Feb 9 18:23:32.744290 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Feb 9 18:23:32.744310 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Feb 9 17:24:35 -00 2024 Feb 9 18:23:32.744317 kernel: efi: EFI v2.70 by EDK II Feb 9 18:23:32.744323 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Feb 9 18:23:32.744328 kernel: random: crng init done Feb 9 18:23:32.744333 kernel: ACPI: Early table checksum verification disabled Feb 9 18:23:32.744339 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Feb 9 18:23:32.744346 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Feb 9 18:23:32.744351 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:23:32.744357 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:23:32.744362 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:23:32.744367 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:23:32.744373 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:23:32.744378 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:23:32.744386 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:23:32.744392 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:23:32.744398 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:23:32.744404 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Feb 9 18:23:32.744410 kernel: NUMA: Failed to initialise from firmware Feb 9 18:23:32.744416 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Feb 9 18:23:32.744421 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Feb 9 18:23:32.744427 kernel: Zone ranges: Feb 9 18:23:32.744432 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Feb 9 18:23:32.744440 kernel: DMA32 empty Feb 9 18:23:32.744446 kernel: Normal empty Feb 9 18:23:32.744452 kernel: Movable zone start for each node Feb 9 18:23:32.744457 kernel: Early memory node ranges Feb 9 18:23:32.744463 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Feb 9 18:23:32.744469 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Feb 9 18:23:32.744475 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Feb 9 18:23:32.744481 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Feb 9 18:23:32.744486 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Feb 9 18:23:32.744492 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Feb 9 18:23:32.744498 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Feb 9 18:23:32.744503 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Feb 9 18:23:32.744510 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Feb 9 18:23:32.744517 kernel: psci: probing for conduit method from ACPI. Feb 9 18:23:32.744522 kernel: psci: PSCIv1.1 detected in firmware. Feb 9 18:23:32.744588 kernel: psci: Using standard PSCI v0.2 function IDs Feb 9 18:23:32.744594 kernel: psci: Trusted OS migration not required Feb 9 18:23:32.744603 kernel: psci: SMC Calling Convention v1.1 Feb 9 18:23:32.744610 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Feb 9 18:23:32.744617 kernel: ACPI: SRAT not present Feb 9 18:23:32.744624 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Feb 9 18:23:32.744630 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Feb 9 18:23:32.744636 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Feb 9 18:23:32.744642 kernel: Detected PIPT I-cache on CPU0 Feb 9 18:23:32.744648 kernel: CPU features: detected: GIC system register CPU interface Feb 9 18:23:32.744654 kernel: CPU features: detected: Hardware dirty bit management Feb 9 18:23:32.744660 kernel: CPU features: detected: Spectre-v4 Feb 9 18:23:32.744666 kernel: CPU features: detected: Spectre-BHB Feb 9 18:23:32.744673 kernel: CPU features: kernel page table isolation forced ON by KASLR Feb 9 18:23:32.744680 kernel: CPU features: detected: Kernel page table isolation (KPTI) Feb 9 18:23:32.744686 kernel: CPU features: detected: ARM erratum 1418040 Feb 9 18:23:32.744692 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Feb 9 18:23:32.744698 kernel: Policy zone: DMA Feb 9 18:23:32.744704 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=680ffc8c0dfb23738bd19ec96ea37b5bbadfb5cebf23767d1d52c89a6d5c00b4 Feb 9 18:23:32.744711 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 9 18:23:32.744717 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Feb 9 18:23:32.744723 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 9 18:23:32.744730 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 9 18:23:32.744736 kernel: Memory: 2459152K/2572288K available (9792K kernel code, 2092K rwdata, 7556K rodata, 34688K init, 778K bss, 113136K reserved, 0K cma-reserved) Feb 9 18:23:32.744743 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Feb 9 18:23:32.744756 kernel: trace event string verifier disabled Feb 9 18:23:32.744762 kernel: rcu: Preemptible hierarchical RCU implementation. Feb 9 18:23:32.744768 kernel: rcu: RCU event tracing is enabled. Feb 9 18:23:32.744774 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Feb 9 18:23:32.744781 kernel: Trampoline variant of Tasks RCU enabled. Feb 9 18:23:32.744787 kernel: Tracing variant of Tasks RCU enabled. Feb 9 18:23:32.744793 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 9 18:23:32.744799 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Feb 9 18:23:32.744805 