:05.315689 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.315714 kubelet[2018]: W0209 10:09:05.315708 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.315888 kubelet[2018]: E0209 10:09:05.315730 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.315914 kubelet[2018]: E0209 10:09:05.315889 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.315914 kubelet[2018]: W0209 10:09:05.315897 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.315914 kubelet[2018]: E0209 10:09:05.315908 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.316056 kubelet[2018]: E0209 10:09:05.316039 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.316056 kubelet[2018]: W0209 10:09:05.316048 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.316056 kubelet[2018]: E0209 10:09:05.316057 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.316201 kubelet[2018]: E0209 10:09:05.316185 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.316201 kubelet[2018]: W0209 10:09:05.316194 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.316260 kubelet[2018]: E0209 10:09:05.316204 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.316373 kubelet[2018]: E0209 10:09:05.316359 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.316427 kubelet[2018]: W0209 10:09:05.316384 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.316427 kubelet[2018]: E0209 10:09:05.316397 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.316567 kubelet[2018]: E0209 10:09:05.316553 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.316605 kubelet[2018]: W0209 10:09:05.316588 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.316605 kubelet[2018]: E0209 10:09:05.316600 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.316800 kubelet[2018]: E0209 10:09:05.316784 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.316800 kubelet[2018]: W0209 10:09:05.316794 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.316863 kubelet[2018]: E0209 10:09:05.316804 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.317002 kubelet[2018]: E0209 10:09:05.316991 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.317002 kubelet[2018]: W0209 10:09:05.317001 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.317072 kubelet[2018]: E0209 10:09:05.317011 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.317302 kubelet[2018]: E0209 10:09:05.317141 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.317302 kubelet[2018]: W0209 10:09:05.317161 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.317302 kubelet[2018]: E0209 10:09:05.317178 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.317575 kubelet[2018]: E0209 10:09:05.317561 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.317575 kubelet[2018]: W0209 10:09:05.317571 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.317637 kubelet[2018]: E0209 10:09:05.317583 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.317730 kubelet[2018]: E0209 10:09:05.317719 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.317730 kubelet[2018]: W0209 10:09:05.317728 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.317785 kubelet[2018]: E0209 10:09:05.317737 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.317855 kubelet[2018]: E0209 10:09:05.317845 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.317855 kubelet[2018]: W0209 10:09:05.317854 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.317911 kubelet[2018]: E0209 10:09:05.317865 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.318136 kubelet[2018]: E0209 10:09:05.318125 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.318136 kubelet[2018]: W0209 10:09:05.318135 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.318202 kubelet[2018]: E0209 10:09:05.318146 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.318271 kubelet[2018]: E0209 10:09:05.318260 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.318271 kubelet[2018]: W0209 10:09:05.318268 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.318348 kubelet[2018]: E0209 10:09:05.318279 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.318417 kubelet[2018]: E0209 10:09:05.318407 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.318417 kubelet[2018]: W0209 10:09:05.318416 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.318467 kubelet[2018]: E0209 10:09:05.318425 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.318543 kubelet[2018]: E0209 10:09:05.318533 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.318543 kubelet[2018]: W0209 10:09:05.318542 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.318587 kubelet[2018]: E0209 10:09:05.318551 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.318670 kubelet[2018]: E0209 10:09:05.318660 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.318670 kubelet[2018]: W0209 10:09:05.318670 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.318717 kubelet[2018]: E0209 10:09:05.318679 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.318787 kubelet[2018]: E0209 10:09:05.318778 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.318787 kubelet[2018]: W0209 10:09:05.318786 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.318834 kubelet[2018]: E0209 10:09:05.318795 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.318902 kubelet[2018]: E0209 10:09:05.318893 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.318930 kubelet[2018]: W0209 10:09:05.318902 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.318930 kubelet[2018]: E0209 10:09:05.318910 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.319021 kubelet[2018]: E0209 10:09:05.319013 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.319021 kubelet[2018]: W0209 10:09:05.319021 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.319166 kubelet[2018]: E0209 10:09:05.319029 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.329390 kubelet[2018]: E0209 10:09:05.329369 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.329390 kubelet[2018]: W0209 10:09:05.329384 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.329493 kubelet[2018]: E0209 10:09:05.329400 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.329493 kubelet[2018]: I0209 10:09:05.329427 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/62a8938c-27f7-4453-9d3b-b08056096e4f-kubelet-dir\") pod \"csi-node-driver-gxc5v\" (UID: \"62a8938c-27f7-4453-9d3b-b08056096e4f\") " pod="calico-system/csi-node-driver-gxc5v" Feb 9 10:09:05.329644 kubelet[2018]: E0209 10:09:05.329627 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.329644 kubelet[2018]: W0209 10:09:05.329639 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.329702 kubelet[2018]: E0209 10:09:05.329650 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.329702 kubelet[2018]: I0209 10:09:05.329676 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/62a8938c-27f7-4453-9d3b-b08056096e4f-varrun\") pod \"csi-node-driver-gxc5v\" (UID: \"62a8938c-27f7-4453-9d3b-b08056096e4f\") " pod="calico-system/csi-node-driver-gxc5v" Feb 9 10:09:05.329859 kubelet[2018]: E0209 10:09:05.329832 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.329859 kubelet[2018]: W0209 10:09:05.329843 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.329859 kubelet[2018]: E0209 10:09:05.329856 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.329954 kubelet[2018]: I0209 10:09:05.329873 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/62a8938c-27f7-4453-9d3b-b08056096e4f-socket-dir\") pod \"csi-node-driver-gxc5v\" (UID: \"62a8938c-27f7-4453-9d3b-b08056096e4f\") " pod="calico-system/csi-node-driver-gxc5v" Feb 9 10:09:05.330030 kubelet[2018]: E0209 10:09:05.330015 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.330030 kubelet[2018]: W0209 10:09:05.330027 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.330094 kubelet[2018]: E0209 10:09:05.330038 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.330094 kubelet[2018]: I0209 10:09:05.330059 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/62a8938c-27f7-4453-9d3b-b08056096e4f-registration-dir\") pod \"csi-node-driver-gxc5v\" (UID: \"62a8938c-27f7-4453-9d3b-b08056096e4f\") " pod="calico-system/csi-node-driver-gxc5v" Feb 9 10:09:05.330241 kubelet[2018]: E0209 10:09:05.330230 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.330241 kubelet[2018]: W0209 10:09:05.330240 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.330330 kubelet[2018]: E0209 10:09:05.330255 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.330330 kubelet[2018]: I0209 10:09:05.330276 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bfvwd\" (UniqueName: \"kubernetes.io/projected/62a8938c-27f7-4453-9d3b-b08056096e4f-kube-api-access-bfvwd\") pod \"csi-node-driver-gxc5v\" (UID: \"62a8938c-27f7-4453-9d3b-b08056096e4f\") " pod="calico-system/csi-node-driver-gxc5v" Feb 9 10:09:05.330480 kubelet[2018]: E0209 10:09:05.330466 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.330480 kubelet[2018]: W0209 10:09:05.330478 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.330541 kubelet[2018]: E0209 10:09:05.330493 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.330618 kubelet[2018]: E0209 10:09:05.330608 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.330618 kubelet[2018]: W0209 10:09:05.330617 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.330671 kubelet[2018]: E0209 10:09:05.330631 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.330759 kubelet[2018]: E0209 10:09:05.330749 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.330759 kubelet[2018]: W0209 10:09:05.330757 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.330814 kubelet[2018]: E0209 10:09:05.330772 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.330884 kubelet[2018]: E0209 10:09:05.330874 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.330884 kubelet[2018]: W0209 10:09:05.330882 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.330942 kubelet[2018]: E0209 10:09:05.330895 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.331021 kubelet[2018]: E0209 10:09:05.331010 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.331021 kubelet[2018]: W0209 10:09:05.331019 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.331085 kubelet[2018]: E0209 10:09:05.331032 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.331142 kubelet[2018]: E0209 10:09:05.331131 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.331142 kubelet[2018]: W0209 10:09:05.331139 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.331204 kubelet[2018]: E0209 10:09:05.331177 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.331276 kubelet[2018]: E0209 10:09:05.331265 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.331331 kubelet[2018]: W0209 10:09:05.331280 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.331365 kubelet[2018]: E0209 10:09:05.331346 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.331440 kubelet[2018]: E0209 10:09:05.331428 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.331477 kubelet[2018]: W0209 10:09:05.331442 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.331477 kubelet[2018]: E0209 10:09:05.331456 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.331578 kubelet[2018]: E0209 10:09:05.331564 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.331578 kubelet[2018]: W0209 10:09:05.331572 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.331637 kubelet[2018]: E0209 10:09:05.331586 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.332061 kubelet[2018]: E0209 10:09:05.331705 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.332061 kubelet[2018]: W0209 10:09:05.331715 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.332061 kubelet[2018]: E0209 10:09:05.331729 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.364969 kubelet[2018]: E0209 10:09:05.364943 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:05.365585 env[1143]: time="2024-02-09T10:09:05.365535090Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6f9c677858-bp8bk,Uid:6218b1a9-d751-4f21-823d-a33c00ea666b,Namespace:calico-system,Attempt:0,}" Feb 9 10:09:05.415842 kubelet[2018]: E0209 10:09:05.415814 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:05.416567 env[1143]: time="2024-02-09T10:09:05.416303288Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-rtlvq,Uid:3c1a6e4b-5cf8-4ca4-addc-49461024a540,Namespace:calico-system,Attempt:0,}" Feb 9 10:09:05.431063 kubelet[2018]: E0209 10:09:05.431036 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.431063 kubelet[2018]: W0209 10:09:05.431054 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.431063 kubelet[2018]: E0209 10:09:05.431074 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.431275 kubelet[2018]: E0209 10:09:05.431261 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.431275 kubelet[2018]: W0209 10:09:05.431271 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.431425 kubelet[2018]: E0209 10:09:05.431285 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.431527 kubelet[2018]: E0209 10:09:05.431511 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.431527 kubelet[2018]: W0209 10:09:05.431523 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.431595 kubelet[2018]: E0209 10:09:05.431540 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.431713 kubelet[2018]: E0209 10:09:05.431697 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.431713 kubelet[2018]: W0209 10:09:05.431710 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.431785 kubelet[2018]: E0209 10:09:05.431726 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.431872 kubelet[2018]: E0209 10:09:05.431857 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.431872 kubelet[2018]: W0209 10:09:05.431868 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.431934 kubelet[2018]: E0209 10:09:05.431885 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.432075 kubelet[2018]: E0209 10:09:05.432058 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.432075 kubelet[2018]: W0209 10:09:05.432068 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.432075 kubelet[2018]: E0209 10:09:05.432078 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.432238 kubelet[2018]: E0209 10:09:05.432219 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.432238 kubelet[2018]: W0209 10:09:05.432229 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.432238 kubelet[2018]: E0209 10:09:05.432243 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.432419 kubelet[2018]: E0209 10:09:05.432402 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.432419 kubelet[2018]: W0209 10:09:05.432412 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.432495 kubelet[2018]: E0209 10:09:05.432423 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.432591 kubelet[2018]: E0209 10:09:05.432566 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.432591 kubelet[2018]: W0209 10:09:05.432577 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.432591 kubelet[2018]: E0209 10:09:05.432588 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.432761 kubelet[2018]: E0209 10:09:05.432748 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.432761 kubelet[2018]: W0209 10:09:05.432757 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.432830 kubelet[2018]: E0209 10:09:05.432772 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.432908 kubelet[2018]: E0209 10:09:05.432892 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.432908 kubelet[2018]: W0209 10:09:05.432901 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.432908 kubelet[2018]: E0209 10:09:05.432912 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.433037 kubelet[2018]: E0209 10:09:05.433021 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.433037 kubelet[2018]: W0209 10:09:05.433031 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.433110 kubelet[2018]: E0209 10:09:05.433093 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.433183 kubelet[2018]: E0209 10:09:05.433172 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.433183 kubelet[2018]: W0209 10:09:05.433180 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.433243 kubelet[2018]: E0209 10:09:05.433211 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.433333 kubelet[2018]: E0209 10:09:05.433317 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.433333 kubelet[2018]: W0209 10:09:05.433328 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.433397 kubelet[2018]: E0209 10:09:05.433342 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.433509 kubelet[2018]: E0209 10:09:05.433492 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.433509 kubelet[2018]: W0209 10:09:05.433503 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.433570 kubelet[2018]: E0209 10:09:05.433516 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.433660 kubelet[2018]: E0209 10:09:05.433639 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.433660 kubelet[2018]: W0209 10:09:05.433649 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.433660 kubelet[2018]: E0209 10:09:05.433660 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.433837 kubelet[2018]: E0209 10:09:05.433810 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.433837 kubelet[2018]: W0209 10:09:05.433820 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.433908 kubelet[2018]: E0209 10:09:05.433884 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.433956 kubelet[2018]: E0209 10:09:05.433942 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.433956 kubelet[2018]: W0209 10:09:05.433950 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.434040 kubelet[2018]: E0209 10:09:05.434027 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.434093 kubelet[2018]: E0209 10:09:05.434082 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.434093 kubelet[2018]: W0209 10:09:05.434091 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.434154 kubelet[2018]: E0209 10:09:05.434103 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.434232 kubelet[2018]: E0209 10:09:05.434216 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.434232 kubelet[2018]: W0209 10:09:05.434225 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.434232 kubelet[2018]: E0209 10:09:05.434234 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.435430 kubelet[2018]: E0209 10:09:05.434982 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.435430 kubelet[2018]: W0209 10:09:05.434998 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.435430 kubelet[2018]: E0209 10:09:05.435016 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.436360 kubelet[2018]: E0209 10:09:05.435707 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.436360 kubelet[2018]: W0209 10:09:05.435724 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.436360 kubelet[2018]: E0209 10:09:05.435743 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.436360 kubelet[2018]: E0209 10:09:05.435935 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.436360 kubelet[2018]: W0209 10:09:05.435944 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.436360 kubelet[2018]: E0209 10:09:05.436039 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.436360 kubelet[2018]: E0209 10:09:05.436100 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.436360 kubelet[2018]: W0209 10:09:05.436106 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.436360 kubelet[2018]: E0209 10:09:05.436118 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.437038 kubelet[2018]: E0209 10:09:05.437022 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.437038 kubelet[2018]: W0209 10:09:05.437037 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.437117 kubelet[2018]: E0209 10:09:05.437051 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.454025 env[1143]: time="2024-02-09T10:09:05.453952092Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:09:05.454225 env[1143]: time="2024-02-09T10:09:05.454201472Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:09:05.454605 env[1143]: time="2024-02-09T10:09:05.454297584Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:09:05.455441 env[1143]: time="2024-02-09T10:09:05.455398533Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4433c8e39a1189d0d0d5db34b114d2243c97edf619ee31608d582cddc20fc8d5 pid=2492 runtime=io.containerd.runc.v2 Feb 9 10:09:05.456271 kubelet[2018]: E0209 10:09:05.456249 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:05.456271 kubelet[2018]: W0209 10:09:05.456268 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:05.456546 kubelet[2018]: E0209 10:09:05.456293 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:05.463417 env[1143]: time="2024-02-09T10:09:05.463350674Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:09:05.463417 env[1143]: time="2024-02-09T10:09:05.463386511Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:09:05.463592 env[1143]: time="2024-02-09T10:09:05.463396391Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:09:05.463804 env[1143]: time="2024-02-09T10:09:05.463715484Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/54636fc1129d22faad3cfcb844e63e5f7dd1cce9c617094f0649036b2e04fa43 pid=2511 runtime=io.containerd.runc.v2 Feb 9 10:09:05.470820 systemd[1]: Started cri-containerd-4433c8e39a1189d0d0d5db34b114d2243c97edf619ee31608d582cddc20fc8d5.scope. Feb 9 10:09:05.490759 systemd[1]: Started cri-containerd-54636fc1129d22faad3cfcb844e63e5f7dd1cce9c617094f0649036b2e04fa43.scope. Feb 9 10:09:05.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.495000 audit: BPF prog-id=127 op=LOAD Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2492 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434333363386533396131313839643064306435646233346231313464 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2492 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434333363386533396131313839643064306435646233346231313464 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit: BPF prog-id=128 op=LOAD Feb 9 10:09:05.496000 audit[2513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2492 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434333363386533396131313839643064306435646233346231313464 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit: BPF prog-id=129 op=LOAD Feb 9 10:09:05.496000 audit[2513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2492 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434333363386533396131313839643064306435646233346231313464 Feb 9 10:09:05.496000 audit: BPF prog-id=129 op=UNLOAD Feb 9 10:09:05.496000 audit: BPF prog-id=128 op=UNLOAD Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { perfmon } for pid=2513 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit[2513]: AVC avc: denied { bpf } for pid=2513 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.496000 audit: BPF prog-id=130 op=LOAD Feb 9 10:09:05.496000 audit[2513]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2492 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434333363386533396131313839643064306435646233346231313464 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.542000 audit: BPF prog-id=131 op=LOAD Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=2511 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363336666331313239643232666161643363666362383434653633 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=2511 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363336666331313239643232666161643363666362383434653633 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit: BPF prog-id=132 op=LOAD Feb 9 10:09:05.544000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=2511 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363336666331313239643232666161643363666362383434653633 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit: BPF prog-id=133 op=LOAD Feb 9 10:09:05.544000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=2511 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363336666331313239643232666161643363666362383434653633 Feb 9 10:09:05.544000 audit: BPF prog-id=133 op=UNLOAD Feb 9 10:09:05.544000 audit: BPF prog-id=132 op=UNLOAD Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { perfmon } for pid=2527 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit[2527]: AVC avc: denied { bpf } for pid=2527 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:05.544000 audit: BPF prog-id=134 op=LOAD Feb 9 10:09:05.544000 audit[2527]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=2511 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.544000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3534363336666331313239643232666161643363666362383434653633 Feb 9 10:09:05.560956 env[1143]: time="2024-02-09T10:09:05.560915600Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6f9c677858-bp8bk,Uid:6218b1a9-d751-4f21-823d-a33c00ea666b,Namespace:calico-system,Attempt:0,} returns sandbox id \"4433c8e39a1189d0d0d5db34b114d2243c97edf619ee31608d582cddc20fc8d5\"" Feb 9 10:09:05.561778 kubelet[2018]: E0209 10:09:05.561752 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:05.562605 env[1143]: time="2024-02-09T10:09:05.562561024Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 9 10:09:05.573547 env[1143]: time="2024-02-09T10:09:05.573504398Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-rtlvq,Uid:3c1a6e4b-5cf8-4ca4-addc-49461024a540,Namespace:calico-system,Attempt:0,} returns sandbox id \"54636fc1129d22faad3cfcb844e63e5f7dd1cce9c617094f0649036b2e04fa43\"" Feb 9 10:09:05.574162 kubelet[2018]: E0209 10:09:05.574144 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:05.967000 audit[2569]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2569 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:05.967000 audit[2569]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffdbc6fec0 a2=0 a3=ffff81eb76c0 items=0 ppid=2180 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.967000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:05.968000 audit[2569]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2569 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:05.968000 audit[2569]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffdbc6fec0 a2=0 a3=ffff81eb76c0 items=0 ppid=2180 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:05.968000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:06.681586 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount387600653.mount: Deactivated successfully. Feb 9 10:09:06.703745 kubelet[2018]: E0209 10:09:06.703699 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gxc5v" podUID="62a8938c-27f7-4453-9d3b-b08056096e4f" Feb 9 10:09:07.293046 env[1143]: time="2024-02-09T10:09:07.292970391Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:07.294474 env[1143]: time="2024-02-09T10:09:07.294438684Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:07.296667 env[1143]: time="2024-02-09T10:09:07.296638964Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:07.298025 env[1143]: time="2024-02-09T10:09:07.297986986Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:07.298722 env[1143]: time="2024-02-09T10:09:07.298585983Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969\"" Feb 9 10:09:07.299646 env[1143]: time="2024-02-09T10:09:07.299600749Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 9 10:09:07.305688 env[1143]: time="2024-02-09T10:09:07.305580394Z" level=info msg="CreateContainer within sandbox \"4433c8e39a1189d0d0d5db34b114d2243c97edf619ee31608d582cddc20fc8d5\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 9 10:09:07.325419 env[1143]: time="2024-02-09T10:09:07.325371234Z" level=info msg="CreateContainer within sandbox \"4433c8e39a1189d0d0d5db34b114d2243c97edf619ee31608d582cddc20fc8d5\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"111351d5ff7f03c229fac13c789e647788d33b90bf2e9d20a90d28e30aca1712\"" Feb 9 10:09:07.326145 env[1143]: time="2024-02-09T10:09:07.326119420Z" level=info msg="StartContainer for \"111351d5ff7f03c229fac13c789e647788d33b90bf2e9d20a90d28e30aca1712\"" Feb 9 10:09:07.343664 systemd[1]: Started cri-containerd-111351d5ff7f03c229fac13c789e647788d33b90bf2e9d20a90d28e30aca1712.scope. Feb 9 10:09:07.404988 kernel: kauditd_printk_skb: 179 callbacks suppressed Feb 9 10:09:07.405141 kernel: audit: type=1400 audit(1707473347.402:1095): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.408665 kernel: audit: type=1400 audit(1707473347.402:1096): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.408739 kernel: audit: type=1400 audit(1707473347.402:1097): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.412402 kernel: audit: type=1400 audit(1707473347.402:1098): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.412585 kernel: audit: type=1400 audit(1707473347.402:1099): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.416454 kernel: audit: type=1400 audit(1707473347.402:1100): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.416512 kernel: audit: type=1400 audit(1707473347.402:1101): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.402000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.420698 kernel: audit: type=1400 audit(1707473347.402:1102): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.420779 kernel: audit: type=1400 audit(1707473347.402:1103): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.402000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.422557 kernel: audit: type=1400 audit(1707473347.403:1104): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.403000 audit: BPF prog-id=135 op=LOAD Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2492 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:07.