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Feb 9 18:23:32.744811 kernel: GICv3: 256 SPIs implemented Feb 9 18:23:32.744818 kernel: GICv3: 0 Extended SPIs implemented Feb 9 18:23:32.744825 kernel: GICv3: Distributor has no Range Selector support Feb 9 18:23:32.744830 kernel: Root IRQ handler: gic_handle_irq Feb 9 18:23:32.744836 kernel: GICv3: 16 PPIs implemented Feb 9 18:23:32.744842 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Feb 9 18:23:32.744848 kernel: ACPI: SRAT not present Feb 9 18:23:32.744854 kernel: ITS [mem 0x08080000-0x0809ffff] Feb 9 18:23:32.744861 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Feb 9 18:23:32.744867 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Feb 9 18:23:32.744873 kernel: GICv3: using LPI property table @0x00000000400d0000 Feb 9 18:23:32.744879 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Feb 9 18:23:32.744885 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 18:23:32.744935 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Feb 9 18:23:32.744942 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Feb 9 18:23:32.744949 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Feb 9 18:23:32.744955 kernel: arm-pv: using stolen time PV Feb 9 18:23:32.744961 kernel: Console: colour dummy device 80x25 Feb 9 18:23:32.744968 kernel: ACPI: Core revision 20210730 Feb 9 18:23:32.744974 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Feb 9 18:23:32.744980 kernel: pid_max: default: 32768 minimum: 301 Feb 9 18:23:32.744987 kernel: LSM: Security Framework initializing Feb 9 18:23:32.744993 kernel: SELinux: Initializing. Feb 9 18:23:32.745002 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 18:23:32.745008 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 18:23:32.745014 kernel: rcu: Hierarchical SRCU implementation. Feb 9 18:23:32.745020 kernel: Platform MSI: ITS@0x8080000 domain created Feb 9 18:23:32.745026 kernel: PCI/MSI: ITS@0x8080000 domain created Feb 9 18:23:32.745032 kernel: Remapping and enabling EFI services. Feb 9 18:23:32.745038 kernel: smp: Bringing up secondary CPUs ... Feb 9 18:23:32.745045 kernel: Detected PIPT I-cache on CPU1 Feb 9 18:23:32.745051 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Feb 9 18:23:32.745059 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Feb 9 18:23:32.745066 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 18:23:32.745072 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Feb 9 18:23:32.745078 kernel: Detected PIPT I-cache on CPU2 Feb 9 18:23:32.745084 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Feb 9 18:23:32.745091 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Feb 9 18:23:32.745097 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 18:23:32.745103 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Feb 9 18:23:32.745109 kernel: Detected PIPT I-cache on CPU3 Feb 9 18:23:32.745115 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Feb 9 18:23:32.745123 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Feb 9 18:23:32.745129 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 18:23:32.745135 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Feb 9 18:23:32.745141 kernel: smp: Brought up 1 node, 4 CPUs Feb 9 18:23:32.745152 kernel: SMP: Total of 4 processors activated. Feb 9 18:23:32.745160 kernel: CPU features: detected: 32-bit EL0 Support Feb 9 18:23:32.745167 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Feb 9 18:23:32.745173 kernel: CPU features: detected: Common not Private translations Feb 9 18:23:32.745180 kernel: CPU features: detected: CRC32 instructions Feb 9 18:23:32.745186 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Feb 9 18:23:32.745193 kernel: CPU features: detected: LSE atomic instructions Feb 9 18:23:32.745200 kernel: CPU features: detected: Privileged Access Never Feb 9 18:23:32.745208 kernel: CPU features: detected: RAS Extension Support Feb 9 18:23:32.745215 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Feb 9 18:23:32.745221 kernel: CPU: All CPU(s) started at EL1 Feb 9 18:23:32.745228 kernel: alternatives: patching kernel code Feb 9 18:23:32.745234 kernel: devtmpfs: initialized Feb 9 18:23:32.745242 kernel: KASLR enabled Feb 9 18:23:32.745249 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 9 18:23:32.745256 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Feb 9 18:23:32.745262 kernel: pinctrl core: initialized pinctrl subsystem Feb 9 18:23:32.745269 kernel: SMBIOS 3.0.0 present. Feb 9 18:23:32.745275 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Feb 9 18:23:32.745282 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 9 18:23:32.745288 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Feb 9 18:23:32.745295 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Feb 9 18:23:32.745303 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Feb 9 18:23:32.745309 kernel: audit: initializing netlink subsys (disabled) Feb 9 18:23:32.745316 kernel: audit: type=2000 audit(0.030:1): state=initialized audit_enabled=0 res=1 Feb 9 18:23:32.745323 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 9 18:23:32.745329 kernel: cpuidle: using governor menu Feb 9 18:23:32.745336 