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131313335316435666637663033633232396661633133633738396536 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2492 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:07.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131313335316435666637663033633232396661633133633738396536 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.404000 audit: BPF prog-id=136 op=LOAD Feb 9 10:09:07.404000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2492 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:07.404000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131313335316435666637663033633232396661633133633738396536 Feb 9 10:09:07.405000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.405000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.405000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.405000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.405000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.405000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.405000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.405000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.405000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.405000 audit: BPF prog-id=137 op=LOAD Feb 9 10:09:07.405000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2492 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:07.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131313335316435666637663033633232396661633133633738396536 Feb 9 10:09:07.407000 audit: BPF prog-id=137 op=UNLOAD Feb 9 10:09:07.407000 audit: BPF prog-id=136 op=UNLOAD Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { perfmon } for pid=2579 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit[2579]: AVC avc: denied { bpf } for pid=2579 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:07.407000 audit: BPF prog-id=138 op=LOAD Feb 9 10:09:07.407000 audit[2579]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2492 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:07.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131313335316435666637663033633232396661633133633738396536 Feb 9 10:09:07.495259 env[1143]: time="2024-02-09T10:09:07.495211041Z" level=info msg="StartContainer for \"111351d5ff7f03c229fac13c789e647788d33b90bf2e9d20a90d28e30aca1712\" returns successfully" Feb 9 10:09:07.751646 kubelet[2018]: E0209 10:09:07.751618 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:07.759933 kubelet[2018]: I0209 10:09:07.759897 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-6f9c677858-bp8bk" podStartSLOduration=1.023169603 podCreationTimestamp="2024-02-09 10:09:05 +0000 UTC" firstStartedPulling="2024-02-09 10:09:05.562220572 +0000 UTC m=+19.953759615" lastFinishedPulling="2024-02-09 10:09:07.298915959 +0000 UTC m=+21.690455002" observedRunningTime="2024-02-09 10:09:07.759109045 +0000 UTC m=+22.150648088" watchObservedRunningTime="2024-02-09 10:09:07.75986499 +0000 UTC m=+22.151404033" Feb 9 10:09:07.836696 kubelet[2018]: E0209 10:09:07.836667 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.836696 kubelet[2018]: W0209 10:09:07.836689 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.836865 kubelet[2018]: E0209 10:09:07.836711 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.836865 kubelet[2018]: E0209 10:09:07.836845 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.836865 kubelet[2018]: W0209 10:09:07.836853 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.836865 kubelet[2018]: E0209 10:09:07.836864 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.837004 kubelet[2018]: E0209 10:09:07.836993 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.837004 kubelet[2018]: W0209 10:09:07.837003 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.837073 kubelet[2018]: E0209 10:09:07.837014 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.837210 kubelet[2018]: E0209 10:09:07.837199 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.837210 kubelet[2018]: W0209 10:09:07.837210 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.837285 kubelet[2018]: E0209 10:09:07.837222 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.837849 kubelet[2018]: E0209 10:09:07.837833 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.837967 kubelet[2018]: W0209 10:09:07.837953 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.838007 kubelet[2018]: E0209 10:09:07.837973 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.838690 kubelet[2018]: E0209 10:09:07.838676 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.838690 kubelet[2018]: W0209 10:09:07.838690 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.838780 kubelet[2018]: E0209 10:09:07.838704 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.838874 kubelet[2018]: E0209 10:09:07.838864 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.838874 kubelet[2018]: W0209 10:09:07.838873 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.838940 kubelet[2018]: E0209 10:09:07.838883 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.839026 kubelet[2018]: E0209 10:09:07.839017 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.839026 kubelet[2018]: W0209 10:09:07.839026 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.839098 kubelet[2018]: E0209 10:09:07.839036 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.839197 kubelet[2018]: E0209 10:09:07.839187 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.839238 kubelet[2018]: W0209 10:09:07.839197 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.839238 kubelet[2018]: E0209 10:09:07.839208 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.839371 kubelet[2018]: E0209 10:09:07.839359 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.839371 kubelet[2018]: W0209 10:09:07.839369 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.839441 kubelet[2018]: E0209 10:09:07.839380 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.839518 kubelet[2018]: E0209 10:09:07.839509 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.839518 kubelet[2018]: W0209 10:09:07.839518 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.839576 kubelet[2018]: E0209 10:09:07.839527 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.839657 kubelet[2018]: E0209 10:09:07.839647 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.839657 kubelet[2018]: W0209 10:09:07.839657 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.839725 kubelet[2018]: E0209 10:09:07.839666 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.839801 kubelet[2018]: E0209 10:09:07.839791 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.839801 kubelet[2018]: W0209 10:09:07.839800 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.839870 kubelet[2018]: E0209 10:09:07.839810 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.839942 kubelet[2018]: E0209 10:09:07.839933 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.839980 kubelet[2018]: W0209 10:09:07.839943 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.839980 kubelet[2018]: E0209 10:09:07.839953 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.840097 kubelet[2018]: E0209 10:09:07.840080 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.840097 kubelet[2018]: W0209 10:09:07.840089 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.840097 kubelet[2018]: E0209 10:09:07.840098 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.847548 kubelet[2018]: E0209 10:09:07.847528 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.847690 kubelet[2018]: W0209 10:09:07.847676 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.847761 kubelet[2018]: E0209 10:09:07.847751 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.848013 kubelet[2018]: E0209 10:09:07.848001 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.848089 kubelet[2018]: W0209 10:09:07.848077 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.848166 kubelet[2018]: E0209 10:09:07.848155 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.848412 kubelet[2018]: E0209 10:09:07.848395 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.848412 kubelet[2018]: W0209 10:09:07.848410 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.848505 kubelet[2018]: E0209 10:09:07.848432 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.848590 kubelet[2018]: E0209 10:09:07.848572 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.848590 kubelet[2018]: W0209 10:09:07.848582 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.848590 kubelet[2018]: E0209 10:09:07.848597 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.848827 kubelet[2018]: E0209 10:09:07.848809 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.848827 kubelet[2018]: W0209 10:09:07.848820 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.848914 kubelet[2018]: E0209 10:09:07.848836 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.849016 kubelet[2018]: E0209 10:09:07.849001 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.849016 kubelet[2018]: W0209 10:09:07.849011 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.849091 kubelet[2018]: E0209 10:09:07.849026 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.849264 kubelet[2018]: E0209 10:09:07.849244 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.849264 kubelet[2018]: W0209 10:09:07.849258 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.849373 kubelet[2018]: E0209 10:09:07.849279 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.849515 kubelet[2018]: E0209 10:09:07.849498 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.849515 kubelet[2018]: W0209 10:09:07.849511 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.849594 kubelet[2018]: E0209 10:09:07.849528 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.849715 kubelet[2018]: E0209 10:09:07.849699 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.849715 kubelet[2018]: W0209 10:09:07.849710 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.849841 kubelet[2018]: E0209 10:09:07.849722 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.849875 kubelet[2018]: E0209 10:09:07.849856 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.849875 kubelet[2018]: W0209 10:09:07.849864 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.849875 kubelet[2018]: E0209 10:09:07.849874 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.850137 kubelet[2018]: E0209 10:09:07.850107 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.850137 kubelet[2018]: W0209 10:09:07.850128 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.850218 kubelet[2018]: E0209 10:09:07.850182 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.850305 kubelet[2018]: E0209 10:09:07.850281 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.850305 kubelet[2018]: W0209 10:09:07.850292 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.850383 kubelet[2018]: E0209 10:09:07.850320 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.850522 kubelet[2018]: E0209 10:09:07.850505 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.850522 kubelet[2018]: W0209 10:09:07.850515 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.850522 kubelet[2018]: E0209 10:09:07.850525 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.850673 kubelet[2018]: E0209 10:09:07.850648 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.850673 kubelet[2018]: W0209 10:09:07.850658 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.850673 kubelet[2018]: E0209 10:09:07.850671 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.850837 kubelet[2018]: E0209 10:09:07.850823 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.850837 kubelet[2018]: W0209 10:09:07.850832 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.850903 kubelet[2018]: E0209 10:09:07.850842 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.851140 kubelet[2018]: E0209 10:09:07.851123 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.851223 kubelet[2018]: W0209 10:09:07.851209 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.851288 kubelet[2018]: E0209 10:09:07.851277 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.851492 kubelet[2018]: E0209 10:09:07.851469 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.851492 kubelet[2018]: W0209 10:09:07.851483 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.851492 kubelet[2018]: E0209 10:09:07.851495 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:07.852404 kubelet[2018]: E0209 10:09:07.852387 2018 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 10:09:07.852505 kubelet[2018]: W0209 10:09:07.852492 2018 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 10:09:07.852588 kubelet[2018]: E0209 10:09:07.852578 2018 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 10:09:08.480729 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount52770514.mount: Deactivated successfully. Feb 9 10:09:08.551913 env[1143]: time="2024-02-09T10:09:08.551862885Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:08.553803 env[1143]: time="2024-02-09T10:09:08.553767115Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:08.555493 env[1143]: time="2024-02-09T10:09:08.555447480Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:08.558028 env[1143]: time="2024-02-09T10:09:08.556971657Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:08.558230 env[1143]: time="2024-02-09T10:09:08.558199133Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57\"" Feb 9 10:09:08.559846 env[1143]: time="2024-02-09T10:09:08.559815143Z" level=info msg="CreateContainer within sandbox \"54636fc1129d22faad3cfcb844e63e5f7dd1cce9c617094f0649036b2e04fa43\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 9 10:09:08.576777 env[1143]: time="2024-02-09T10:09:08.576734309Z" level=info msg="CreateContainer within sandbox \"54636fc1129d22faad3cfcb844e63e5f7dd1cce9c617094f0649036b2e04fa43\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"1df30124be8d8e7e7c4c31d51b7377f9c3562e9a3da975de913399a702377075\"" Feb 9 10:09:08.577609 env[1143]: time="2024-02-09T10:09:08.577568812Z" level=info msg="StartContainer for \"1df30124be8d8e7e7c4c31d51b7377f9c3562e9a3da975de913399a702377075\"" Feb 9 10:09:08.596897 systemd[1]: Started cri-containerd-1df30124be8d8e7e7c4c31d51b7377f9c3562e9a3da975de913399a702377075.scope. Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2511 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:08.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663330313234626538643865376537633463333164353162373337 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit: BPF prog-id=139 op=LOAD Feb 9 10:09:08.631000 audit[2652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2511 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:08.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663330313234626538643865376537633463333164353162373337 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit: BPF prog-id=140 op=LOAD Feb 9 10:09:08.631000 audit[2652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2511 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:08.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663330313234626538643865376537633463333164353162373337 Feb 9 10:09:08.631000 audit: BPF prog-id=140 op=UNLOAD Feb 9 10:09:08.631000 audit: BPF prog-id=139 op=UNLOAD Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { perfmon } for pid=2652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit[2652]: AVC avc: denied { bpf } for pid=2652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:08.631000 audit: BPF prog-id=141 op=LOAD Feb 9 10:09:08.631000 audit[2652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2511 pid=2652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:08.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3164663330313234626538643865376537633463333164353162373337 Feb 9 10:09:08.648652 env[1143]: time="2024-02-09T10:09:08.648482616Z" level=info msg="StartContainer for \"1df30124be8d8e7e7c4c31d51b7377f9c3562e9a3da975de913399a702377075\" returns successfully" Feb 9 10:09:08.653904 systemd[1]: cri-containerd-1df30124be8d8e7e7c4c31d51b7377f9c3562e9a3da975de913399a702377075.scope: Deactivated successfully. Feb 9 10:09:08.657000 audit: BPF prog-id=141 op=UNLOAD Feb 9 10:09:08.703201 kubelet[2018]: E0209 10:09:08.703157 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gxc5v" podUID="62a8938c-27f7-4453-9d3b-b08056096e4f" Feb 9 10:09:08.722730 env[1143]: time="2024-02-09T10:09:08.722679957Z" level=info msg="shim disconnected" id=1df30124be8d8e7e7c4c31d51b7377f9c3562e9a3da975de913399a702377075 Feb 9 10:09:08.722730 env[1143]: time="2024-02-09T10:09:08.722728073Z" level=warning msg="cleaning up after shim disconnected" id=1df30124be8d8e7e7c4c31d51b7377f9c3562e9a3da975de913399a702377075 namespace=k8s.io Feb 9 10:09:08.722913 env[1143]: time="2024-02-09T10:09:08.722738353Z" level=info msg="cleaning up dead shim" Feb 9 10:09:08.729551 env[1143]: time="2024-02-09T10:09:08.729496612Z" level=warning msg="cleanup warnings time=\"2024-02-09T10:09:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2689 runtime=io.containerd.runc.v2\n" Feb 9 10:09:08.753965 kubelet[2018]: I0209 10:09:08.753846 2018 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 10:09:08.755095 kubelet[2018]: E0209 10:09:08.754791 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:08.755095 kubelet[2018]: E0209 10:09:08.754803 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:08.755615 env[1143]: time="2024-02-09T10:09:08.755551435Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 9 10:09:09.817606 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount422188414.mount: Deactivated successfully. Feb 9 10:09:10.703556 kubelet[2018]: E0209 10:09:10.703520 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gxc5v" podUID="62a8938c-27f7-4453-9d3b-b08056096e4f" Feb 9 10:09:12.703085 kubelet[2018]: E0209 10:09:12.703043 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gxc5v" podUID="62a8938c-27f7-4453-9d3b-b08056096e4f" Feb 9 10:09:13.728561 env[1143]: time="2024-02-09T10:09:13.728517920Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:13.730941 env[1143]: time="2024-02-09T10:09:13.730898563Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:13.732351 env[1143]: time="2024-02-09T10:09:13.732326532Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:13.733720 env[1143]: time="2024-02-09T10:09:13.733694225Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:13.734658 env[1143]: time="2024-02-09T10:09:13.734629259Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b\"" Feb 9 10:09:13.736654 env[1143]: time="2024-02-09T10:09:13.736620400Z" level=info msg="CreateContainer within sandbox \"54636fc1129d22faad3cfcb844e63e5f7dd1cce9c617094f0649036b2e04fa43\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 9 10:09:13.764199 env[1143]: time="2024-02-09T10:09:13.764150921Z" level=info msg="CreateContainer within sandbox \"54636fc1129d22faad3cfcb844e63e5f7dd1cce9c617094f0649036b2e04fa43\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"5c87b0962d906f454b2e8dd059a563331810ec5b8f3bee1b139320cdc88b347d\"" Feb 9 10:09:13.764903 env[1143]: time="2024-02-09T10:09:13.764868765Z" level=info msg="StartContainer for \"5c87b0962d906f454b2e8dd059a563331810ec5b8f3bee1b139320cdc88b347d\"" Feb 9 10:09:13.785873 systemd[1]: run-containerd-runc-k8s.io-5c87b0962d906f454b2e8dd059a563331810ec5b8f3bee1b139320cdc88b347d-runc.03ww6h.mount: Deactivated successfully. Feb 9 10:09:13.788060 systemd[1]: Started cri-containerd-5c87b0962d906f454b2e8dd059a563331810ec5b8f3bee1b139320cdc88b347d.scope. Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828439 kernel: kauditd_printk_skb: 91 callbacks suppressed Feb 9 10:09:13.828506 kernel: audit: type=1400 audit(1707473353.826:1120): avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2511 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:13.833037 kernel: audit: type=1300 audit(1707473353.826:1120): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2511 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:13.833090 kernel: audit: type=1327 audit(1707473353.826:1120): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563383762303936326439303666343534623265386464303539613536 Feb 9 10:09:13.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563383762303936326439303666343534623265386464303539613536 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.837476 kernel: audit: type=1400 audit(1707473353.826:1121): avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.837539 kernel: audit: type=1400 audit(1707473353.826:1121): avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.839386 kernel: audit: type=1400 audit(1707473353.826:1121): avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.843604 kernel: audit: type=1400 audit(1707473353.826:1121): avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.844340 kernel: audit: type=1400 audit(1707473353.826:1121): avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.847921 kernel: audit: type=1400 audit(1707473353.826:1121): avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.847991 kernel: audit: type=1400 audit(1707473353.826:1121): avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.826000 audit: BPF prog-id=142 op=LOAD Feb 9 10:09:13.826000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2511 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:13.826000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563383762303936326439303666343534623265386464303539613536 Feb 9 10:09:13.827000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.827000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.827000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.827000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.827000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.827000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.827000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.827000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.827000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.827000 audit: BPF prog-id=143 op=LOAD Feb 9 10:09:13.827000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2511 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:13.827000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563383762303936326439303666343534623265386464303539613536 Feb 9 10:09:13.828000 audit: BPF prog-id=143 op=UNLOAD Feb 9 10:09:13.828000 audit: BPF prog-id=142 op=UNLOAD Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { perfmon } for pid=2718 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit[2718]: AVC avc: denied { bpf } for pid=2718 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:13.828000 audit: BPF prog-id=144 op=LOAD Feb 9 10:09:13.828000 audit[2718]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2511 pid=2718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:13.828000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563383762303936326439303666343534623265386464303539613536 Feb 9 10:09:13.858895 env[1143]: time="2024-02-09T10:09:13.858850204Z" level=info msg="StartContainer for \"5c87b0962d906f454b2e8dd059a563331810ec5b8f3bee1b139320cdc88b347d\" returns successfully" Feb 9 10:09:14.523071 env[1143]: time="2024-02-09T10:09:14.523019576Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 10:09:14.525447 systemd[1]: cri-containerd-5c87b0962d906f454b2e8dd059a563331810ec5b8f3bee1b139320cdc88b347d.scope: Deactivated successfully. Feb 9 10:09:14.529000 audit: BPF prog-id=144 op=UNLOAD Feb 9 10:09:14.597997 env[1143]: time="2024-02-09T10:09:14.597942427Z" level=info msg="shim disconnected" id=5c87b0962d906f454b2e8dd059a563331810ec5b8f3bee1b139320cdc88b347d Feb 9 10:09:14.597997 env[1143]: time="2024-02-09T10:09:14.597990185Z" level=warning msg="cleaning up after shim disconnected" id=5c87b0962d906f454b2e8dd059a563331810ec5b8f3bee1b139320cdc88b347d namespace=k8s.io Feb 9 10:09:14.597997 env[1143]: time="2024-02-09T10:09:14.598003504Z" level=info msg="cleaning up dead shim" Feb 9 10:09:14.605940 env[1143]: time="2024-02-09T10:09:14.605398882Z" level=warning msg="cleanup warnings time=\"2024-02-09T10:09:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2765 runtime=io.containerd.runc.v2\n" Feb 9 10:09:14.617745 kubelet[2018]: I0209 10:09:14.614246 2018 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 9 10:09:14.635970 kubelet[2018]: I0209 10:09:14.635923 2018 topology_manager.go:215] "Topology Admit Handler" podUID="c74de498-1e6a-4592-8e67-ffe32553889f" podNamespace="kube-system" podName="coredns-5dd5756b68-nhqtb" Feb 9 10:09:14.640004 kubelet[2018]: I0209 10:09:14.639964 2018 topology_manager.go:215] "Topology Admit Handler" podUID="e6a2ce91-4235-42e3-af0f-1403cc454bde" podNamespace="kube-system" podName="coredns-5dd5756b68-thbrw" Feb 9 10:09:14.640164 kubelet[2018]: I0209 10:09:14.640103 2018 topology_manager.go:215] "Topology Admit Handler" podUID="d9c14693-a4c2-4706-ac8f-296dc6cd5d48" podNamespace="calico-system" podName="calico-kube-controllers-598f75589c-s54qf" Feb 9 10:09:14.642713 systemd[1]: Created slice kubepods-burstable-podc74de498_1e6a_4592_8e67_ffe32553889f.slice. Feb 9 10:09:14.648190 systemd[1]: Created slice kubepods-besteffort-podd9c14693_a4c2_4706_ac8f_296dc6cd5d48.slice. Feb 9 10:09:14.654181 systemd[1]: Created slice kubepods-burstable-pode6a2ce91_4235_42e3_af0f_1403cc454bde.slice. Feb 9 10:09:14.707222 systemd[1]: Created slice kubepods-besteffort-pod62a8938c_27f7_4453_9d3b_b08056096e4f.slice. Feb 9 10:09:14.709427 env[1143]: time="2024-02-09T10:09:14.709366509Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gxc5v,Uid:62a8938c-27f7-4453-9d3b-b08056096e4f,Namespace:calico-system,Attempt:0,}" Feb 9 10:09:14.763016 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5c87b0962d906f454b2e8dd059a563331810ec5b8f3bee1b139320cdc88b347d-rootfs.mount: Deactivated successfully. Feb 9 10:09:14.773410 kubelet[2018]: E0209 10:09:14.773290 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:14.774907 env[1143]: time="2024-02-09T10:09:14.774860917Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 9 10:09:14.796071 env[1143]: time="2024-02-09T10:09:14.795979179Z" level=error msg="Failed to destroy network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:14.797646 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f-shm.mount: Deactivated successfully. Feb 9 10:09:14.798448 env[1143]: time="2024-02-09T10:09:14.798398747Z" level=error msg="encountered an error cleaning up failed sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:14.798517 env[1143]: time="2024-02-09T10:09:14.798462904Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gxc5v,Uid:62a8938c-27f7-4453-9d3b-b08056096e4f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:14.799333 kubelet[2018]: E0209 10:09:14.799109 2018 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:14.799333 kubelet[2018]: E0209 10:09:14.799192 2018 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-gxc5v" Feb 9 10:09:14.799333 kubelet[2018]: E0209 10:09:14.799216 2018 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-gxc5v" Feb 9 10:09:14.799594 kubelet[2018]: E0209 10:09:14.799284 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-gxc5v_calico-system(62a8938c-27f7-4453-9d3b-b08056096e4f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-gxc5v_calico-system(62a8938c-27f7-4453-9d3b-b08056096e4f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-gxc5v" podUID="62a8938c-27f7-4453-9d3b-b08056096e4f" Feb 9 10:09:14.808785 kubelet[2018]: I0209 10:09:14.808713 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5crwl\" (UniqueName: \"kubernetes.io/projected/d9c14693-a4c2-4706-ac8f-296dc6cd5d48-kube-api-access-5crwl\") pod \"calico-kube-controllers-598f75589c-s54qf\" (UID: \"d9c14693-a4c2-4706-ac8f-296dc6cd5d48\") " pod="calico-system/calico-kube-controllers-598f75589c-s54qf" Feb 9 10:09:14.808900 kubelet[2018]: I0209 10:09:14.808826 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z4t8p\" (UniqueName: \"kubernetes.io/projected/c74de498-1e6a-4592-8e67-ffe32553889f-kube-api-access-z4t8p\") pod \"coredns-5dd5756b68-nhqtb\" (UID: \"c74de498-1e6a-4592-8e67-ffe32553889f\") " pod="kube-system/coredns-5dd5756b68-nhqtb" Feb 9 10:09:14.808900 kubelet[2018]: I0209 10:09:14.808883 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d9c14693-a4c2-4706-ac8f-296dc6cd5d48-tigera-ca-bundle\") pod \"calico-kube-controllers-598f75589c-s54qf\" (UID: \"d9c14693-a4c2-4706-ac8f-296dc6cd5d48\") " pod="calico-system/calico-kube-controllers-598f75589c-s54qf" Feb 9 10:09:14.808958 kubelet[2018]: I0209 10:09:14.808912 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/c74de498-1e6a-4592-8e67-ffe32553889f-config-volume\") pod \"coredns-5dd5756b68-nhqtb\" (UID: \"c74de498-1e6a-4592-8e67-ffe32553889f\") " pod="kube-system/coredns-5dd5756b68-nhqtb" Feb 9 10:09:14.809015 kubelet[2018]: I0209 10:09:14.808991 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zrpnt\" (UniqueName: \"kubernetes.io/projected/e6a2ce91-4235-42e3-af0f-1403cc454bde-kube-api-access-zrpnt\") pod \"coredns-5dd5756b68-thbrw\" (UID: \"e6a2ce91-4235-42e3-af0f-1403cc454bde\") " pod="kube-system/coredns-5dd5756b68-thbrw" Feb 9 10:09:14.809065 kubelet[2018]: I0209 10:09:14.809050 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e6a2ce91-4235-42e3-af0f-1403cc454bde-config-volume\") pod \"coredns-5dd5756b68-thbrw\" (UID: \"e6a2ce91-4235-42e3-af0f-1403cc454bde\") " pod="kube-system/coredns-5dd5756b68-thbrw" Feb 9 10:09:14.946991 kubelet[2018]: E0209 10:09:14.946692 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:14.947270 env[1143]: time="2024-02-09T10:09:14.947170099Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-nhqtb,Uid:c74de498-1e6a-4592-8e67-ffe32553889f,Namespace:kube-system,Attempt:0,}" Feb 9 10:09:14.954098 env[1143]: time="2024-02-09T10:09:14.954026102Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-598f75589c-s54qf,Uid:d9c14693-a4c2-4706-ac8f-296dc6cd5d48,Namespace:calico-system,Attempt:0,}" Feb 9 10:09:14.956342 kubelet[2018]: E0209 10:09:14.956135 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:14.956632 env[1143]: time="2024-02-09T10:09:14.956601023Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-thbrw,Uid:e6a2ce91-4235-42e3-af0f-1403cc454bde,Namespace:kube-system,Attempt:0,}" Feb 9 10:09:15.024388 env[1143]: time="2024-02-09T10:09:15.024241000Z" level=error msg="Failed to destroy network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.025156 env[1143]: time="2024-02-09T10:09:15.025060045Z" level=error msg="encountered an error cleaning up failed sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.025226 env[1143]: time="2024-02-09T10:09:15.025184679Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-nhqtb,Uid:c74de498-1e6a-4592-8e67-ffe32553889f,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.025492 kubelet[2018]: E0209 10:09:15.025462 2018 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.025602 kubelet[2018]: E0209 10:09:15.025521 2018 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-nhqtb" Feb 9 10:09:15.025602 kubelet[2018]: E0209 10:09:15.025540 2018 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-nhqtb" Feb 9 10:09:15.025602 kubelet[2018]: E0209 10:09:15.025586 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-nhqtb_kube-system(c74de498-1e6a-4592-8e67-ffe32553889f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-nhqtb_kube-system(c74de498-1e6a-4592-8e67-ffe32553889f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-nhqtb" podUID="c74de498-1e6a-4592-8e67-ffe32553889f" Feb 9 10:09:15.029424 env[1143]: time="2024-02-09T10:09:15.029381097Z" level=error msg="Failed to destroy network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.030515 env[1143]: time="2024-02-09T10:09:15.030478570Z" level=error msg="encountered an error cleaning up failed sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.030601 env[1143]: time="2024-02-09T10:09:15.030538087Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-598f75589c-s54qf,Uid:d9c14693-a4c2-4706-ac8f-296dc6cd5d48,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.030760 kubelet[2018]: E0209 10:09:15.030721 2018 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.030823 kubelet[2018]: E0209 10:09:15.030767 2018 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-598f75589c-s54qf" Feb 9 10:09:15.030823 kubelet[2018]: E0209 10:09:15.030792 2018 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-598f75589c-s54qf" Feb 9 10:09:15.030879 kubelet[2018]: E0209 10:09:15.030833 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-598f75589c-s54qf_calico-system(d9c14693-a4c2-4706-ac8f-296dc6cd5d48)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-598f75589c-s54qf_calico-system(d9c14693-a4c2-4706-ac8f-296dc6cd5d48)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-598f75589c-s54qf" podUID="d9c14693-a4c2-4706-ac8f-296dc6cd5d48" Feb 9 10:09:15.035259 env[1143]: time="2024-02-09T10:09:15.035222404Z" level=error msg="Failed to destroy network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.035658 env[1143]: time="2024-02-09T10:09:15.035605027Z" level=error msg="encountered an error cleaning up failed sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.035713 env[1143]: time="2024-02-09T10:09:15.035659785Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-thbrw,Uid:e6a2ce91-4235-42e3-af0f-1403cc454bde,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.035882 kubelet[2018]: E0209 10:09:15.035842 2018 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.035931 kubelet[2018]: E0209 10:09:15.035889 2018 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-thbrw" Feb 9 10:09:15.035931 kubelet[2018]: E0209 10:09:15.035907 2018 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-thbrw" Feb 9 10:09:15.035984 kubelet[2018]: E0209 10:09:15.035956 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-thbrw_kube-system(e6a2ce91-4235-42e3-af0f-1403cc454bde)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-thbrw_kube-system(e6a2ce91-4235-42e3-af0f-1403cc454bde)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-thbrw" podUID="e6a2ce91-4235-42e3-af0f-1403cc454bde" Feb 9 10:09:15.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.131:22-10.0.0.1:40000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:15.584687 systemd[1]: Started sshd@7-10.0.0.131:22-10.0.0.1:40000.service. Feb 9 10:09:15.632000 audit[2935]: USER_ACCT pid=2935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:15.632692 sshd[2935]: Accepted publickey for core from 10.0.0.1 port 40000 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:15.633000 audit[2935]: CRED_ACQ pid=2935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:15.633000 audit[2935]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcaef83e0 a2=3 a3=1 items=0 ppid=1 pid=2935 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:15.633000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:15.634157 sshd[2935]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:15.637432 systemd-logind[1129]: New session 8 of user core. Feb 9 10:09:15.638281 systemd[1]: Started session-8.scope. Feb 9 10:09:15.641000 audit[2935]: USER_START pid=2935 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:15.643000 audit[2937]: CRED_ACQ pid=2937 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:15.768991 sshd[2935]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:15.769000 audit[2935]: USER_END pid=2935 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:15.769000 audit[2935]: CRED_DISP pid=2935 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:15.771501 systemd[1]: sshd@7-10.0.0.131:22-10.0.0.1:40000.service: Deactivated successfully. Feb 9 10:09:15.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.131:22-10.0.0.1:40000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:15.772215 systemd[1]: session-8.scope: Deactivated successfully. Feb 9 10:09:15.772751 systemd-logind[1129]: Session 8 logged out. Waiting for processes to exit. Feb 9 10:09:15.773399 systemd-logind[1129]: Removed session 8. Feb 9 10:09:15.775742 kubelet[2018]: I0209 10:09:15.775718 2018 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:15.776352 env[1143]: time="2024-02-09T10:09:15.776297239Z" level=info msg="StopPodSandbox for \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\"" Feb 9 10:09:15.777416 kubelet[2018]: I0209 10:09:15.777394 2018 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:15.777856 env[1143]: time="2024-02-09T10:09:15.777819013Z" level=info msg="StopPodSandbox for \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\"" Feb 9 10:09:15.778765 kubelet[2018]: I0209 10:09:15.778731 2018 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:15.779135 env[1143]: time="2024-02-09T10:09:15.779107637Z" level=info msg="StopPodSandbox for \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\"" Feb 9 10:09:15.780342 kubelet[2018]: I0209 10:09:15.780039 2018 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:15.780450 env[1143]: time="2024-02-09T10:09:15.780418540Z" level=info msg="StopPodSandbox for \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\"" Feb 9 10:09:15.817454 env[1143]: time="2024-02-09T10:09:15.817396735Z" level=error msg="StopPodSandbox for \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\" failed" error="failed to destroy network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.821418 env[1143]: time="2024-02-09T10:09:15.821368163Z" level=error msg="StopPodSandbox for \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\" failed" error="failed to destroy network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.822777 env[1143]: time="2024-02-09T10:09:15.822738144Z" level=error msg="StopPodSandbox for \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\" failed" error="failed to destroy network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.826859 env[1143]: time="2024-02-09T10:09:15.826821086Z" level=error msg="StopPodSandbox for \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\" failed" error="failed to destroy network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 10:09:15.832216 kubelet[2018]: E0209 10:09:15.832182 2018 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:15.832596 kubelet[2018]: E0209 10:09:15.832268 2018 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b"} Feb 9 10:09:15.832596 kubelet[2018]: E0209 10:09:15.832305 2018 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d9c14693-a4c2-4706-ac8f-296dc6cd5d48\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 10:09:15.832596 kubelet[2018]: E0209 10:09:15.832192 2018 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:15.832596 kubelet[2018]: E0209 10:09:15.832358 2018 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:15.832596 kubelet[2018]: E0209 10:09:15.832374 2018 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42"} Feb 9 10:09:15.832791 kubelet[2018]: E0209 10:09:15.832406 2018 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c74de498-1e6a-4592-8e67-ffe32553889f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 10:09:15.832791 kubelet[2018]: E0209 10:09:15.832435 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c74de498-1e6a-4592-8e67-ffe32553889f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-nhqtb" podUID="c74de498-1e6a-4592-8e67-ffe32553889f" Feb 9 10:09:15.832791 kubelet[2018]: E0209 10:09:15.832375 2018 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f"} Feb 9 10:09:15.832791 kubelet[2018]: E0209 10:09:15.832471 2018 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"62a8938c-27f7-4453-9d3b-b08056096e4f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 10:09:15.832924 kubelet[2018]: E0209 10:09:15.832493 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"62a8938c-27f7-4453-9d3b-b08056096e4f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-gxc5v" podUID="62a8938c-27f7-4453-9d3b-b08056096e4f" Feb 9 10:09:15.832924 kubelet[2018]: E0209 10:09:15.832343 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d9c14693-a4c2-4706-ac8f-296dc6cd5d48\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-598f75589c-s54qf" podUID="d9c14693-a4c2-4706-ac8f-296dc6cd5d48" Feb 9 10:09:15.832924 kubelet[2018]: E0209 10:09:15.832194 2018 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:15.832924 kubelet[2018]: E0209 10:09:15.832516 2018 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d"} Feb 9 10:09:15.833047 kubelet[2018]: E0209 10:09:15.832540 2018 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e6a2ce91-4235-42e3-af0f-1403cc454bde\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 10:09:15.833047 kubelet[2018]: E0209 10:09:15.832562 2018 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e6a2ce91-4235-42e3-af0f-1403cc454bde\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-thbrw" podUID="e6a2ce91-4235-42e3-af0f-1403cc454bde" Feb 9 10:09:19.406834 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1628572673.mount: Deactivated successfully. Feb 9 10:09:19.735444 env[1143]: time="2024-02-09T10:09:19.735392887Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:19.737153 env[1143]: time="2024-02-09T10:09:19.737119426Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:19.738616 env[1143]: time="2024-02-09T10:09:19.738595449Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:19.739764 env[1143]: time="2024-02-09T10:09:19.739730635Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:19.740807 env[1143]: time="2024-02-09T10:09:19.740773782Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774\"" Feb 9 10:09:19.755013 env[1143]: time="2024-02-09T10:09:19.754960332Z" level=info msg="CreateContainer within sandbox \"54636fc1129d22faad3cfcb844e63e5f7dd1cce9c617094f0649036b2e04fa43\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 9 10:09:19.766870 env[1143]: time="2024-02-09T10:09:19.766825829Z" level=info msg="CreateContainer within sandbox \"54636fc1129d22faad3cfcb844e63e5f7dd1cce9c617094f0649036b2e04fa43\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"0df2da65b1fdc7620c9c1aeb01a69857225fcbc3668e4f32c7c74f61bae53aa8\"" Feb 9 10:09:19.767428 env[1143]: time="2024-02-09T10:09:19.767401622Z" level=info msg="StartContainer for \"0df2da65b1fdc7620c9c1aeb01a69857225fcbc3668e4f32c7c74f61bae53aa8\"" Feb 9 10:09:19.797928 systemd[1]: Started cri-containerd-0df2da65b1fdc7620c9c1aeb01a69857225fcbc3668e4f32c7c74f61bae53aa8.scope. Feb 9 10:09:19.921000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923882 kernel: kauditd_printk_skb: 45 callbacks suppressed Feb 9 10:09:19.923955 kernel: audit: type=1400 audit(1707473359.921:1136): avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.924046 kernel: audit: type=1300 audit(1707473359.921:1136): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2511 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:19.921000 audit[3057]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2511 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:19.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663264613635623166646337363230633963316165623031613639 Feb 9 10:09:19.929050 kernel: audit: type=1327 audit(1707473359.921:1136): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663264613635623166646337363230633963316165623031613639 Feb 9 10:09:19.929147 kernel: audit: type=1400 audit(1707473359.922:1137): avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.930835 kernel: audit: type=1400 audit(1707473359.922:1137): avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.934431 kernel: audit: type=1400 audit(1707473359.922:1137): avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.937072 kernel: audit: type=1400 audit(1707473359.922:1137): avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.937149 kernel: audit: type=1400 audit(1707473359.922:1137): avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.940553 kernel: audit: type=1400 audit(1707473359.922:1137): avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.943515 kernel: audit: type=1400 audit(1707473359.922:1137): avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.922000 audit: BPF prog-id=145 op=LOAD Feb 9 10:09:19.922000 audit[3057]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2511 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:19.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663264613635623166646337363230633963316165623031613639 Feb 9 10:09:19.923000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.923000 audit: BPF prog-id=146 op=LOAD Feb 9 10:09:19.923000 audit[3057]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2511 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:19.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663264613635623166646337363230633963316165623031613639 Feb 9 10:09:19.926000 audit: BPF prog-id=146 op=UNLOAD Feb 9 10:09:19.926000 audit: BPF prog-id=145 op=UNLOAD Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { perfmon } for pid=3057 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit[3057]: AVC avc: denied { bpf } for pid=3057 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:19.926000 audit: BPF prog-id=147 op=LOAD Feb 9 10:09:19.926000 audit[3057]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2511 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:19.926000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064663264613635623166646337363230633963316165623031613639 Feb 9 10:09:19.974698 env[1143]: time="2024-02-09T10:09:19.974645447Z" level=info msg="StartContainer for \"0df2da65b1fdc7620c9c1aeb01a69857225fcbc3668e4f32c7c74f61bae53aa8\" returns successfully" Feb 9 10:09:20.184947 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 9 10:09:20.185083 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 9 10:09:20.773742 systemd[1]: Started sshd@8-10.0.0.131:22-10.0.0.1:40002.service. Feb 9 10:09:20.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.131:22-10.0.0.1:40002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:20.796597 kubelet[2018]: E0209 10:09:20.796572 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:20.811172 kubelet[2018]: I0209 10:09:20.811126 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-rtlvq" podStartSLOduration=1.6449076329999999 podCreationTimestamp="2024-02-09 10:09:05 +0000 UTC" firstStartedPulling="2024-02-09 10:09:05.574908842 +0000 UTC m=+19.966447885" lastFinishedPulling="2024-02-09 10:09:19.741093139 +0000 UTC m=+34.132632182" observedRunningTime="2024-02-09 10:09:20.810343179 +0000 UTC m=+35.201882222" watchObservedRunningTime="2024-02-09 10:09:20.81109193 +0000 UTC m=+35.202630973" Feb 9 10:09:20.820000 audit[3117]: USER_ACCT pid=3117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:20.821141 sshd[3117]: Accepted publickey for core from 10.0.0.1 port 40002 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:20.821000 audit[3117]: CRED_ACQ pid=3117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:20.821000 audit[3117]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffffad4f50 a2=3 a3=1 items=0 ppid=1 pid=3117 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:20.821000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:20.822562 sshd[3117]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:20.826043 systemd-logind[1129]: New session 9 of user core. Feb 9 10:09:20.826889 systemd[1]: Started session-9.scope. Feb 9 10:09:20.829000 audit[3117]: USER_START pid=3117 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:20.830000 audit[3119]: CRED_ACQ pid=3119 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:20.945000 sshd[3117]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:20.945000 audit[3117]: USER_END pid=3117 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:20.946000 audit[3117]: CRED_DISP pid=3117 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:20.947946 systemd[1]: sshd@8-10.0.0.131:22-10.0.0.1:40002.service: Deactivated successfully. Feb 9 10:09:20.947000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.131:22-10.0.0.1:40002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:20.948741 systemd[1]: session-9.scope: Deactivated successfully. Feb 9 10:09:20.949320 systemd-logind[1129]: Session 9 logged out. Waiting for processes to exit. Feb 9 10:09:20.950097 systemd-logind[1129]: Removed session 9. Feb 9 10:09:21.501000 audit[3193]: AVC avc: denied { write } for pid=3193 comm="tee" name="fd" dev="proc" ino=19489 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 10:09:21.501000 audit[3193]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc0de498f a2=241 a3=1b6 items=1 ppid=3143 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:21.501000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 9 10:09:21.501000 audit: PATH item=0 name="/dev/fd/63" inode=17271 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 10:09:21.501000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 10:09:21.513000 audit[3199]: AVC avc: denied { write } for pid=3199 comm="tee" name="fd" dev="proc" ino=19498 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 10:09:21.513000 audit[3199]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffeb2c897f a2=241 a3=1b6 items=1 ppid=3139 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:21.513000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 9 10:09:21.513000 audit: PATH item=0 name="/dev/fd/63" inode=19491 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 10:09:21.513000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 10:09:21.517000 audit[3201]: AVC avc: denied { write } for pid=3201 comm="tee" name="fd" dev="proc" ino=18352 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 10:09:21.517000 audit[3201]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffa83a990 a2=241 a3=1b6 items=1 ppid=3138 pid=3201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:21.517000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 9 10:09:21.517000 audit: PATH item=0 name="/dev/fd/63" inode=18346 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 10:09:21.517000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 10:09:21.520000 audit[3197]: AVC avc: denied { write } for pid=3197 comm="tee" name="fd" dev="proc" ino=19502 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 10:09:21.520000 audit[3197]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe0aa998f a2=241 a3=1b6 items=1 ppid=3140 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:21.520000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 9 10:09:21.520000 audit: PATH item=0 name="/dev/fd/63" inode=18811 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 10:09:21.520000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 10:09:21.522000 audit[3204]: AVC avc: denied { write } for pid=3204 comm="tee" name="fd" dev="proc" ino=18357 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 10:09:21.522000 audit[3204]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc08c298f a2=241 a3=1b6 items=1 ppid=3148 pid=3204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:21.522000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 9 10:09:21.522000 audit: PATH item=0 name="/dev/fd/63" inode=18347 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 10:09:21.522000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 10:09:21.528000 audit[3209]: AVC avc: denied { write } for pid=3209 comm="tee" name="fd" dev="proc" ino=19512 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 10:09:21.528000 audit[3209]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffc92b991 a2=241 a3=1b6 items=1 ppid=3151 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:21.528000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 9 10:09:21.528000 audit: PATH item=0 name="/dev/fd/63" inode=18354 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 10:09:21.528000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 10:09:21.537000 audit[3212]: AVC avc: denied { write } for pid=3212 comm="tee" name="fd" dev="proc" ino=18829 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 10:09:21.537000 audit[3212]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc7e3d980 a2=241 a3=1b6 items=1 ppid=3146 pid=3212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:21.537000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 9 10:09:21.537000 audit: PATH item=0 name="/dev/fd/63" inode=17272 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 10:09:21.537000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 10:09:21.797438 kubelet[2018]: I0209 10:09:21.797341 2018 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 10:09:21.798892 kubelet[2018]: E0209 10:09:21.798147 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:24.212959 kubelet[2018]: I0209 10:09:24.212920 2018 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 10:09:24.213785 kubelet[2018]: E0209 10:09:24.213762 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:24.228669 systemd[1]: run-containerd-runc-k8s.io-0df2da65b1fdc7620c9c1aeb01a69857225fcbc3668e4f32c7c74f61bae53aa8-runc.RgxRue.mount: Deactivated successfully. Feb 9 10:09:25.948610 systemd[1]: Started sshd@9-10.0.0.131:22-10.0.0.1:37908.service. Feb 9 10:09:25.949588 kernel: kauditd_printk_skb: 79 callbacks suppressed Feb 9 10:09:25.949629 kernel: audit: type=1130 audit(1707473365.948:1158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.131:22-10.0.0.1:37908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:25.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.131:22-10.0.0.1:37908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:26.000000 audit[3374]: USER_ACCT pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.001224 sshd[3374]: Accepted publickey for core from 10.0.0.1 port 37908 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:26.002000 audit[3374]: CRED_ACQ pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.003966 sshd[3374]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:26.006020 kernel: audit: type=1101 audit(1707473366.000:1159): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.006096 kernel: audit: type=1103 audit(1707473366.002:1160): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.007804 kernel: audit: type=1006 audit(1707473366.002:1161): pid=3374 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Feb 9 10:09:26.002000 audit[3374]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda64d8c0 a2=3 a3=1 items=0 ppid=1 pid=3374 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:26.010661 kernel: audit: type=1300 audit(1707473366.002:1161): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffda64d8c0 a2=3 a3=1 items=0 ppid=1 pid=3374 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:26.010729 kernel: audit: type=1327 audit(1707473366.002:1161): proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:26.002000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:26.013846 systemd-logind[1129]: New session 10 of user core. Feb 9 10:09:26.014228 systemd[1]: Started session-10.scope. Feb 9 10:09:26.018000 audit[3374]: USER_START pid=3374 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.019000 audit[3376]: CRED_ACQ pid=3376 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.023207 kernel: audit: type=1105 audit(1707473366.018:1162): pid=3374 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.023268 kernel: audit: type=1103 audit(1707473366.019:1163): pid=3376 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.133522 sshd[3374]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:26.134000 audit[3374]: USER_END pid=3374 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.136097 systemd[1]: sshd@9-10.0.0.131:22-10.0.0.1:37908.service: Deactivated successfully. Feb 9 10:09:26.136722 systemd[1]: session-10.scope: Deactivated successfully. Feb 9 10:09:26.134000 audit[3374]: CRED_DISP pid=3374 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.137351 systemd-logind[1129]: Session 10 logged out. Waiting for processes to exit. Feb 9 10:09:26.138601 systemd[1]: Started sshd@10-10.0.0.131:22-10.0.0.1:37916.service. Feb 9 10:09:26.139360 kernel: audit: type=1106 audit(1707473366.134:1164): pid=3374 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.139434 kernel: audit: type=1104 audit(1707473366.134:1165): pid=3374 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.134000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.131:22-10.0.0.1:37908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:26.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.131:22-10.0.0.1:37916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:26.139364 systemd-logind[1129]: Removed session 10. Feb 9 10:09:26.181000 audit[3389]: USER_ACCT pid=3389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.181934 sshd[3389]: Accepted publickey for core from 10.0.0.1 port 37916 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:26.182000 audit[3389]: CRED_ACQ pid=3389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.182000 audit[3389]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe11a7310 a2=3 a3=1 items=0 ppid=1 pid=3389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:26.182000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:26.183395 sshd[3389]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:26.187303 systemd-logind[1129]: New session 11 of user core. Feb 9 10:09:26.187402 systemd[1]: Started session-11.scope. Feb 9 10:09:26.191000 audit[3389]: USER_START pid=3389 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.192000 audit[3391]: CRED_ACQ pid=3391 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.440894 sshd[3389]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:26.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.131:22-10.0.0.1:37918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:26.444879 systemd[1]: Started sshd@11-10.0.0.131:22-10.0.0.1:37918.service. Feb 9 10:09:26.452000 audit[3389]: USER_END pid=3389 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.452000 audit[3389]: CRED_DISP pid=3389 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.469413 systemd[1]: sshd@10-10.0.0.131:22-10.0.0.1:37916.service: Deactivated successfully. Feb 9 10:09:26.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.131:22-10.0.0.1:37916 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:26.470246 systemd[1]: session-11.scope: Deactivated successfully. Feb 9 10:09:26.470973 systemd-logind[1129]: Session 11 logged out. Waiting for processes to exit. Feb 9 10:09:26.471971 systemd-logind[1129]: Removed session 11. Feb 9 10:09:26.494000 audit[3400]: USER_ACCT pid=3400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.495478 sshd[3400]: Accepted publickey for core from 10.0.0.1 port 37918 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:26.496000 audit[3400]: CRED_ACQ pid=3400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.496000 audit[3400]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff5077590 a2=3 a3=1 items=0 ppid=1 pid=3400 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:26.496000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:26.496748 sshd[3400]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:26.500177 systemd-logind[1129]: New session 12 of user core. Feb 9 10:09:26.501123 systemd[1]: Started session-12.scope. Feb 9 10:09:26.505000 audit[3400]: USER_START pid=3400 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.506000 audit[3403]: CRED_ACQ pid=3403 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.622046 sshd[3400]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:26.622000 audit[3400]: USER_END pid=3400 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.622000 audit[3400]: CRED_DISP pid=3400 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:26.624558 systemd-logind[1129]: Session 12 logged out. Waiting for processes to exit. Feb 9 10:09:26.624721 systemd[1]: session-12.scope: Deactivated successfully. Feb 9 10:09:26.625676 systemd-logind[1129]: Removed session 12. Feb 9 10:09:26.625902 systemd[1]: sshd@11-10.0.0.131:22-10.0.0.1:37918.service: Deactivated successfully. Feb 9 10:09:26.625000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.131:22-10.0.0.1:37918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:26.703964 env[1143]: time="2024-02-09T10:09:26.703849057Z" level=info msg="StopPodSandbox for \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\"" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.770 [INFO][3433] k8s.go 578: Cleaning up netns ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.771 [INFO][3433] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" iface="eth0" netns="/var/run/netns/cni-195acf19-12f6-53d1-d7b2-5fe65d3463f9" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.771 [INFO][3433] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" iface="eth0" netns="/var/run/netns/cni-195acf19-12f6-53d1-d7b2-5fe65d3463f9" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.772 [INFO][3433] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" iface="eth0" netns="/var/run/netns/cni-195acf19-12f6-53d1-d7b2-5fe65d3463f9" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.772 [INFO][3433] k8s.go 585: Releasing IP address(es) ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.772 [INFO][3433] utils.go 188: Calico CNI releasing IP address ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.870 [INFO][3449] ipam_plugin.go 415: Releasing address using handleID ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" HandleID="k8s-pod-network.e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.871 [INFO][3449] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.871 [INFO][3449] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.882 [WARNING][3449] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" HandleID="k8s-pod-network.e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.882 [INFO][3449] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" HandleID="k8s-pod-network.e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.884 [INFO][3449] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:26.887240 env[1143]: 2024-02-09 10:09:26.885 [INFO][3433] k8s.go 591: Teardown processing complete. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:26.887737 env[1143]: time="2024-02-09T10:09:26.887382160Z" level=info msg="TearDown network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\" successfully" Feb 9 10:09:26.887737 env[1143]: time="2024-02-09T10:09:26.887420279Z" level=info msg="StopPodSandbox for \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\" returns successfully" Feb 9 10:09:26.887787 kubelet[2018]: E0209 10:09:26.887719 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:26.889468 env[1143]: time="2024-02-09T10:09:26.888371510Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-nhqtb,Uid:c74de498-1e6a-4592-8e67-ffe32553889f,Namespace:kube-system,Attempt:1,}" Feb 9 10:09:26.889007 systemd[1]: run-netns-cni\x2d195acf19\x2d12f6\x2d53d1\x2dd7b2\x2d5fe65d3463f9.mount: Deactivated successfully. Feb 9 10:09:27.026352 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 10:09:27.026764 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4b289c23bb7: link becomes ready Feb 9 10:09:27.025078 systemd-networkd[1036]: cali4b289c23bb7: Link UP Feb 9 10:09:27.026326 systemd-networkd[1036]: cali4b289c23bb7: Gained carrier Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.930 [INFO][3474] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.943 [INFO][3474] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5dd5756b68--nhqtb-eth0 coredns-5dd5756b68- kube-system c74de498-1e6a-4592-8e67-ffe32553889f 767 0 2024-02-09 10:09:00 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5dd5756b68-nhqtb eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4b289c23bb7 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Namespace="kube-system" Pod="coredns-5dd5756b68-nhqtb" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--nhqtb-" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.943 [INFO][3474] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Namespace="kube-system" Pod="coredns-5dd5756b68-nhqtb" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.969 [INFO][3488] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" HandleID="k8s-pod-network.4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.982 [INFO][3488] ipam_plugin.go 268: Auto assigning IP ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" HandleID="k8s-pod-network.4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000243890), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5dd5756b68-nhqtb", "timestamp":"2024-02-09 10:09:26.969644905 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.982 [INFO][3488] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.982 [INFO][3488] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.982 [INFO][3488] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.984 [INFO][3488] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" host="localhost" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.991 [INFO][3488] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:26.995 [INFO][3488] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:27.003 [INFO][3488] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:27.005 [INFO][3488] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:27.005 [INFO][3488] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" host="localhost" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:27.007 [INFO][3488] ipam.go 1682: Creating new handle: k8s-pod-network.4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:27.010 [INFO][3488] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" host="localhost" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:27.015 [INFO][3488] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" host="localhost" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:27.015 [INFO][3488] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" host="localhost" Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:27.015 [INFO][3488] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:27.040410 env[1143]: 2024-02-09 10:09:27.015 [INFO][3488] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" HandleID="k8s-pod-network.4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:27.041026 env[1143]: 2024-02-09 10:09:27.017 [INFO][3474] k8s.go 385: Populated endpoint ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Namespace="kube-system" Pod="coredns-5dd5756b68-nhqtb" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--nhqtb-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"c74de498-1e6a-4592-8e67-ffe32553889f", ResourceVersion:"767", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5dd5756b68-nhqtb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b289c23bb7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:27.041026 env[1143]: 2024-02-09 10:09:27.017 [INFO][3474] k8s.go 386: Calico CNI using IPs: [192.168.88.129/32] ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Namespace="kube-system" Pod="coredns-5dd5756b68-nhqtb" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:27.041026 env[1143]: 2024-02-09 10:09:27.017 [INFO][3474] dataplane_linux.go 68: Setting the host side veth name to cali4b289c23bb7 ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Namespace="kube-system" Pod="coredns-5dd5756b68-nhqtb" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:27.041026 env[1143]: 2024-02-09 10:09:27.027 [INFO][3474] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Namespace="kube-system" Pod="coredns-5dd5756b68-nhqtb" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:27.041026 env[1143]: 2024-02-09 10:09:27.027 [INFO][3474] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Namespace="kube-system" Pod="coredns-5dd5756b68-nhqtb" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--nhqtb-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"c74de498-1e6a-4592-8e67-ffe32553889f", ResourceVersion:"767", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d", Pod:"coredns-5dd5756b68-nhqtb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b289c23bb7", MAC:"4a:8d:55:49:fd:78", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:27.041026 env[1143]: 2024-02-09 10:09:27.038 [INFO][3474] k8s.go 491: Wrote updated endpoint to datastore ContainerID="4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d" Namespace="kube-system" Pod="coredns-5dd5756b68-nhqtb" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:27.055160 env[1143]: time="2024-02-09T10:09:27.055076033Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:09:27.055160 env[1143]: time="2024-02-09T10:09:27.055133233Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:09:27.055160 env[1143]: time="2024-02-09T10:09:27.055144953Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:09:27.055583 env[1143]: time="2024-02-09T10:09:27.055514029Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d pid=3519 runtime=io.containerd.runc.v2 Feb 9 10:09:27.070353 systemd[1]: Started cri-containerd-4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d.scope. Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.095000 audit: BPF prog-id=148 op=LOAD Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3519 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336337333234363962363937626236306538376465343238316636 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3519 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336337333234363962363937626236306538376465343238316636 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit: BPF prog-id=149 op=LOAD Feb 9 10:09:27.096000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3519 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336337333234363962363937626236306538376465343238316636 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit: BPF prog-id=150 op=LOAD Feb 9 10:09:27.096000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3519 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336337333234363962363937626236306538376465343238316636 Feb 9 10:09:27.096000 audit: BPF prog-id=150 op=UNLOAD Feb 9 10:09:27.096000 audit: BPF prog-id=149 op=UNLOAD Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.096000 audit: BPF prog-id=151 op=LOAD Feb 9 10:09:27.096000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3519 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3462336337333234363962363937626236306538376465343238316636 Feb 9 10:09:27.097635 systemd-resolved[1088]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 10:09:27.114328 env[1143]: time="2024-02-09T10:09:27.114271063Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-nhqtb,Uid:c74de498-1e6a-4592-8e67-ffe32553889f,Namespace:kube-system,Attempt:1,} returns sandbox id \"4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d\"" Feb 9 10:09:27.115068 kubelet[2018]: E0209 10:09:27.115034 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:27.119319 env[1143]: time="2024-02-09T10:09:27.119260215Z" level=info msg="CreateContainer within sandbox \"4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 10:09:27.128558 env[1143]: time="2024-02-09T10:09:27.128507366Z" level=info msg="CreateContainer within sandbox \"4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"023d2671939415b9e2a37f6ffc798cf119b1a9ef7ae06aa78ceccd72a994e0e1\"" Feb 9 10:09:27.130592 env[1143]: time="2024-02-09T10:09:27.130555546Z" level=info msg="StartContainer for \"023d2671939415b9e2a37f6ffc798cf119b1a9ef7ae06aa78ceccd72a994e0e1\"" Feb 9 10:09:27.144972 systemd[1]: Started cri-containerd-023d2671939415b9e2a37f6ffc798cf119b1a9ef7ae06aa78ceccd72a994e0e1.scope. Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit: BPF prog-id=152 op=LOAD Feb 9 10:09:27.164000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.164000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3519 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.164000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032336432363731393339343135623965326133376636666663373938 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3519 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032336432363731393339343135623965326133376636666663373938 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit: BPF prog-id=153 op=LOAD Feb 9 10:09:27.165000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3519 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032336432363731393339343135623965326133376636666663373938 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.165000 audit: BPF prog-id=154 op=LOAD Feb 9 10:09:27.165000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3519 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032336432363731393339343135623965326133376636666663373938 Feb 9 10:09:27.166000 audit: BPF prog-id=154 op=UNLOAD Feb 9 10:09:27.166000 audit: BPF prog-id=153 op=UNLOAD Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:27.166000 audit: BPF prog-id=155 op=LOAD Feb 9 10:09:27.166000 audit[3561]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3519 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032336432363731393339343135623965326133376636666663373938 Feb 9 10:09:27.182451 env[1143]: time="2024-02-09T10:09:27.182402806Z" level=info msg="StartContainer for \"023d2671939415b9e2a37f6ffc798cf119b1a9ef7ae06aa78ceccd72a994e0e1\" returns successfully" Feb 9 10:09:27.813017 kubelet[2018]: E0209 10:09:27.812989 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:27.822356 kubelet[2018]: I0209 10:09:27.822320 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-nhqtb" podStartSLOduration=27.8222748 podCreationTimestamp="2024-02-09 10:09:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 10:09:27.82119721 +0000 UTC m=+42.212736253" watchObservedRunningTime="2024-02-09 10:09:27.8222748 +0000 UTC m=+42.213813843" Feb 9 10:09:27.847000 audit[3609]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=3609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:27.847000 audit[3609]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffe1d5ccd0 a2=0 a3=ffff87aa76c0 items=0 ppid=2180 pid=3609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.847000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:27.848000 audit[3609]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3609 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:27.848000 audit[3609]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffe1d5ccd0 a2=0 a3=ffff87aa76c0 items=0 ppid=2180 pid=3609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:27.848000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:27.889843 systemd[1]: run-containerd-runc-k8s.io-4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d-runc.6Zettr.mount: Deactivated successfully. Feb 9 10:09:28.217474 systemd-networkd[1036]: cali4b289c23bb7: Gained IPv6LL Feb 9 10:09:28.703886 env[1143]: time="2024-02-09T10:09:28.703834767Z" level=info msg="StopPodSandbox for \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\"" Feb 9 10:09:28.704427 env[1143]: time="2024-02-09T10:09:28.704397682Z" level=info msg="StopPodSandbox for \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\"" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.753 [INFO][3652] k8s.go 578: Cleaning up netns ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.754 [INFO][3652] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" iface="eth0" netns="/var/run/netns/cni-e226e4f7-c67e-2bb4-565f-75032c8685b1" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.754 [INFO][3652] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" iface="eth0" netns="/var/run/netns/cni-e226e4f7-c67e-2bb4-565f-75032c8685b1" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.754 [INFO][3652] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" iface="eth0" netns="/var/run/netns/cni-e226e4f7-c67e-2bb4-565f-75032c8685b1" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.754 [INFO][3652] k8s.go 585: Releasing IP address(es) ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.754 [INFO][3652] utils.go 188: Calico CNI releasing IP address ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.774 [INFO][3672] ipam_plugin.go 415: Releasing address using handleID ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" HandleID="k8s-pod-network.8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.775 [INFO][3672] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.775 [INFO][3672] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.785 [WARNING][3672] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" HandleID="k8s-pod-network.8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.785 [INFO][3672] ipam_plugin.go 443: Releasing address using workloadID ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" HandleID="k8s-pod-network.8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.786 [INFO][3672] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:28.792406 env[1143]: 2024-02-09 10:09:28.788 [INFO][3652] k8s.go 591: Teardown processing complete. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:28.794259 systemd[1]: run-netns-cni\x2de226e4f7\x2dc67e\x2d2bb4\x2d565f\x2d75032c8685b1.mount: Deactivated successfully. Feb 9 10:09:28.795266 env[1143]: time="2024-02-09T10:09:28.795213830Z" level=info msg="TearDown network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\" successfully" Feb 9 10:09:28.795266 env[1143]: time="2024-02-09T10:09:28.795263190Z" level=info msg="StopPodSandbox for \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\" returns successfully" Feb 9 10:09:28.795627 kubelet[2018]: E0209 10:09:28.795606 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:28.796100 env[1143]: time="2024-02-09T10:09:28.796071062Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-thbrw,Uid:e6a2ce91-4235-42e3-af0f-1403cc454bde,Namespace:kube-system,Attempt:1,}" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.755 [INFO][3657] k8s.go 578: Cleaning up netns ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.755 [INFO][3657] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" iface="eth0" netns="/var/run/netns/cni-5b11210b-1d98-d60c-c922-752eec90e0ca" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.755 [INFO][3657] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" iface="eth0" netns="/var/run/netns/cni-5b11210b-1d98-d60c-c922-752eec90e0ca" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.755 [INFO][3657] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" iface="eth0" netns="/var/run/netns/cni-5b11210b-1d98-d60c-c922-752eec90e0ca" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.755 [INFO][3657] k8s.go 585: Releasing IP address(es) ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.755 [INFO][3657] utils.go 188: Calico CNI releasing IP address ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.779 [INFO][3676] ipam_plugin.go 415: Releasing address using handleID ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" HandleID="k8s-pod-network.e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.779 [INFO][3676] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.786 [INFO][3676] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.799 [WARNING][3676] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" HandleID="k8s-pod-network.e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.799 [INFO][3676] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" HandleID="k8s-pod-network.e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.802 [INFO][3676] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:28.813192 env[1143]: 2024-02-09 10:09:28.810 [INFO][3657] k8s.go 591: Teardown processing complete. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:28.813725 env[1143]: time="2024-02-09T10:09:28.813328380Z" level=info msg="TearDown network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\" successfully" Feb 9 10:09:28.813725 env[1143]: time="2024-02-09T10:09:28.813357540Z" level=info msg="StopPodSandbox for \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\" returns successfully" Feb 9 10:09:28.814874 systemd[1]: run-netns-cni\x2d5b11210b\x2d1d98\x2dd60c\x2dc922\x2d752eec90e0ca.mount: Deactivated successfully. Feb 9 10:09:28.815657 env[1143]: time="2024-02-09T10:09:28.815627639Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-598f75589c-s54qf,Uid:d9c14693-a4c2-4706-ac8f-296dc6cd5d48,Namespace:calico-system,Attempt:1,}" Feb 9 10:09:28.817278 kubelet[2018]: E0209 10:09:28.817252 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:28.847000 audit[3721]: NETFILTER_CFG table=filter:97 family=2 entries=13 op=nft_register_rule pid=3721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:28.847000 audit[3721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffda8325e0 a2=0 a3=ffff924f96c0 items=0 ppid=2180 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:28.847000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:28.849000 audit[3721]: NETFILTER_CFG table=nat:98 family=2 entries=33 op=nft_register_chain pid=3721 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:28.849000 audit[3721]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13060 a0=3 a1=ffffda8325e0 a2=0 a3=ffff924f96c0 items=0 ppid=2180 pid=3721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:28.849000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:28.961406 systemd-networkd[1036]: cali4e08cfc2fb1: Link UP Feb 9 10:09:28.963454 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 10:09:28.963542 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4e08cfc2fb1: link becomes ready Feb 9 10:09:28.963569 systemd-networkd[1036]: cali4e08cfc2fb1: Gained carrier Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.841 [INFO][3691] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.871 [INFO][3691] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5dd5756b68--thbrw-eth0 coredns-5dd5756b68- kube-system e6a2ce91-4235-42e3-af0f-1403cc454bde 792 0 2024-02-09 10:09:00 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5dd5756b68-thbrw eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4e08cfc2fb1 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Namespace="kube-system" Pod="coredns-5dd5756b68-thbrw" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--thbrw-" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.871 [INFO][3691] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Namespace="kube-system" Pod="coredns-5dd5756b68-thbrw" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.915 [INFO][3725] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" HandleID="k8s-pod-network.bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.929 [INFO][3725] ipam_plugin.go 268: Auto assigning IP ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" HandleID="k8s-pod-network.bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400059f650), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5dd5756b68-thbrw", "timestamp":"2024-02-09 10:09:28.915516942 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.929 [INFO][3725] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.929 [INFO][3725] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.929 [INFO][3725] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.932 [INFO][3725] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" host="localhost" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.936 [INFO][3725] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.940 [INFO][3725] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.943 [INFO][3725] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.946 [INFO][3725] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.946 [INFO][3725] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" host="localhost" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.948 [INFO][3725] ipam.go 1682: Creating new handle: k8s-pod-network.bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.952 [INFO][3725] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" host="localhost" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.957 [INFO][3725] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" host="localhost" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.957 [INFO][3725] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" host="localhost" Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.957 [INFO][3725] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:28.976298 env[1143]: 2024-02-09 10:09:28.957 [INFO][3725] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" HandleID="k8s-pod-network.bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:28.976943 env[1143]: 2024-02-09 10:09:28.959 [INFO][3691] k8s.go 385: Populated endpoint ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Namespace="kube-system" Pod="coredns-5dd5756b68-thbrw" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--thbrw-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"e6a2ce91-4235-42e3-af0f-1403cc454bde", ResourceVersion:"792", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5dd5756b68-thbrw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4e08cfc2fb1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:28.976943 env[1143]: 2024-02-09 10:09:28.959 [INFO][3691] k8s.go 386: Calico CNI using IPs: [192.168.88.130/32] ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Namespace="kube-system" Pod="coredns-5dd5756b68-thbrw" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:28.976943 env[1143]: 2024-02-09 10:09:28.959 [INFO][3691] dataplane_linux.go 68: Setting the host side veth name to cali4e08cfc2fb1 ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Namespace="kube-system" Pod="coredns-5dd5756b68-thbrw" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:28.976943 env[1143]: 2024-02-09 10:09:28.963 [INFO][3691] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Namespace="kube-system" Pod="coredns-5dd5756b68-thbrw" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:28.976943 env[1143]: 2024-02-09 10:09:28.964 [INFO][3691] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Namespace="kube-system" Pod="coredns-5dd5756b68-thbrw" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--thbrw-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"e6a2ce91-4235-42e3-af0f-1403cc454bde", ResourceVersion:"792", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be", Pod:"coredns-5dd5756b68-thbrw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4e08cfc2fb1", MAC:"9e:6c:a4:be:65:b5", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:28.976943 env[1143]: 2024-02-09 10:09:28.973 [INFO][3691] k8s.go 491: Wrote updated endpoint to datastore ContainerID="bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be" Namespace="kube-system" Pod="coredns-5dd5756b68-thbrw" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:29.002389 systemd-networkd[1036]: cali1fde1441d9c: Link UP Feb 9 10:09:29.004405 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1fde1441d9c: link becomes ready Feb 9 10:09:29.005581 systemd-networkd[1036]: cali1fde1441d9c: Gained carrier Feb 9 10:09:29.012976 env[1143]: time="2024-02-09T10:09:29.012798913Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:09:29.012976 env[1143]: time="2024-02-09T10:09:29.012840953Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:09:29.012976 env[1143]: time="2024-02-09T10:09:29.012851193Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:09:29.013425 env[1143]: time="2024-02-09T10:09:29.013347508Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be pid=3778 runtime=io.containerd.runc.v2 Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.869 [INFO][3705] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.883 [INFO][3705] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0 calico-kube-controllers-598f75589c- calico-system d9c14693-a4c2-4706-ac8f-296dc6cd5d48 793 0 2024-02-09 10:09:05 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:598f75589c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-598f75589c-s54qf eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali1fde1441d9c [] []}} ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Namespace="calico-system" Pod="calico-kube-controllers-598f75589c-s54qf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.884 [INFO][3705] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Namespace="calico-system" Pod="calico-kube-controllers-598f75589c-s54qf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.914 [INFO][3731] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" HandleID="k8s-pod-network.b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.932 [INFO][3731] ipam_plugin.go 268: Auto assigning IP ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" HandleID="k8s-pod-network.b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c0c0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-598f75589c-s54qf", "timestamp":"2024-02-09 10:09:28.914193835 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.932 [INFO][3731] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.959 [INFO][3731] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.959 [INFO][3731] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.963 [INFO][3731] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" host="localhost" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.970 [INFO][3731] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.975 [INFO][3731] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.977 [INFO][3731] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.980 [INFO][3731] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.980 [INFO][3731] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" host="localhost" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.987 [INFO][3731] ipam.go 1682: Creating new handle: k8s-pod-network.b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80 Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.990 [INFO][3731] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" host="localhost" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.998 [INFO][3731] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" host="localhost" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.998 [INFO][3731] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" host="localhost" Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.998 [INFO][3731] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:29.021729 env[1143]: 2024-02-09 10:09:28.998 [INFO][3731] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" HandleID="k8s-pod-network.b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:29.022288 env[1143]: 2024-02-09 10:09:29.000 [INFO][3705] k8s.go 385: Populated endpoint ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Namespace="calico-system" Pod="calico-kube-controllers-598f75589c-s54qf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0", GenerateName:"calico-kube-controllers-598f75589c-", Namespace:"calico-system", SelfLink:"", UID:"d9c14693-a4c2-4706-ac8f-296dc6cd5d48", ResourceVersion:"793", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"598f75589c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-598f75589c-s54qf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1fde1441d9c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:29.022288 env[1143]: 2024-02-09 10:09:29.001 [INFO][3705] k8s.go 386: Calico CNI using IPs: [192.168.88.131/32] ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Namespace="calico-system" Pod="calico-kube-controllers-598f75589c-s54qf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:29.022288 env[1143]: 2024-02-09 10:09:29.001 [INFO][3705] dataplane_linux.go 68: Setting the host side veth name to cali1fde1441d9c ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Namespace="calico-system" Pod="calico-kube-controllers-598f75589c-s54qf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:29.022288 env[1143]: 2024-02-09 10:09:29.003 [INFO][3705] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Namespace="calico-system" Pod="calico-kube-controllers-598f75589c-s54qf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:29.022288 env[1143]: 2024-02-09 10:09:29.004 [INFO][3705] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Namespace="calico-system" Pod="calico-kube-controllers-598f75589c-s54qf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0", GenerateName:"calico-kube-controllers-598f75589c-", Namespace:"calico-system", SelfLink:"", UID:"d9c14693-a4c2-4706-ac8f-296dc6cd5d48", ResourceVersion:"793", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"598f75589c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80", Pod:"calico-kube-controllers-598f75589c-s54qf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1fde1441d9c", MAC:"96:92:02:1a:26:3b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:29.022288 env[1143]: 2024-02-09 10:09:29.015 [INFO][3705] k8s.go 491: Wrote updated endpoint to datastore ContainerID="b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80" Namespace="calico-system" Pod="calico-kube-controllers-598f75589c-s54qf" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:29.040421 systemd[1]: run-containerd-runc-k8s.io-bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be-runc.E29zwf.mount: Deactivated successfully. Feb 9 10:09:29.044530 systemd[1]: Started cri-containerd-bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be.scope. Feb 9 10:09:29.047805 env[1143]: time="2024-02-09T10:09:29.047726514Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:09:29.047805 env[1143]: time="2024-02-09T10:09:29.047772394Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:09:29.047805 env[1143]: time="2024-02-09T10:09:29.047782394Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:09:29.048202 env[1143]: time="2024-02-09T10:09:29.048153190Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80 pid=3813 runtime=io.containerd.runc.v2 Feb 9 10:09:29.061865 systemd[1]: Started cri-containerd-b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80.scope. Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.099000 audit: BPF prog-id=156 op=LOAD Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3778 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266376264383233383033353166623434663966323035653738623439 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3778 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266376264383233383033353166623434663966323035653738623439 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit: BPF prog-id=157 op=LOAD Feb 9 10:09:29.100000 audit[3787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3778 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266376264383233383033353166623434663966323035653738623439 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit: BPF prog-id=158 op=LOAD Feb 9 10:09:29.100000 audit[3787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3778 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266376264383233383033353166623434663966323035653738623439 Feb 9 10:09:29.100000 audit: BPF prog-id=158 op=UNLOAD Feb 9 10:09:29.100000 audit: BPF prog-id=157 op=UNLOAD Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.100000 audit: BPF prog-id=159 op=LOAD Feb 9 10:09:29.100000 audit[3787]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3778 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.100000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266376264383233383033353166623434663966323035653738623439 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.101000 audit: BPF prog-id=160 op=LOAD Feb 9 10:09:29.101427 systemd-resolved[1088]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230373236366163376133623138656538643239313237636337613438 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230373236366163376133623138656538643239313237636337613438 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.103000 audit: BPF prog-id=161 op=LOAD Feb 9 10:09:29.103000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.103000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230373236366163376133623138656538643239313237636337613438 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit: BPF prog-id=162 op=LOAD Feb 9 10:09:29.104000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230373236366163376133623138656538643239313237636337613438 Feb 9 10:09:29.104000 audit: BPF prog-id=162 op=UNLOAD Feb 9 10:09:29.104000 audit: BPF prog-id=161 op=UNLOAD Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { perfmon } for pid=3823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit[3823]: AVC avc: denied { bpf } for pid=3823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.104000 audit: BPF prog-id=163 op=LOAD Feb 9 10:09:29.104000 audit[3823]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3813 pid=3823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.104000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230373236366163376133623138656538643239313237636337613438 Feb 9 10:09:29.106149 systemd-resolved[1088]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 10:09:29.126961 env[1143]: time="2024-02-09T10:09:29.126891152Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-thbrw,Uid:e6a2ce91-4235-42e3-af0f-1403cc454bde,Namespace:kube-system,Attempt:1,} returns sandbox id \"bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be\"" Feb 9 10:09:29.129860 kubelet[2018]: E0209 10:09:29.128498 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:29.133232 env[1143]: time="2024-02-09T10:09:29.133198734Z" level=info msg="CreateContainer within sandbox \"bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 10:09:29.133500 env[1143]: time="2024-02-09T10:09:29.133470972Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-598f75589c-s54qf,Uid:d9c14693-a4c2-4706-ac8f-296dc6cd5d48,Namespace:calico-system,Attempt:1,} returns sandbox id \"b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80\"" Feb 9 10:09:29.135938 env[1143]: time="2024-02-09T10:09:29.135824070Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 9 10:09:29.140167 kubelet[2018]: I0209 10:09:29.140143 2018 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 10:09:29.140830 kubelet[2018]: E0209 10:09:29.140813 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:29.152917 env[1143]: time="2024-02-09T10:09:29.152847275Z" level=info msg="CreateContainer within sandbox \"bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"81090b41de59a635037d173dfb543edc096d3a57978b73cba1097e30973c11cb\"" Feb 9 10:09:29.153586 env[1143]: time="2024-02-09T10:09:29.153551908Z" level=info msg="StartContainer for \"81090b41de59a635037d173dfb543edc096d3a57978b73cba1097e30973c11cb\"" Feb 9 10:09:29.164000 audit[3863]: NETFILTER_CFG table=filter:99 family=2 entries=9 op=nft_register_rule pid=3863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:29.164000 audit[3863]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffea7fcb30 a2=0 a3=ffff9f6c26c0 items=0 ppid=2180 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.164000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:29.167000 audit[3863]: NETFILTER_CFG table=nat:100 family=2 entries=25 op=nft_register_chain pid=3863 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:29.167000 audit[3863]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8252 a0=3 a1=ffffea7fcb30 a2=0 a3=ffff9f6c26c0 items=0 ppid=2180 pid=3863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.167000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:29.181507 systemd[1]: Started cri-containerd-81090b41de59a635037d173dfb543edc096d3a57978b73cba1097e30973c11cb.scope. Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.200000 audit: BPF prog-id=164 op=LOAD Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3778 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303930623431646535396136333530333764313733646662353433 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3778 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303930623431646535396136333530333764313733646662353433 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit: BPF prog-id=165 op=LOAD Feb 9 10:09:29.201000 audit[3871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3778 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303930623431646535396136333530333764313733646662353433 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit: BPF prog-id=166 op=LOAD Feb 9 10:09:29.201000 audit[3871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3778 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303930623431646535396136333530333764313733646662353433 Feb 9 10:09:29.201000 audit: BPF prog-id=166 op=UNLOAD Feb 9 10:09:29.201000 audit: BPF prog-id=165 op=UNLOAD Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { perfmon } for pid=3871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit[3871]: AVC avc: denied { bpf } for pid=3871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.201000 audit: BPF prog-id=167 op=LOAD Feb 9 10:09:29.201000 audit[3871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3778 pid=3871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3831303930623431646535396136333530333764313733646662353433 Feb 9 10:09:29.218761 env[1143]: time="2024-02-09T10:09:29.218662634Z" level=info msg="StartContainer for \"81090b41de59a635037d173dfb543edc096d3a57978b73cba1097e30973c11cb\" returns successfully" Feb 9 10:09:29.821983 kubelet[2018]: E0209 10:09:29.821694 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:29.821983 kubelet[2018]: E0209 10:09:29.821748 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:29.821983 kubelet[2018]: E0209 10:09:29.821770 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:29.834052 kubelet[2018]: I0209 10:09:29.833798 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-thbrw" podStartSLOduration=29.833765501 podCreationTimestamp="2024-02-09 10:09:00 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 10:09:29.832125196 +0000 UTC m=+44.223664239" watchObservedRunningTime="2024-02-09 10:09:29.833765501 +0000 UTC m=+44.225304544" Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit: BPF prog-id=168 op=LOAD Feb 9 10:09:29.902000 audit[3955]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff8de92c8 a2=70 a3=0 items=0 ppid=3904 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.902000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 10:09:29.902000 audit: BPF prog-id=168 op=UNLOAD Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit: BPF prog-id=169 op=LOAD Feb 9 10:09:29.902000 audit[3955]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff8de92c8 a2=70 a3=4a174c items=0 ppid=3904 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.902000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 10:09:29.902000 audit: BPF prog-id=169 op=UNLOAD Feb 9 10:09:29.902000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.902000 audit[3955]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffff8de92f8 a2=70 a3=36d5c79f items=0 ppid=3904 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.902000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { perfmon } for pid=3955 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit[3955]: AVC avc: denied { bpf } for pid=3955 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.903000 audit: BPF prog-id=170 op=LOAD Feb 9 10:09:29.903000 audit[3955]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=fffff8de9248 a2=70 a3=36d5c7b9 items=0 ppid=3904 pid=3955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.903000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 10:09:29.907000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.907000 audit[3957]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffffb0c7b88 a2=70 a3=0 items=0 ppid=3904 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.907000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 10:09:29.907000 audit[3957]: AVC avc: denied { bpf } for pid=3957 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:29.907000 audit[3957]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffffb0c7a68 a2=70 a3=2 items=0 ppid=3904 pid=3957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.907000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 10:09:29.916000 audit: BPF prog-id=170 op=UNLOAD Feb 9 10:09:29.973000 audit[3995]: NETFILTER_CFG table=mangle:101 family=2 entries=19 op=nft_register_chain pid=3995 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 10:09:29.973000 audit[3995]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=fffff8cb2410 a2=0 a3=ffff9dc8bfa8 items=0 ppid=3904 pid=3995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.973000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 10:09:29.978000 audit[3997]: NETFILTER_CFG table=nat:102 family=2 entries=16 op=nft_register_chain pid=3997 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 10:09:29.978000 audit[3997]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=fffffdc5a540 a2=0 a3=ffffa3449fa8 items=0 ppid=3904 pid=3997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.978000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 10:09:29.985000 audit[3999]: NETFILTER_CFG table=filter:103 family=2 entries=131 op=nft_register_chain pid=3999 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 10:09:29.985000 audit[3999]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=71432 a0=3 a1=ffffe9797fc0 a2=0 a3=ffff99c74fa8 items=0 ppid=3904 pid=3999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.985000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 10:09:29.990000 audit[3996]: NETFILTER_CFG table=raw:104 family=2 entries=19 op=nft_register_chain pid=3996 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 10:09:29.990000 audit[3996]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=ffffeb4ec630 a2=0 a3=ffff960dffa8 items=0 ppid=3904 pid=3996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:29.990000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 10:09:30.178000 audit[4030]: NETFILTER_CFG table=filter:105 family=2 entries=8 op=nft_register_rule pid=4030 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:30.178000 audit[4030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffcc1ddf80 a2=0 a3=ffffbc1a96c0 items=0 ppid=2180 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:30.178000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:30.179000 audit[4030]: NETFILTER_CFG table=nat:106 family=2 entries=44 op=nft_register_rule pid=4030 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:30.179000 audit[4030]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13788 a0=3 a1=ffffcc1ddf80 a2=0 a3=ffffbc1a96c0 items=0 ppid=2180 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:30.179000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:30.521512 systemd-networkd[1036]: cali4e08cfc2fb1: Gained IPv6LL Feb 9 10:09:30.714456 systemd-networkd[1036]: cali1fde1441d9c: Gained IPv6LL Feb 9 10:09:30.793754 systemd-networkd[1036]: vxlan.calico: Link UP Feb 9 10:09:30.793762 systemd-networkd[1036]: vxlan.calico: Gained carrier Feb 9 10:09:30.823655 kubelet[2018]: E0209 10:09:30.823465 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:30.991951 env[1143]: time="2024-02-09T10:09:30.991907893Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:30.995348 env[1143]: time="2024-02-09T10:09:30.995300743Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:30.996780 env[1143]: time="2024-02-09T10:09:30.996743570Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:30.998291 env[1143]: time="2024-02-09T10:09:30.998262876Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:30.998730 env[1143]: time="2024-02-09T10:09:30.998706552Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8\"" Feb 9 10:09:31.011198 env[1143]: time="2024-02-09T10:09:31.011164404Z" level=info msg="CreateContainer within sandbox \"b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 9 10:09:31.021528 env[1143]: time="2024-02-09T10:09:31.021495075Z" level=info msg="CreateContainer within sandbox \"b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"fe02edb20407ec77e53b60ffd1334aec34bff531f6d033adc6ad5d00d5b2bd9e\"" Feb 9 10:09:31.022499 env[1143]: time="2024-02-09T10:09:31.022467586Z" level=info msg="StartContainer for \"fe02edb20407ec77e53b60ffd1334aec34bff531f6d033adc6ad5d00d5b2bd9e\"" Feb 9 10:09:31.038983 systemd[1]: Started cri-containerd-fe02edb20407ec77e53b60ffd1334aec34bff531f6d033adc6ad5d00d5b2bd9e.scope. Feb 9 10:09:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070350 kernel: kauditd_printk_skb: 393 callbacks suppressed Feb 9 10:09:31.070423 kernel: audit: type=1400 audit(1707473371.068:1296): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.073810 kernel: audit: type=1400 audit(1707473371.068:1297): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.073863 kernel: audit: type=1400 audit(1707473371.068:1298): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.077863 kernel: audit: type=1400 audit(1707473371.068:1299): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.077921 kernel: audit: type=1400 audit(1707473371.068:1300): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.079450 kernel: audit: type=1400 audit(1707473371.068:1301): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.081244 kernel: audit: type=1400 audit(1707473371.068:1302): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.082924 kernel: audit: type=1400 audit(1707473371.068:1303): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.084630 kernel: audit: type=1400 audit(1707473371.068:1304): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.086333 kernel: audit: type=1400 audit(1707473371.069:1305): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit: BPF prog-id=171 op=LOAD Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3813 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:31.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665303265646232303430376563373765353362363066666431333334 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3813 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:31.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665303265646232303430376563373765353362363066666431333334 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.069000 audit: BPF prog-id=172 op=LOAD Feb 9 10:09:31.069000 audit[4049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3813 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:31.069000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665303265646232303430376563373765353362363066666431333334 Feb 9 10:09:31.070000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.070000 audit: BPF prog-id=173 op=LOAD Feb 9 10:09:31.070000 audit[4049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3813 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:31.070000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665303265646232303430376563373765353362363066666431333334 Feb 9 10:09:31.072000 audit: BPF prog-id=173 op=UNLOAD Feb 9 10:09:31.072000 audit: BPF prog-id=172 op=UNLOAD Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { perfmon } for pid=4049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit[4049]: AVC avc: denied { bpf } for pid=4049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:31.072000 audit: BPF prog-id=174 op=LOAD Feb 9 10:09:31.072000 audit[4049]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3813 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:31.072000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665303265646232303430376563373765353362363066666431333334 Feb 9 10:09:31.100156 env[1143]: time="2024-02-09T10:09:31.100107075Z" level=info msg="StartContainer for \"fe02edb20407ec77e53b60ffd1334aec34bff531f6d033adc6ad5d00d5b2bd9e\" returns successfully" Feb 9 10:09:31.192000 audit[4079]: NETFILTER_CFG table=filter:107 family=2 entries=8 op=nft_register_rule pid=4079 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:31.192000 audit[4079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffccd8d4d0 a2=0 a3=ffffa55a26c0 items=0 ppid=2180 pid=4079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:31.192000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:31.198000 audit[4079]: NETFILTER_CFG table=nat:108 family=2 entries=56 op=nft_register_chain pid=4079 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:31.198000 audit[4079]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19452 a0=3 a1=ffffccd8d4d0 a2=0 a3=ffffa55a26c0 items=0 ppid=2180 pid=4079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:31.198000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:31.630870 systemd[1]: Started sshd@12-10.0.0.131:22-10.0.0.1:37932.service. Feb 9 10:09:31.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.131:22-10.0.0.1:37932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:31.685000 audit[4085]: USER_ACCT pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:31.686748 sshd[4085]: Accepted publickey for core from 10.0.0.1 port 37932 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:31.688000 audit[4085]: CRED_ACQ pid=4085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:31.688000 audit[4085]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6c833e0 a2=3 a3=1 items=0 ppid=1 pid=4085 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:31.688000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:31.690417 sshd[4085]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:31.694086 systemd-logind[1129]: New session 13 of user core. Feb 9 10:09:31.694971 systemd[1]: Started session-13.scope. Feb 9 10:09:31.696000 audit[4085]: USER_START pid=4085 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:31.698000 audit[4087]: CRED_ACQ pid=4087 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:31.705389 env[1143]: time="2024-02-09T10:09:31.705348642Z" level=info msg="StopPodSandbox for \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\"" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.755 [INFO][4104] k8s.go 578: Cleaning up netns ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.755 [INFO][4104] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" iface="eth0" netns="/var/run/netns/cni-4d2e1488-8048-fa97-73b3-eb0069a002b5" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.755 [INFO][4104] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" iface="eth0" netns="/var/run/netns/cni-4d2e1488-8048-fa97-73b3-eb0069a002b5" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.755 [INFO][4104] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" iface="eth0" netns="/var/run/netns/cni-4d2e1488-8048-fa97-73b3-eb0069a002b5" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.755 [INFO][4104] k8s.go 585: Releasing IP address(es) ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.755 [INFO][4104] utils.go 188: Calico CNI releasing IP address ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.775 [INFO][4121] ipam_plugin.go 415: Releasing address using handleID ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" HandleID="k8s-pod-network.cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.775 [INFO][4121] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.775 [INFO][4121] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.785 [WARNING][4121] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" HandleID="k8s-pod-network.cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.785 [INFO][4121] ipam_plugin.go 443: Releasing address using workloadID ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" HandleID="k8s-pod-network.cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.787 [INFO][4121] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:31.790613 env[1143]: 2024-02-09 10:09:31.788 [INFO][4104] k8s.go 591: Teardown processing complete. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:31.791356 env[1143]: time="2024-02-09T10:09:31.791292058Z" level=info msg="TearDown network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\" successfully" Feb 9 10:09:31.791451 env[1143]: time="2024-02-09T10:09:31.791432937Z" level=info msg="StopPodSandbox for \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\" returns successfully" Feb 9 10:09:31.792468 env[1143]: time="2024-02-09T10:09:31.792276530Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gxc5v,Uid:62a8938c-27f7-4453-9d3b-b08056096e4f,Namespace:calico-system,Attempt:1,}" Feb 9 10:09:31.827973 kubelet[2018]: E0209 10:09:31.826920 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:31.854016 sshd[4085]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:31.853000 audit[4085]: USER_END pid=4085 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:31.853000 audit[4085]: CRED_DISP pid=4085 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:31.856660 systemd[1]: session-13.scope: Deactivated successfully. Feb 9 10:09:31.857247 systemd-logind[1129]: Session 13 logged out. Waiting for processes to exit. Feb 9 10:09:31.856000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.131:22-10.0.0.1:37932 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:31.857399 systemd[1]: sshd@12-10.0.0.131:22-10.0.0.1:37932.service: Deactivated successfully. Feb 9 10:09:31.858489 systemd-logind[1129]: Removed session 13. Feb 9 10:09:31.969772 systemd-networkd[1036]: cali5567d9bd287: Link UP Feb 9 10:09:31.970915 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 10:09:31.971111 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5567d9bd287: link becomes ready Feb 9 10:09:31.971068 systemd-networkd[1036]: cali5567d9bd287: Gained carrier Feb 9 10:09:31.981843 kubelet[2018]: I0209 10:09:31.981808 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-598f75589c-s54qf" podStartSLOduration=25.118341174 podCreationTimestamp="2024-02-09 10:09:05 +0000 UTC" firstStartedPulling="2024-02-09 10:09:29.135557913 +0000 UTC m=+43.527096916" lastFinishedPulling="2024-02-09 10:09:30.99897995 +0000 UTC m=+45.390518953" observedRunningTime="2024-02-09 10:09:31.839868278 +0000 UTC m=+46.231407361" watchObservedRunningTime="2024-02-09 10:09:31.981763211 +0000 UTC m=+46.373302254" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.874 [INFO][4137] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--gxc5v-eth0 csi-node-driver- calico-system 62a8938c-27f7-4453-9d3b-b08056096e4f 856 0 2024-02-09 10:09:05 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:676488fcc9 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-gxc5v eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali5567d9bd287 [] []}} ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Namespace="calico-system" Pod="csi-node-driver-gxc5v" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxc5v-" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.875 [INFO][4137] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Namespace="calico-system" Pod="csi-node-driver-gxc5v" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.924 [INFO][4151] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" HandleID="k8s-pod-network.062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.938 [INFO][4151] ipam_plugin.go 268: Auto assigning IP ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" HandleID="k8s-pod-network.062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000243a90), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-gxc5v", "timestamp":"2024-02-09 10:09:31.924950263 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.939 [INFO][4151] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.939 [INFO][4151] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.939 [INFO][4151] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.940 [INFO][4151] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" host="localhost" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.944 [INFO][4151] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.948 [INFO][4151] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.950 [INFO][4151] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.953 [INFO][4151] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.953 [INFO][4151] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" host="localhost" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.955 [INFO][4151] ipam.go 1682: Creating new handle: k8s-pod-network.062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4 Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.959 [INFO][4151] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" host="localhost" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.965 [INFO][4151] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" host="localhost" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.965 [INFO][4151] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" host="localhost" Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.965 [INFO][4151] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:31.984573 env[1143]: 2024-02-09 10:09:31.965 [INFO][4151] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" HandleID="k8s-pod-network.062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.985092 env[1143]: 2024-02-09 10:09:31.968 [INFO][4137] k8s.go 385: Populated endpoint ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Namespace="calico-system" Pod="csi-node-driver-gxc5v" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxc5v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gxc5v-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"62a8938c-27f7-4453-9d3b-b08056096e4f", ResourceVersion:"856", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-gxc5v", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali5567d9bd287", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:31.985092 env[1143]: 2024-02-09 10:09:31.968 [INFO][4137] k8s.go 386: Calico CNI using IPs: [192.168.88.132/32] ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Namespace="calico-system" Pod="csi-node-driver-gxc5v" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.985092 env[1143]: 2024-02-09 10:09:31.968 [INFO][4137] dataplane_linux.go 68: Setting the host side veth name to cali5567d9bd287 ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Namespace="calico-system" Pod="csi-node-driver-gxc5v" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.985092 env[1143]: 2024-02-09 10:09:31.971 [INFO][4137] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Namespace="calico-system" Pod="csi-node-driver-gxc5v" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.985092 env[1143]: 2024-02-09 10:09:31.971 [INFO][4137] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Namespace="calico-system" Pod="csi-node-driver-gxc5v" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxc5v-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gxc5v-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"62a8938c-27f7-4453-9d3b-b08056096e4f", ResourceVersion:"856", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4", Pod:"csi-node-driver-gxc5v", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali5567d9bd287", MAC:"06:1a:7d:b0:7a:ce", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:31.985092 env[1143]: 2024-02-09 10:09:31.981 [INFO][4137] k8s.go 491: Wrote updated endpoint to datastore ContainerID="062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4" Namespace="calico-system" Pod="csi-node-driver-gxc5v" WorkloadEndpoint="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:31.995000 audit[4176]: NETFILTER_CFG table=filter:109 family=2 entries=38 op=nft_register_chain pid=4176 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 10:09:31.995000 audit[4176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19492 a0=3 a1=ffffc3f3a420 a2=0 a3=ffffb00ecfa8 items=0 ppid=3904 pid=4176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:31.995000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 10:09:32.004185 systemd[1]: run-netns-cni\x2d4d2e1488\x2d8048\x2dfa97\x2d73b3\x2deb0069a002b5.mount: Deactivated successfully. Feb 9 10:09:32.008466 env[1143]: time="2024-02-09T10:09:32.008369463Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:09:32.008466 env[1143]: time="2024-02-09T10:09:32.008411823Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:09:32.008466 env[1143]: time="2024-02-09T10:09:32.008422102Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:09:32.008944 env[1143]: time="2024-02-09T10:09:32.008890259Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4 pid=4184 runtime=io.containerd.runc.v2 Feb 9 10:09:32.023295 systemd[1]: run-containerd-runc-k8s.io-062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4-runc.wMY8H0.mount: Deactivated successfully. Feb 9 10:09:32.026302 systemd[1]: Started cri-containerd-062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4.scope. Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit: BPF prog-id=175 op=LOAD Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4184 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:32.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036323836396133663831653231626237666435373066343236303539 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4184 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:32.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036323836396133663831653231626237666435373066343236303539 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.057000 audit: BPF prog-id=176 op=LOAD Feb 9 10:09:32.057000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4184 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:32.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036323836396133663831653231626237666435373066343236303539 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit: BPF prog-id=177 op=LOAD Feb 9 10:09:32.058000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4184 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:32.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036323836396133663831653231626237666435373066343236303539 Feb 9 10:09:32.058000 audit: BPF prog-id=177 op=UNLOAD Feb 9 10:09:32.058000 audit: BPF prog-id=176 op=UNLOAD Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:32.058000 audit: BPF prog-id=178 op=LOAD Feb 9 10:09:32.058000 audit[4193]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4184 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:32.058000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036323836396133663831653231626237666435373066343236303539 Feb 9 10:09:32.060099 systemd-resolved[1088]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 10:09:32.072487 env[1143]: time="2024-02-09T10:09:32.071126695Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gxc5v,Uid:62a8938c-27f7-4453-9d3b-b08056096e4f,Namespace:calico-system,Attempt:1,} returns sandbox id \"062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4\"" Feb 9 10:09:32.072487 env[1143]: time="2024-02-09T10:09:32.072357564Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 9 10:09:32.313548 systemd-networkd[1036]: vxlan.calico: Gained IPv6LL Feb 9 10:09:32.829565 kubelet[2018]: I0209 10:09:32.829540 2018 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 10:09:32.830475 kubelet[2018]: E0209 10:09:32.830460 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:33.389708 env[1143]: time="2024-02-09T10:09:33.389659201Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:33.391163 env[1143]: time="2024-02-09T10:09:33.391126028Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:33.392619 env[1143]: time="2024-02-09T10:09:33.392592936Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:33.393815 env[1143]: time="2024-02-09T10:09:33.393781407Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:33.394255 env[1143]: time="2024-02-09T10:09:33.394227003Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8\"" Feb 9 10:09:33.397555 env[1143]: time="2024-02-09T10:09:33.397519016Z" level=info msg="CreateContainer within sandbox \"062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 9 10:09:33.409523 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1254111200.mount: Deactivated successfully. Feb 9 10:09:33.416853 env[1143]: time="2024-02-09T10:09:33.416813858Z" level=info msg="CreateContainer within sandbox \"062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"6b69375bf219d263f58ce2b72c83e8339d2fb121603abe8513667a3e2c37fd2b\"" Feb 9 10:09:33.418995 env[1143]: time="2024-02-09T10:09:33.418968280Z" level=info msg="StartContainer for \"6b69375bf219d263f58ce2b72c83e8339d2fb121603abe8513667a3e2c37fd2b\"" Feb 9 10:09:33.439241 systemd[1]: Started cri-containerd-6b69375bf219d263f58ce2b72c83e8339d2fb121603abe8513667a3e2c37fd2b.scope. Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4184 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:33.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662363933373562663231396432363366353863653262373263383365 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit: BPF prog-id=179 op=LOAD Feb 9 10:09:33.452000 audit[4227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4184 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:33.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662363933373562663231396432363366353863653262373263383365 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.452000 audit: BPF prog-id=180 op=LOAD Feb 9 10:09:33.452000 audit[4227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4184 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:33.452000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662363933373562663231396432363366353863653262373263383365 Feb 9 10:09:33.452000 audit: BPF prog-id=180 op=UNLOAD Feb 9 10:09:33.452000 audit: BPF prog-id=179 op=UNLOAD Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { perfmon } for pid=4227 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit[4227]: AVC avc: denied { bpf } for pid=4227 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:33.453000 audit: BPF prog-id=181 op=LOAD Feb 9 10:09:33.453000 audit[4227]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4184 pid=4227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:33.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662363933373562663231396432363366353863653262373263383365 Feb 9 10:09:33.466662 env[1143]: time="2024-02-09T10:09:33.466623250Z" level=info msg="StartContainer for \"6b69375bf219d263f58ce2b72c83e8339d2fb121603abe8513667a3e2c37fd2b\" returns successfully" Feb 9 10:09:33.469273 env[1143]: time="2024-02-09T10:09:33.469195309Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 9 10:09:33.913471 systemd-networkd[1036]: cali5567d9bd287: Gained IPv6LL Feb 9 10:09:35.076181 env[1143]: time="2024-02-09T10:09:35.076122342Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:35.077688 env[1143]: time="2024-02-09T10:09:35.077649930Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:35.078752 env[1143]: time="2024-02-09T10:09:35.078722442Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:35.079920 env[1143]: time="2024-02-09T10:09:35.079876633Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 10:09:35.080284 env[1143]: time="2024-02-09T10:09:35.080260310Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43\"" Feb 9 10:09:35.082238 env[1143]: time="2024-02-09T10:09:35.082208215Z" level=info msg="CreateContainer within sandbox \"062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 9 10:09:35.093454 env[1143]: time="2024-02-09T10:09:35.093416848Z" level=info msg="CreateContainer within sandbox \"062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"e1091559615202b96c3730298ca3556dbb8544c448a780d647b3d37197c3e473\"" Feb 9 10:09:35.094346 env[1143]: time="2024-02-09T10:09:35.093922444Z" level=info msg="StartContainer for \"e1091559615202b96c3730298ca3556dbb8544c448a780d647b3d37197c3e473\"" Feb 9 10:09:35.112554 systemd[1]: run-containerd-runc-k8s.io-e1091559615202b96c3730298ca3556dbb8544c448a780d647b3d37197c3e473-runc.6TdIjS.mount: Deactivated successfully. Feb 9 10:09:35.113891 systemd[1]: Started cri-containerd-e1091559615202b96c3730298ca3556dbb8544c448a780d647b3d37197c3e473.scope. Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4184 pid=4268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:35.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531303931353539363135323032623936633337333032393863613335 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit: BPF prog-id=182 op=LOAD Feb 9 10:09:35.145000 audit[4268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4184 pid=4268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:35.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531303931353539363135323032623936633337333032393863613335 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit: BPF prog-id=183 op=LOAD Feb 9 10:09:35.145000 audit[4268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4184 pid=4268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:35.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531303931353539363135323032623936633337333032393863613335 Feb 9 10:09:35.145000 audit: BPF prog-id=183 op=UNLOAD Feb 9 10:09:35.145000 audit: BPF prog-id=182 op=UNLOAD Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { perfmon } for pid=4268 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit[4268]: AVC avc: denied { bpf } for pid=4268 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:09:35.145000 audit: BPF prog-id=184 op=LOAD Feb 9 10:09:35.145000 audit[4268]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4184 pid=4268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:35.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531303931353539363135323032623936633337333032393863613335 Feb 9 10:09:35.163725 env[1143]: time="2024-02-09T10:09:35.163671381Z" level=info msg="StartContainer for \"e1091559615202b96c3730298ca3556dbb8544c448a780d647b3d37197c3e473\" returns successfully" Feb 9 10:09:35.780040 kubelet[2018]: I0209 10:09:35.780005 2018 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 9 10:09:35.780558 kubelet[2018]: I0209 10:09:35.780206 2018 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 9 10:09:35.858283 kubelet[2018]: I0209 10:09:35.858242 2018 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-gxc5v" podStartSLOduration=27.849795039 podCreationTimestamp="2024-02-09 10:09:05 +0000 UTC" firstStartedPulling="2024-02-09 10:09:32.072102366 +0000 UTC m=+46.463641409" lastFinishedPulling="2024-02-09 10:09:35.080513148 +0000 UTC m=+49.472052191" observedRunningTime="2024-02-09 10:09:35.856842112 +0000 UTC m=+50.248381195" watchObservedRunningTime="2024-02-09 10:09:35.858205821 +0000 UTC m=+50.249744864" Feb 9 10:09:36.858533 systemd[1]: Started sshd@13-10.0.0.131:22-10.0.0.1:41394.service. Feb 9 10:09:36.859512 kernel: kauditd_printk_skb: 210 callbacks suppressed Feb 9 10:09:36.859556 kernel: audit: type=1130 audit(1707473376.857:1356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.131:22-10.0.0.1:41394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:36.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.131:22-10.0.0.1:41394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:36.907000 audit[4302]: USER_ACCT pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:36.908576 sshd[4302]: Accepted publickey for core from 10.0.0.1 port 41394 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:36.908000 audit[4302]: CRED_ACQ pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:36.911036 sshd[4302]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:36.913067 kernel: audit: type=1101 audit(1707473376.907:1357): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:36.913127 kernel: audit: type=1103 audit(1707473376.908:1358): pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:36.913148 kernel: audit: type=1006 audit(1707473376.908:1359): pid=4302 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Feb 9 10:09:36.908000 audit[4302]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3799fa0 a2=3 a3=1 items=0 ppid=1 pid=4302 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:36.917013 kernel: audit: type=1300 audit(1707473376.908:1359): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd3799fa0 a2=3 a3=1 items=0 ppid=1 pid=4302 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:36.917088 kernel: audit: type=1327 audit(1707473376.908:1359): proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:36.908000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:36.916679 systemd-logind[1129]: New session 14 of user core. Feb 9 10:09:36.917224 systemd[1]: Started session-14.scope. Feb 9 10:09:36.920000 audit[4302]: USER_START pid=4302 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:36.921000 audit[4304]: CRED_ACQ pid=4304 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:36.926405 kernel: audit: type=1105 audit(1707473376.920:1360): pid=4302 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:36.926451 kernel: audit: type=1103 audit(1707473376.921:1361): pid=4304 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:37.046097 sshd[4302]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:37.046000 audit[4302]: USER_END pid=4302 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:37.049302 systemd-logind[1129]: Session 14 logged out. Waiting for processes to exit. Feb 9 10:09:37.046000 audit[4302]: CRED_DISP pid=4302 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:37.049467 systemd[1]: sshd@13-10.0.0.131:22-10.0.0.1:41394.service: Deactivated successfully. Feb 9 10:09:37.050201 systemd[1]: session-14.scope: Deactivated successfully. Feb 9 10:09:37.050919 systemd-logind[1129]: Removed session 14. Feb 9 10:09:37.052491 kernel: audit: type=1106 audit(1707473377.046:1362): pid=4302 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:37.052568 kernel: audit: type=1104 audit(1707473377.046:1363): pid=4302 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:37.046000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.131:22-10.0.0.1:41394 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:42.052234 systemd[1]: Started sshd@14-10.0.0.131:22-10.0.0.1:41406.service. Feb 9 10:09:42.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.131:22-10.0.0.1:41406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:42.055092 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 10:09:42.055145 kernel: audit: type=1130 audit(1707473382.051:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.131:22-10.0.0.1:41406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:42.099000 audit[4326]: USER_ACCT pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.101425 sshd[4326]: Accepted publickey for core from 10.0.0.1 port 41406 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:42.102763 sshd[4326]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:42.100000 audit[4326]: CRED_ACQ pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.105377 kernel: audit: type=1101 audit(1707473382.099:1366): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.105441 kernel: audit: type=1103 audit(1707473382.100:1367): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.105468 kernel: audit: type=1006 audit(1707473382.100:1368): pid=4326 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Feb 9 10:09:42.100000 audit[4326]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce04c550 a2=3 a3=1 items=0 ppid=1 pid=4326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:42.108993 kernel: audit: type=1300 audit(1707473382.100:1368): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce04c550 a2=3 a3=1 items=0 ppid=1 pid=4326 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:42.109044 kernel: audit: type=1327 audit(1707473382.100:1368): proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:42.100000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:42.109870 systemd-logind[1129]: New session 15 of user core. Feb 9 10:09:42.110703 systemd[1]: Started session-15.scope. Feb 9 10:09:42.119000 audit[4326]: USER_START pid=4326 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.119000 audit[4328]: CRED_ACQ pid=4328 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.125089 kernel: audit: type=1105 audit(1707473382.119:1369): pid=4326 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.125135 kernel: audit: type=1103 audit(1707473382.119:1370): pid=4328 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.234792 sshd[4326]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:42.234000 audit[4326]: USER_END pid=4326 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.234000 audit[4326]: CRED_DISP pid=4326 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.240578 kernel: audit: type=1106 audit(1707473382.234:1371): pid=4326 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.240643 kernel: audit: type=1104 audit(1707473382.234:1372): pid=4326 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:42.242697 systemd[1]: sshd@14-10.0.0.131:22-10.0.0.1:41406.service: Deactivated successfully. Feb 9 10:09:42.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.131:22-10.0.0.1:41406 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:42.243510 systemd[1]: session-15.scope: Deactivated successfully. Feb 9 10:09:42.244035 systemd-logind[1129]: Session 15 logged out. Waiting for processes to exit. Feb 9 10:09:42.244857 systemd-logind[1129]: Removed session 15. Feb 9 10:09:42.322000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:42.322000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001fc49c0 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:09:42.322000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:09:42.322000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:42.322000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40005dbf00 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:09:42.322000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:09:42.735000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:42.735000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:42.735000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=401308d800 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:09:42.735000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:09:42.735000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4012487f60 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:09:42.735000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:09:42.735000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:42.735000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=401464ed20 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:09:42.735000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:09:42.740000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:42.740000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=401464ed80 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:09:42.740000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:09:42.742000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:42.742000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40073adf00 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:09:42.742000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:09:42.743000 audit[1902]: AVC avc: denied { watch } for pid=1902 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:42.743000 audit[1902]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=401342b8f0 a2=fc6 a3=0 items=0 ppid=1735 pid=1902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c456,c915 key=(null) Feb 9 10:09:42.743000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Feb 9 10:09:42.969658 kubelet[2018]: I0209 10:09:42.969610 2018 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 10:09:42.989601 systemd[1]: run-containerd-runc-k8s.io-fe02edb20407ec77e53b60ffd1334aec34bff531f6d033adc6ad5d00d5b2bd9e-runc.SqwbO9.mount: Deactivated successfully. Feb 9 10:09:45.693598 env[1143]: time="2024-02-09T10:09:45.693514941Z" level=info msg="StopPodSandbox for \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\"" Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.730 [WARNING][4393] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--nhqtb-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"c74de498-1e6a-4592-8e67-ffe32553889f", ResourceVersion:"782", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d", Pod:"coredns-5dd5756b68-nhqtb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b289c23bb7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.730 [INFO][4393] k8s.go 578: Cleaning up netns ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.730 [INFO][4393] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" iface="eth0" netns="" Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.730 [INFO][4393] k8s.go 585: Releasing IP address(es) ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.730 [INFO][4393] utils.go 188: Calico CNI releasing IP address ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.748 [INFO][4402] ipam_plugin.go 415: Releasing address using handleID ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" HandleID="k8s-pod-network.e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.748 [INFO][4402] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.748 [INFO][4402] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.758 [WARNING][4402] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" HandleID="k8s-pod-network.e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.758 [INFO][4402] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" HandleID="k8s-pod-network.e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.761 [INFO][4402] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:45.764872 env[1143]: 2024-02-09 10:09:45.763 [INFO][4393] k8s.go 591: Teardown processing complete. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:45.765391 env[1143]: time="2024-02-09T10:09:45.765354788Z" level=info msg="TearDown network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\" successfully" Feb 9 10:09:45.765458 env[1143]: time="2024-02-09T10:09:45.765441948Z" level=info msg="StopPodSandbox for \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\" returns successfully" Feb 9 10:09:45.765940 env[1143]: time="2024-02-09T10:09:45.765912185Z" level=info msg="RemovePodSandbox for \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\"" Feb 9 10:09:45.766072 env[1143]: time="2024-02-09T10:09:45.766032984Z" level=info msg="Forcibly stopping sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\"" Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.803 [WARNING][4425] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--nhqtb-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"c74de498-1e6a-4592-8e67-ffe32553889f", ResourceVersion:"782", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4b3c732469b697bb60e87de4281f6774bbf867674bc8006c869d4725f092c84d", Pod:"coredns-5dd5756b68-nhqtb", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b289c23bb7", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.804 [INFO][4425] k8s.go 578: Cleaning up netns ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.804 [INFO][4425] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" iface="eth0" netns="" Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.804 [INFO][4425] k8s.go 585: Releasing IP address(es) ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.804 [INFO][4425] utils.go 188: Calico CNI releasing IP address ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.822 [INFO][4433] ipam_plugin.go 415: Releasing address using handleID ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" HandleID="k8s-pod-network.e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.822 [INFO][4433] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.822 [INFO][4433] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.833 [WARNING][4433] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" HandleID="k8s-pod-network.e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.833 [INFO][4433] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" HandleID="k8s-pod-network.e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Workload="localhost-k8s-coredns--5dd5756b68--nhqtb-eth0" Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.835 [INFO][4433] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:45.838818 env[1143]: 2024-02-09 10:09:45.837 [INFO][4425] k8s.go 591: Teardown processing complete. ContainerID="e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42" Feb 9 10:09:45.839293 env[1143]: time="2024-02-09T10:09:45.838851185Z" level=info msg="TearDown network for sandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\" successfully" Feb 9 10:09:45.841523 env[1143]: time="2024-02-09T10:09:45.841492250Z" level=info msg="RemovePodSandbox \"e2d18ed7fef7abd3535736fe3f19676ac8369d7b4bacbfb1e8f4fb8b034e1a42\" returns successfully" Feb 9 10:09:45.842040 env[1143]: time="2024-02-09T10:09:45.841959287Z" level=info msg="StopPodSandbox for \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\"" Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.883 [WARNING][4456] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0", GenerateName:"calico-kube-controllers-598f75589c-", Namespace:"calico-system", SelfLink:"", UID:"d9c14693-a4c2-4706-ac8f-296dc6cd5d48", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"598f75589c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80", Pod:"calico-kube-controllers-598f75589c-s54qf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1fde1441d9c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.883 [INFO][4456] k8s.go 578: Cleaning up netns ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.883 [INFO][4456] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" iface="eth0" netns="" Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.883 [INFO][4456] k8s.go 585: Releasing IP address(es) ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.883 [INFO][4456] utils.go 188: Calico CNI releasing IP address ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.906 [INFO][4463] ipam_plugin.go 415: Releasing address using handleID ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" HandleID="k8s-pod-network.e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.906 [INFO][4463] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.906 [INFO][4463] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.918 [WARNING][4463] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" HandleID="k8s-pod-network.e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.918 [INFO][4463] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" HandleID="k8s-pod-network.e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.919 [INFO][4463] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:45.926473 env[1143]: 2024-02-09 10:09:45.921 [INFO][4456] k8s.go 591: Teardown processing complete. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:45.926985 env[1143]: time="2024-02-09T10:09:45.926949335Z" level=info msg="TearDown network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\" successfully" Feb 9 10:09:45.927051 env[1143]: time="2024-02-09T10:09:45.927036254Z" level=info msg="StopPodSandbox for \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\" returns successfully" Feb 9 10:09:45.927679 env[1143]: time="2024-02-09T10:09:45.927639011Z" level=info msg="RemovePodSandbox for \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\"" Feb 9 10:09:45.927755 env[1143]: time="2024-02-09T10:09:45.927686690Z" level=info msg="Forcibly stopping sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\"" Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.961 [WARNING][4485] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0", GenerateName:"calico-kube-controllers-598f75589c-", Namespace:"calico-system", SelfLink:"", UID:"d9c14693-a4c2-4706-ac8f-296dc6cd5d48", ResourceVersion:"918", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"598f75589c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b07266ac7a3b18ee8d29127cc7a485b62c494e506b791691f82f2b1de1017b80", Pod:"calico-kube-controllers-598f75589c-s54qf", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali1fde1441d9c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.961 [INFO][4485] k8s.go 578: Cleaning up netns ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.961 [INFO][4485] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" iface="eth0" netns="" Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.961 [INFO][4485] k8s.go 585: Releasing IP address(es) ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.961 [INFO][4485] utils.go 188: Calico CNI releasing IP address ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.982 [INFO][4492] ipam_plugin.go 415: Releasing address using handleID ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" HandleID="k8s-pod-network.e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.985 [INFO][4492] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.985 [INFO][4492] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.995 [WARNING][4492] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" HandleID="k8s-pod-network.e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.995 [INFO][4492] ipam_plugin.go 443: Releasing address using workloadID ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" HandleID="k8s-pod-network.e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Workload="localhost-k8s-calico--kube--controllers--598f75589c--s54qf-eth0" Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:45.998 [INFO][4492] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:46.005430 env[1143]: 2024-02-09 10:09:46.001 [INFO][4485] k8s.go 591: Teardown processing complete. ContainerID="e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b" Feb 9 10:09:46.005430 env[1143]: time="2024-02-09T10:09:46.005259544Z" level=info msg="TearDown network for sandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\" successfully" Feb 9 10:09:46.010915 env[1143]: time="2024-02-09T10:09:46.010872031Z" level=info msg="RemovePodSandbox \"e741fa6ce25fa50b17ff12ceb8c324a2fe806f5dcdedac8661b89e641e12ca8b\" returns successfully" Feb 9 10:09:46.011430 env[1143]: time="2024-02-09T10:09:46.011390428Z" level=info msg="StopPodSandbox for \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\"" Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.044 [WARNING][4515] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gxc5v-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"62a8938c-27f7-4453-9d3b-b08056096e4f", ResourceVersion:"885", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4", Pod:"csi-node-driver-gxc5v", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali5567d9bd287", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.045 [INFO][4515] k8s.go 578: Cleaning up netns ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.045 [INFO][4515] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" iface="eth0" netns="" Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.045 [INFO][4515] k8s.go 585: Releasing IP address(es) ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.045 [INFO][4515] utils.go 188: Calico CNI releasing IP address ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.064 [INFO][4523] ipam_plugin.go 415: Releasing address using handleID ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" HandleID="k8s-pod-network.cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.064 [INFO][4523] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.064 [INFO][4523] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.073 [WARNING][4523] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" HandleID="k8s-pod-network.cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.073 [INFO][4523] ipam_plugin.go 443: Releasing address using workloadID ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" HandleID="k8s-pod-network.cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.075 [INFO][4523] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:46.078453 env[1143]: 2024-02-09 10:09:46.077 [INFO][4515] k8s.go 591: Teardown processing complete. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:46.079157 env[1143]: time="2024-02-09T10:09:46.078484233Z" level=info msg="TearDown network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\" successfully" Feb 9 10:09:46.079157 env[1143]: time="2024-02-09T10:09:46.078516993Z" level=info msg="StopPodSandbox for \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\" returns successfully" Feb 9 10:09:46.079220 env[1143]: time="2024-02-09T10:09:46.079151829Z" level=info msg="RemovePodSandbox for \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\"" Feb 9 10:09:46.079220 env[1143]: time="2024-02-09T10:09:46.079181909Z" level=info msg="Forcibly stopping sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\"" Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.115 [WARNING][4546] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gxc5v-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"62a8938c-27f7-4453-9d3b-b08056096e4f", ResourceVersion:"885", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 5, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"062869a3f81e21bb7fd570f4260590fce6d770ed715fa02688705f12eac4dad4", Pod:"csi-node-driver-gxc5v", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali5567d9bd287", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.116 [INFO][4546] k8s.go 578: Cleaning up netns ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.116 [INFO][4546] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" iface="eth0" netns="" Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.116 [INFO][4546] k8s.go 585: Releasing IP address(es) ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.116 [INFO][4546] utils.go 188: Calico CNI releasing IP address ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.133 [INFO][4553] ipam_plugin.go 415: Releasing address using handleID ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" HandleID="k8s-pod-network.cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.133 [INFO][4553] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.133 [INFO][4553] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.143 [WARNING][4553] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" HandleID="k8s-pod-network.cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.143 [INFO][4553] ipam_plugin.go 443: Releasing address using workloadID ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" HandleID="k8s-pod-network.cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Workload="localhost-k8s-csi--node--driver--gxc5v-eth0" Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.144 [INFO][4553] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:46.147782 env[1143]: 2024-02-09 10:09:46.146 [INFO][4546] k8s.go 591: Teardown processing complete. ContainerID="cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f" Feb 9 10:09:46.148326 env[1143]: time="2024-02-09T10:09:46.148272623Z" level=info msg="TearDown network for sandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\" successfully" Feb 9 10:09:46.151129 env[1143]: time="2024-02-09T10:09:46.151094046Z" level=info msg="RemovePodSandbox \"cb88cc1e23701dfe6474d5ff0fb86d4ee62f26e320e98ca5936004e64e826b0f\" returns successfully" Feb 9 10:09:46.151718 env[1143]: time="2024-02-09T10:09:46.151685203Z" level=info msg="StopPodSandbox for \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\"" Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.189 [WARNING][4576] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--thbrw-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"e6a2ce91-4235-42e3-af0f-1403cc454bde", ResourceVersion:"839", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be", Pod:"coredns-5dd5756b68-thbrw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4e08cfc2fb1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.190 [INFO][4576] k8s.go 578: Cleaning up netns ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.190 [INFO][4576] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" iface="eth0" netns="" Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.190 [INFO][4576] k8s.go 585: Releasing IP address(es) ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.190 [INFO][4576] utils.go 188: Calico CNI releasing IP address ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.209 [INFO][4583] ipam_plugin.go 415: Releasing address using handleID ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" HandleID="k8s-pod-network.8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.210 [INFO][4583] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.210 [INFO][4583] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.219 [WARNING][4583] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" HandleID="k8s-pod-network.8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.220 [INFO][4583] ipam_plugin.go 443: Releasing address using workloadID ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" HandleID="k8s-pod-network.8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.221 [INFO][4583] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:46.225147 env[1143]: 2024-02-09 10:09:46.223 [INFO][4576] k8s.go 591: Teardown processing complete. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:46.225686 env[1143]: time="2024-02-09T10:09:46.225190531Z" level=info msg="TearDown network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\" successfully" Feb 9 10:09:46.225686 env[1143]: time="2024-02-09T10:09:46.225223371Z" level=info msg="StopPodSandbox for \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\" returns successfully" Feb 9 10:09:46.225926 env[1143]: time="2024-02-09T10:09:46.225895207Z" level=info msg="RemovePodSandbox for \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\"" Feb 9 10:09:46.226094 env[1143]: time="2024-02-09T10:09:46.226038326Z" level=info msg="Forcibly stopping sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\"" Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.261 [WARNING][4606] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--thbrw-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"e6a2ce91-4235-42e3-af0f-1403cc454bde", ResourceVersion:"839", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 9, 0, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bf7bd82380351fb44f9f205e78b49cc2d811e85769d0d49bd8fbc0add09300be", Pod:"coredns-5dd5756b68-thbrw", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4e08cfc2fb1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.262 [INFO][4606] k8s.go 578: Cleaning up netns ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.262 [INFO][4606] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" iface="eth0" netns="" Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.262 [INFO][4606] k8s.go 585: Releasing IP address(es) ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.262 [INFO][4606] utils.go 188: Calico CNI releasing IP address ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.279 [INFO][4614] ipam_plugin.go 415: Releasing address using handleID ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" HandleID="k8s-pod-network.8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.279 [INFO][4614] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.279 [INFO][4614] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.288 [WARNING][4614] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" HandleID="k8s-pod-network.8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.288 [INFO][4614] ipam_plugin.go 443: Releasing address using workloadID ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" HandleID="k8s-pod-network.8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Workload="localhost-k8s-coredns--5dd5756b68--thbrw-eth0" Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.290 [INFO][4614] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:09:46.293659 env[1143]: 2024-02-09 10:09:46.292 [INFO][4606] k8s.go 591: Teardown processing complete. ContainerID="8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d" Feb 9 10:09:46.293659 env[1143]: time="2024-02-09T10:09:46.293633289Z" level=info msg="TearDown network for sandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\" successfully" Feb 9 10:09:46.321496 env[1143]: time="2024-02-09T10:09:46.321430125Z" level=info msg="RemovePodSandbox \"8af5f1f94713e818aa6bb38dc144394b73cacf24310b1f7f879f518c9773e81d\" returns successfully" Feb 9 10:09:47.240351 systemd[1]: Started sshd@15-10.0.0.131:22-10.0.0.1:55108.service. Feb 9 10:09:47.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.131:22-10.0.0.1:55108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:47.243131 kernel: kauditd_printk_skb: 25 callbacks suppressed Feb 9 10:09:47.243249 kernel: audit: type=1130 audit(1707473387.239:1382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.131:22-10.0.0.1:55108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:47.288000 audit[4623]: USER_ACCT pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.289513 sshd[4623]: Accepted publickey for core from 10.0.0.1 port 55108 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:47.290844 sshd[4623]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:47.289000 audit[4623]: CRED_ACQ pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.293754 kernel: audit: type=1101 audit(1707473387.288:1383): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.293820 kernel: audit: type=1103 audit(1707473387.289:1384): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.293862 kernel: audit: type=1006 audit(1707473387.289:1385): pid=4623 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 9 10:09:47.289000 audit[4623]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc88d48d0 a2=3 a3=1 items=0 ppid=1 pid=4623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:47.297427 kernel: audit: type=1300 audit(1707473387.289:1385): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc88d48d0 a2=3 a3=1 items=0 ppid=1 pid=4623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:47.297477 kernel: audit: type=1327 audit(1707473387.289:1385): proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:47.289000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:47.298378 systemd-logind[1129]: New session 16 of user core. Feb 9 10:09:47.299463 systemd[1]: Started session-16.scope. Feb 9 10:09:47.301000 audit[4623]: USER_START pid=4623 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.302000 audit[4625]: CRED_ACQ pid=4625 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.307535 kernel: audit: type=1105 audit(1707473387.301:1386): pid=4623 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.307605 kernel: audit: type=1103 audit(1707473387.302:1387): pid=4625 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.413243 sshd[4623]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:47.414000 audit[4623]: USER_END pid=4623 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.417171 systemd[1]: Started sshd@16-10.0.0.131:22-10.0.0.1:55124.service. Feb 9 10:09:47.418194 systemd[1]: session-16.scope: Deactivated successfully. Feb 9 10:09:47.418806 systemd[1]: sshd@15-10.0.0.131:22-10.0.0.1:55108.service: Deactivated successfully. Feb 9 10:09:47.415000 audit[4623]: CRED_DISP pid=4623 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.420378 systemd-logind[1129]: Session 16 logged out. Waiting for processes to exit. Feb 9 10:09:47.421443 kernel: audit: type=1106 audit(1707473387.414:1388): pid=4623 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.421503 kernel: audit: type=1104 audit(1707473387.415:1389): pid=4623 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.416000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.131:22-10.0.0.1:55124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:47.417000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.131:22-10.0.0.1:55108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:47.421242 systemd-logind[1129]: Removed session 16. Feb 9 10:09:47.458000 audit[4636]: USER_ACCT pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.459997 sshd[4636]: Accepted publickey for core from 10.0.0.1 port 55124 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:47.459000 audit[4636]: CRED_ACQ pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.459000 audit[4636]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd72e910 a2=3 a3=1 items=0 ppid=1 pid=4636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:47.459000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:47.461488 sshd[4636]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:47.465086 systemd-logind[1129]: New session 17 of user core. Feb 9 10:09:47.465871 systemd[1]: Started session-17.scope. Feb 9 10:09:47.468000 audit[4636]: USER_START pid=4636 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.469000 audit[4639]: CRED_ACQ pid=4639 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.675399 sshd[4636]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:47.675000 audit[4636]: USER_END pid=4636 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.675000 audit[4636]: CRED_DISP pid=4636 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.679300 systemd[1]: Started sshd@17-10.0.0.131:22-10.0.0.1:55136.service. Feb 9 10:09:47.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.131:22-10.0.0.1:55136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:47.681484 systemd-logind[1129]: Session 17 logged out. Waiting for processes to exit. Feb 9 10:09:47.681526 systemd[1]: session-17.scope: Deactivated successfully. Feb 9 10:09:47.682192 systemd[1]: sshd@16-10.0.0.131:22-10.0.0.1:55124.service: Deactivated successfully. Feb 9 10:09:47.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.131:22-10.0.0.1:55124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:47.682998 systemd-logind[1129]: Removed session 17. Feb 9 10:09:47.723000 audit[4647]: USER_ACCT pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.725039 sshd[4647]: Accepted publickey for core from 10.0.0.1 port 55136 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:47.724000 audit[4647]: CRED_ACQ pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.724000 audit[4647]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb1cdf50 a2=3 a3=1 items=0 ppid=1 pid=4647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:47.724000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:47.726149 sshd[4647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:47.729749 systemd-logind[1129]: New session 18 of user core. Feb 9 10:09:47.730655 systemd[1]: Started session-18.scope. Feb 9 10:09:47.733000 audit[4647]: USER_START pid=4647 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:47.734000 audit[4650]: CRED_ACQ pid=4650 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.443000 audit[4663]: NETFILTER_CFG table=filter:110 family=2 entries=20 op=nft_register_rule pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:48.443000 audit[4663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11292 a0=3 a1=ffffe12b09b0 a2=0 a3=ffffa118d6c0 items=0 ppid=2180 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:48.443000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:48.443000 audit[4663]: NETFILTER_CFG table=nat:111 family=2 entries=20 op=nft_register_rule pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:48.443000 audit[4663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffe12b09b0 a2=0 a3=ffffa118d6c0 items=0 ppid=2180 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:48.443000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:48.459650 sshd[4647]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:48.459000 audit[4647]: USER_END pid=4647 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.459000 audit[4647]: CRED_DISP pid=4647 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.463000 audit[4665]: NETFILTER_CFG table=filter:112 family=2 entries=32 op=nft_register_rule pid=4665 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:48.463000 audit[4665]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11292 a0=3 a1=ffffd155ab20 a2=0 a3=ffffa31d36c0 items=0 ppid=2180 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:48.463000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:48.466382 systemd[1]: Started sshd@18-10.0.0.131:22-10.0.0.1:55138.service. Feb 9 10:09:48.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.131:22-10.0.0.1:55138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:48.468623 systemd[1]: sshd@17-10.0.0.131:22-10.0.0.1:55136.service: Deactivated successfully. Feb 9 10:09:48.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.131:22-10.0.0.1:55136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:48.469487 systemd[1]: session-18.scope: Deactivated successfully. Feb 9 10:09:48.470151 systemd-logind[1129]: Session 18 logged out. Waiting for processes to exit. Feb 9 10:09:48.471473 systemd-logind[1129]: Removed session 18. Feb 9 10:09:48.464000 audit[4665]: NETFILTER_CFG table=nat:113 family=2 entries=20 op=nft_register_rule pid=4665 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:48.464000 audit[4665]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffd155ab20 a2=0 a3=ffffa31d36c0 items=0 ppid=2180 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:48.464000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:48.512000 audit[4667]: USER_ACCT pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.513539 sshd[4667]: Accepted publickey for core from 10.0.0.1 port 55138 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:48.513000 audit[4667]: CRED_ACQ pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.513000 audit[4667]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2ce4650 a2=3 a3=1 items=0 ppid=1 pid=4667 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:48.513000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:48.515120 sshd[4667]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:48.518725 systemd-logind[1129]: New session 19 of user core. Feb 9 10:09:48.519664 systemd[1]: Started session-19.scope. Feb 9 10:09:48.522000 audit[4667]: USER_START pid=4667 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.523000 audit[4670]: CRED_ACQ pid=4670 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.796000 audit[4667]: USER_END pid=4667 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.796000 audit[4667]: CRED_DISP pid=4667 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.796617 sshd[4667]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:48.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.131:22-10.0.0.1:55152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:48.799667 systemd[1]: Started sshd@19-10.0.0.131:22-10.0.0.1:55152.service. Feb 9 10:09:48.801212 systemd[1]: sshd@18-10.0.0.131:22-10.0.0.1:55138.service: Deactivated successfully. Feb 9 10:09:48.801995 systemd[1]: session-19.scope: Deactivated successfully. Feb 9 10:09:48.802790 systemd-logind[1129]: Session 19 logged out. Waiting for processes to exit. Feb 9 10:09:48.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.131:22-10.0.0.1:55138 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:48.803790 systemd-logind[1129]: Removed session 19. Feb 9 10:09:48.844000 audit[4679]: USER_ACCT pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.846094 sshd[4679]: Accepted publickey for core from 10.0.0.1 port 55152 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:48.846000 audit[4679]: CRED_ACQ pid=4679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.846000 audit[4679]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa501610 a2=3 a3=1 items=0 ppid=1 pid=4679 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:48.846000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:48.847742 sshd[4679]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:48.851736 systemd-logind[1129]: New session 20 of user core. Feb 9 10:09:48.852667 systemd[1]: Started session-20.scope. Feb 9 10:09:48.856000 audit[4679]: USER_START pid=4679 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.858000 audit[4682]: CRED_ACQ pid=4682 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.970741 sshd[4679]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:48.970000 audit[4679]: USER_END pid=4679 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.970000 audit[4679]: CRED_DISP pid=4679 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:48.973562 systemd[1]: sshd@19-10.0.0.131:22-10.0.0.1:55152.service: Deactivated successfully. Feb 9 10:09:48.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.131:22-10.0.0.1:55152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:48.974351 systemd[1]: session-20.scope: Deactivated successfully. Feb 9 10:09:48.975044 systemd-logind[1129]: Session 20 logged out. Waiting for processes to exit. Feb 9 10:09:48.975779 systemd-logind[1129]: Removed session 20. Feb 9 10:09:53.033355 kernel: kauditd_printk_skb: 57 callbacks suppressed Feb 9 10:09:53.033488 kernel: audit: type=1325 audit(1707473393.027:1431): table=filter:114 family=2 entries=20 op=nft_register_rule pid=4702 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:53.033513 kernel: audit: type=1300 audit(1707473393.027:1431): arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffda71dfd0 a2=0 a3=ffff9593a6c0 items=0 ppid=2180 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:53.027000 audit[4702]: NETFILTER_CFG table=filter:114 family=2 entries=20 op=nft_register_rule pid=4702 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:53.027000 audit[4702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffda71dfd0 a2=0 a3=ffff9593a6c0 items=0 ppid=2180 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:53.033829 kernel: audit: type=1327 audit(1707473393.027:1431): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:53.027000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:53.029000 audit[4702]: NETFILTER_CFG table=nat:115 family=2 entries=104 op=nft_register_chain pid=4702 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:53.029000 audit[4702]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=47436 a0=3 a1=ffffda71dfd0 a2=0 a3=ffff9593a6c0 items=0 ppid=2180 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:53.044932 kernel: audit: type=1325 audit(1707473393.029:1432): table=nat:115 family=2 entries=104 op=nft_register_chain pid=4702 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:09:53.045144 kernel: audit: type=1300 audit(1707473393.029:1432): arch=c00000b7 syscall=211 success=yes exit=47436 a0=3 a1=ffffda71dfd0 a2=0 a3=ffff9593a6c0 items=0 ppid=2180 pid=4702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:53.045178 kernel: audit: type=1327 audit(1707473393.029:1432): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:53.029000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:09:53.975202 systemd[1]: Started sshd@20-10.0.0.131:22-10.0.0.1:60058.service. Feb 9 10:09:53.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.131:22-10.0.0.1:60058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:53.978333 kernel: audit: type=1130 audit(1707473393.974:1433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.131:22-10.0.0.1:60058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:54.016000 audit[4705]: USER_ACCT pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:54.017968 sshd[4705]: Accepted publickey for core from 10.0.0.1 port 60058 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:54.019650 sshd[4705]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:54.017000 audit[4705]: CRED_ACQ pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:54.022334 kernel: audit: type=1101 audit(1707473394.016:1434): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:54.022390 kernel: audit: type=1103 audit(1707473394.017:1435): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:54.022407 kernel: audit: type=1006 audit(1707473394.018:1436): pid=4705 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Feb 9 10:09:54.018000 audit[4705]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeec79b90 a2=3 a3=1 items=0 ppid=1 pid=4705 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:54.018000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:54.023867 systemd-logind[1129]: New session 21 of user core. Feb 9 10:09:54.024753 systemd[1]: Started session-21.scope. Feb 9 10:09:54.027000 audit[4705]: USER_START pid=4705 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:54.029000 audit[4707]: CRED_ACQ pid=4707 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:54.135620 sshd[4705]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:54.135000 audit[4705]: USER_END pid=4705 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:54.135000 audit[4705]: CRED_DISP pid=4705 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:54.136000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.131:22-10.0.0.1:60058 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:54.137996 systemd[1]: sshd@20-10.0.0.131:22-10.0.0.1:60058.service: Deactivated successfully. Feb 9 10:09:54.138798 systemd[1]: session-21.scope: Deactivated successfully. Feb 9 10:09:54.139879 systemd-logind[1129]: Session 21 logged out. Waiting for processes to exit. Feb 9 10:09:54.140725 systemd-logind[1129]: Removed session 21. Feb 9 10:09:54.272777 kubelet[2018]: E0209 10:09:54.272306 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:09:56.343000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:56.343000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002762020 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:09:56.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:09:56.343000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:56.343000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002c82660 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:09:56.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:09:56.343000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:56.343000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002762040 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:09:56.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:09:56.344000 audit[1885]: AVC avc: denied { watch } for pid=1885 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 10:09:56.344000 audit[1885]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002762160 a2=fc6 a3=0 items=0 ppid=1737 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c274,c623 key=(null) Feb 9 10:09:56.344000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 10:09:59.140676 systemd[1]: Started sshd@21-10.0.0.131:22-10.0.0.1:60066.service. Feb 9 10:09:59.143609 kernel: kauditd_printk_skb: 19 callbacks suppressed Feb 9 10:09:59.143639 kernel: audit: type=1130 audit(1707473399.139:1446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.131:22-10.0.0.1:60066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:59.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.131:22-10.0.0.1:60066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:59.181000 audit[4763]: USER_ACCT pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.183349 sshd[4763]: Accepted publickey for core from 10.0.0.1 port 60066 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:09:59.184827 sshd[4763]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:09:59.183000 audit[4763]: CRED_ACQ pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.187685 kernel: audit: type=1101 audit(1707473399.181:1447): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.187738 kernel: audit: type=1103 audit(1707473399.183:1448): pid=4763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.187761 kernel: audit: type=1006 audit(1707473399.183:1449): pid=4763 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Feb 9 10:09:59.188625 systemd-logind[1129]: New session 22 of user core. Feb 9 10:09:59.189032 kernel: audit: type=1300 audit(1707473399.183:1449): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd057e7f0 a2=3 a3=1 items=0 ppid=1 pid=4763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:59.183000 audit[4763]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd057e7f0 a2=3 a3=1 items=0 ppid=1 pid=4763 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:09:59.189016 systemd[1]: Started session-22.scope. Feb 9 10:09:59.183000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:59.192330 kernel: audit: type=1327 audit(1707473399.183:1449): proctitle=737368643A20636F7265205B707269765D Feb 9 10:09:59.191000 audit[4763]: USER_START pid=4763 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.192000 audit[4765]: CRED_ACQ pid=4765 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.197213 kernel: audit: type=1105 audit(1707473399.191:1450): pid=4763 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.197242 kernel: audit: type=1103 audit(1707473399.192:1451): pid=4765 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.298451 sshd[4763]: pam_unix(sshd:session): session closed for user core Feb 9 10:09:59.298000 audit[4763]: USER_END pid=4763 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.301437 systemd[1]: sshd@21-10.0.0.131:22-10.0.0.1:60066.service: Deactivated successfully. Feb 9 10:09:59.298000 audit[4763]: CRED_DISP pid=4763 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.302180 systemd[1]: session-22.scope: Deactivated successfully. Feb 9 10:09:59.302749 systemd-logind[1129]: Session 22 logged out. Waiting for processes to exit. Feb 9 10:09:59.303443 systemd-logind[1129]: Removed session 22. Feb 9 10:09:59.304137 kernel: audit: type=1106 audit(1707473399.298:1452): pid=4763 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.304183 kernel: audit: type=1104 audit(1707473399.298:1453): pid=4763 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:09:59.298000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.131:22-10.0.0.1:60066 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:09:59.704147 kubelet[2018]: E0209 10:09:59.704099 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:10:04.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.131:22-10.0.0.1:60634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:10:04.303027 systemd[1]: Started sshd@22-10.0.0.131:22-10.0.0.1:60634.service. Feb 9 10:10:04.304109 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 10:10:04.304170 kernel: audit: type=1130 audit(1707473404.301:1455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.131:22-10.0.0.1:60634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:10:04.324000 audit[4782]: NETFILTER_CFG table=filter:116 family=2 entries=9 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:10:04.324000 audit[4782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffc023ca30 a2=0 a3=ffff9e8e96c0 items=0 ppid=2180 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.330813 kernel: audit: type=1325 audit(1707473404.324:1456): table=filter:116 family=2 entries=9 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:10:04.330880 kernel: audit: type=1300 audit(1707473404.324:1456): arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffc023ca30 a2=0 a3=ffff9e8e96c0 items=0 ppid=2180 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.324000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:10:04.332635 kernel: audit: type=1327 audit(1707473404.324:1456): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:10:04.333487 kubelet[2018]: I0209 10:10:04.333452 2018 topology_manager.go:215] "Topology Admit Handler" podUID="32070d4d-18cb-4b41-b97d-9d518a8a33f4" podNamespace="calico-apiserver" podName="calico-apiserver-5d9657db9-9w56m" Feb 9 10:10:04.324000 audit[4782]: NETFILTER_CFG table=nat:117 family=2 entries=44 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:10:04.324000 audit[4782]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffc023ca30 a2=0 a3=ffff9e8e96c0 items=0 ppid=2180 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.338261 systemd[1]: Created slice kubepods-besteffort-pod32070d4d_18cb_4b41_b97d_9d518a8a33f4.slice. Feb 9 10:10:04.340327 kernel: audit: type=1325 audit(1707473404.324:1457): table=nat:117 family=2 entries=44 op=nft_register_rule pid=4782 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:10:04.340380 kernel: audit: type=1300 audit(1707473404.324:1457): arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffc023ca30 a2=0 a3=ffff9e8e96c0 items=0 ppid=2180 pid=4782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.324000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:10:04.342082 kernel: audit: type=1327 audit(1707473404.324:1457): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:10:04.348000 audit[4779]: USER_ACCT pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:10:04.350012 sshd[4779]: Accepted publickey for core from 10.0.0.1 port 60634 ssh2: RSA SHA256:g0U6KM199woo3jVvTXJmbHJGWRxGxX9UCqO141QChXg Feb 9 10:10:04.353330 kernel: audit: type=1101 audit(1707473404.348:1458): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:10:04.352000 audit[4779]: CRED_ACQ pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:10:04.354137 sshd[4779]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 10:10:04.357690 kernel: audit: type=1103 audit(1707473404.352:1459): pid=4779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:10:04.357745 kernel: audit: type=1006 audit(1707473404.352:1460): pid=4779 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Feb 9 10:10:04.352000 audit[4779]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc92d83c0 a2=3 a3=1 items=0 ppid=1 pid=4779 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.352000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 10:10:04.358388 systemd-logind[1129]: New session 23 of user core. Feb 9 10:10:04.358588 systemd[1]: Started session-23.scope. Feb 9 10:10:04.361000 audit[4779]: USER_START pid=4779 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:10:04.361000 audit[4784]: NETFILTER_CFG table=filter:118 family=2 entries=10 op=nft_register_rule pid=4784 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:10:04.361000 audit[4784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffc0251240 a2=0 a3=ffff902806c0 items=0 ppid=2180 pid=4784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.361000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:10:04.363000 audit[4785]: CRED_ACQ pid=4785 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:10:04.363000 audit[4784]: NETFILTER_CFG table=nat:119 family=2 entries=44 op=nft_register_rule pid=4784 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 10:10:04.363000 audit[4784]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffc0251240 a2=0 a3=ffff902806c0 items=0 ppid=2180 pid=4784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.363000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 10:10:04.408443 kubelet[2018]: I0209 10:10:04.408114 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/32070d4d-18cb-4b41-b97d-9d518a8a33f4-calico-apiserver-certs\") pod \"calico-apiserver-5d9657db9-9w56m\" (UID: \"32070d4d-18cb-4b41-b97d-9d518a8a33f4\") " pod="calico-apiserver/calico-apiserver-5d9657db9-9w56m" Feb 9 10:10:04.408443 kubelet[2018]: I0209 10:10:04.408161 2018 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fvlgc\" (UniqueName: \"kubernetes.io/projected/32070d4d-18cb-4b41-b97d-9d518a8a33f4-kube-api-access-fvlgc\") pod \"calico-apiserver-5d9657db9-9w56m\" (UID: \"32070d4d-18cb-4b41-b97d-9d518a8a33f4\") " pod="calico-apiserver/calico-apiserver-5d9657db9-9w56m" Feb 9 10:10:04.496998 sshd[4779]: pam_unix(sshd:session): session closed for user core Feb 9 10:10:04.496000 audit[4779]: USER_END pid=4779 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:10:04.496000 audit[4779]: CRED_DISP pid=4779 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 10:10:04.500168 systemd[1]: sshd@22-10.0.0.131:22-10.0.0.1:60634.service: Deactivated successfully. Feb 9 10:10:04.499000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.131:22-10.0.0.1:60634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 10:10:04.500926 systemd[1]: session-23.scope: Deactivated successfully. Feb 9 10:10:04.501710 systemd-logind[1129]: Session 23 logged out. Waiting for processes to exit. Feb 9 10:10:04.503961 systemd-logind[1129]: Removed session 23. Feb 9 10:10:04.641413 env[1143]: time="2024-02-09T10:10:04.641013756Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d9657db9-9w56m,Uid:32070d4d-18cb-4b41-b97d-9d518a8a33f4,Namespace:calico-apiserver,Attempt:0,}" Feb 9 10:10:04.751805 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 10:10:04.751903 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8410647db35: link becomes ready Feb 9 10:10:04.750845 systemd-networkd[1036]: cali8410647db35: Link UP Feb 9 10:10:04.752193 systemd-networkd[1036]: cali8410647db35: Gained carrier Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.678 [INFO][4798] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0 calico-apiserver-5d9657db9- calico-apiserver 32070d4d-18cb-4b41-b97d-9d518a8a33f4 1086 0 2024-02-09 10:10:04 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5d9657db9 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5d9657db9-9w56m eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8410647db35 [] []}} ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Namespace="calico-apiserver" Pod="calico-apiserver-5d9657db9-9w56m" WorkloadEndpoint="localhost-k8s-calico--apiserver--5d9657db9--9w56m-" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.678 [INFO][4798] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Namespace="calico-apiserver" Pod="calico-apiserver-5d9657db9-9w56m" WorkloadEndpoint="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.701 [INFO][4812] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" HandleID="k8s-pod-network.e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Workload="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.716 [INFO][4812] ipam_plugin.go 268: Auto assigning IP ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" HandleID="k8s-pod-network.e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Workload="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000261980), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5d9657db9-9w56m", "timestamp":"2024-02-09 10:10:04.701861558 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.716 [INFO][4812] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.716 [INFO][4812] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.716 [INFO][4812] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.719 [INFO][4812] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" host="localhost" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.726 [INFO][4812] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.730 [INFO][4812] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.731 [INFO][4812] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.733 [INFO][4812] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.734 [INFO][4812] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" host="localhost" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.735 [INFO][4812] ipam.go 1682: Creating new handle: k8s-pod-network.e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.738 [INFO][4812] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" host="localhost" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.743 [INFO][4812] ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" host="localhost" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.743 [INFO][4812] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" host="localhost" Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.743 [INFO][4812] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 10:10:04.770835 env[1143]: 2024-02-09 10:10:04.743 [INFO][4812] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" HandleID="k8s-pod-network.e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Workload="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" Feb 9 10:10:04.771524 env[1143]: 2024-02-09 10:10:04.748 [INFO][4798] k8s.go 385: Populated endpoint ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Namespace="calico-apiserver" Pod="calico-apiserver-5d9657db9-9w56m" WorkloadEndpoint="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0", GenerateName:"calico-apiserver-5d9657db9-", Namespace:"calico-apiserver", SelfLink:"", UID:"32070d4d-18cb-4b41-b97d-9d518a8a33f4", ResourceVersion:"1086", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 10, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d9657db9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5d9657db9-9w56m", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8410647db35", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:10:04.771524 env[1143]: 2024-02-09 10:10:04.749 [INFO][4798] k8s.go 386: Calico CNI using IPs: [192.168.88.133/32] ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Namespace="calico-apiserver" Pod="calico-apiserver-5d9657db9-9w56m" WorkloadEndpoint="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" Feb 9 10:10:04.771524 env[1143]: 2024-02-09 10:10:04.749 [INFO][4798] dataplane_linux.go 68: Setting the host side veth name to cali8410647db35 ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Namespace="calico-apiserver" Pod="calico-apiserver-5d9657db9-9w56m" WorkloadEndpoint="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" Feb 9 10:10:04.771524 env[1143]: 2024-02-09 10:10:04.750 [INFO][4798] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Namespace="calico-apiserver" Pod="calico-apiserver-5d9657db9-9w56m" WorkloadEndpoint="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" Feb 9 10:10:04.771524 env[1143]: 2024-02-09 10:10:04.751 [INFO][4798] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Namespace="calico-apiserver" Pod="calico-apiserver-5d9657db9-9w56m" WorkloadEndpoint="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0", GenerateName:"calico-apiserver-5d9657db9-", Namespace:"calico-apiserver", SelfLink:"", UID:"32070d4d-18cb-4b41-b97d-9d518a8a33f4", ResourceVersion:"1086", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 10, 10, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5d9657db9", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf", Pod:"calico-apiserver-5d9657db9-9w56m", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8410647db35", MAC:"8e:5d:60:d9:16:0e", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 10:10:04.771524 env[1143]: 2024-02-09 10:10:04.768 [INFO][4798] k8s.go 491: Wrote updated endpoint to datastore ContainerID="e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf" Namespace="calico-apiserver" Pod="calico-apiserver-5d9657db9-9w56m" WorkloadEndpoint="localhost-k8s-calico--apiserver--5d9657db9--9w56m-eth0" Feb 9 10:10:04.787299 env[1143]: time="2024-02-09T10:10:04.787228865Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 10:10:04.787299 env[1143]: time="2024-02-09T10:10:04.787266385Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 10:10:04.787299 env[1143]: time="2024-02-09T10:10:04.787278665Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 10:10:04.787661 env[1143]: time="2024-02-09T10:10:04.787621464Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf pid=4847 runtime=io.containerd.runc.v2 Feb 9 10:10:04.792000 audit[4848]: NETFILTER_CFG table=filter:120 family=2 entries=55 op=nft_register_chain pid=4848 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 10:10:04.792000 audit[4848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28088 a0=3 a1=ffffd4b28600 a2=0 a3=ffffb6761fa8 items=0 ppid=3904 pid=4848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.792000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 10:10:04.799759 systemd[1]: Started cri-containerd-e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf.scope. Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit: BPF prog-id=185 op=LOAD Feb 9 10:10:04.819000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.819000 audit[4857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4847 pid=4857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.819000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323962653936663936643639393535313836303963303832633038 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4847 pid=4857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323962653936663936643639393535313836303963303832633038 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit: BPF prog-id=186 op=LOAD Feb 9 10:10:04.820000 audit[4857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4847 pid=4857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323962653936663936643639393535313836303963303832633038 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.820000 audit: BPF prog-id=187 op=LOAD Feb 9 10:10:04.820000 audit[4857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4847 pid=4857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.820000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323962653936663936643639393535313836303963303832633038 Feb 9 10:10:04.821000 audit: BPF prog-id=187 op=UNLOAD Feb 9 10:10:04.821000 audit: BPF prog-id=186 op=UNLOAD Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { perfmon } for pid=4857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit[4857]: AVC avc: denied { bpf } for pid=4857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 10:10:04.821000 audit: BPF prog-id=188 op=LOAD Feb 9 10:10:04.821000 audit[4857]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4847 pid=4857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 10:10:04.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6537323962653936663936643639393535313836303963303832633038 Feb 9 10:10:04.823971 systemd-resolved[1088]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 10:10:04.840928 env[1143]: time="2024-02-09T10:10:04.840882536Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5d9657db9-9w56m,Uid:32070d4d-18cb-4b41-b97d-9d518a8a33f4,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"e729be96f96d6995518609c082c08cec46f97987d17e7ebce847d8f19f226fdf\"" Feb 9 10:10:04.844297 env[1143]: time="2024-02-09T10:10:04.844261523Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 9 10:10:05.704079 kubelet[2018]: E0209 10:10:05.704043 2018 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 10:10:06.042077 systemd-networkd[1036]: cali8410647db35: Gained IPv6LL