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Feb 9 18:23:32.745342 kernel: ASID allocator initialised with 32768 entries Feb 9 18:23:32.745349 kernel: ACPI: bus type PCI registered Feb 9 18:23:32.745355 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 9 18:23:32.745363 kernel: Serial: AMBA PL011 UART driver Feb 9 18:23:32.745369 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 9 18:23:32.745376 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Feb 9 18:23:32.745382 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 9 18:23:32.745389 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Feb 9 18:23:32.745396 kernel: cryptd: max_cpu_qlen set to 1000 Feb 9 18:23:32.745403 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Feb 9 18:23:32.745409 kernel: ACPI: Added _OSI(Module Device) Feb 9 18:23:32.745416 kernel: ACPI: Added _OSI(Processor Device) Feb 9 18:23:32.745423 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 9 18:23:32.745430 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 9 18:23:32.745436 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 9 18:23:32.745443 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 9 18:23:32.745449 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 9 18:23:32.745456 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 9 18:23:32.745462 kernel: ACPI: Interpreter enabled Feb 9 18:23:32.745469 kernel: ACPI: Using GIC for interrupt routing Feb 9 18:23:32.745475 kernel: ACPI: MCFG table detected, 1 entries Feb 9 18:23:32.745483 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Feb 9 18:23:32.745489 kernel: printk: console [ttyAMA0] enabled Feb 9 18:23:32.745496 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Feb 9 18:23:32.745652 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Feb 9 18:23:32.745717 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Feb 9 18:23:32.745783 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Feb 9 18:23:32.745841 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Feb 9 18:23:32.745901 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Feb 9 18:23:32.745910 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Feb 9 18:23:32.745917 kernel: PCI host bridge to bus 0000:00 Feb 9 18:23:32.745986 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Feb 9 18:23:32.746040 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Feb 9 18:23:32.746093 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Feb 9 18:23:32.746144 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Feb 9 18:23:32.746217 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Feb 9 18:23:32.746293 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Feb 9 18:23:32.746354 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Feb 9 18:23:32.746414 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Feb 9 18:23:32.746474 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Feb 9 18:23:32.746571 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Feb 9 18:23:32.746636 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Feb 9 18:23:32.746698 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Feb 9 18:23:32.746759 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Feb 9 18:23:32.746813 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Feb 9 18:23:32.746866 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Feb 9 18:23:32.746875 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Feb 9 18:23:32.746882 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Feb 9 18:23:32.746889 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Feb 9 18:23:32.746898 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Feb 9 18:23:32.746904 kernel: iommu: Default domain type: Translated Feb 9 18:23:32.746911 kernel: iommu: DMA domain TLB invalidation policy: strict mode Feb 9 18:23:32.746918 kernel: vgaarb: loaded Feb 9 18:23:32.746924 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 9 18:23:32.746931 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 9 18:23:32.746938 kernel: PTP clock support registered Feb 9 18:23:32.746945 kernel: Registered efivars operations Feb 9 18:23:32.746951 kernel: clocksource: Switched to clocksource arch_sys_counter Feb 9 18:23:32.746958 kernel: VFS: Disk quotas dquot_6.6.0 Feb 9 18:23:32.746966 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 9 18:23:32.746972 kernel: pnp: PnP ACPI init Feb 9 18:23:32.747036 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Feb 9 18:23:32.747046 kernel: pnp: PnP ACPI: found 1 devices Feb 9 18:23:32.747052 kernel: NET: Registered PF_INET protocol family Feb 9 18:23:32.747059 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 9 18:23:32.747066 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Feb 9 18:23:32.747072 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 9 18:23:32.747081 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 9 18:23:32.747088 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Feb 9 18:23:32.747095 kernel: TCP: Hash tables configured (established 32768 bind 32768) Feb 9 18:23:32.747101 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 18:23:32.747108 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 18:23:32.747114 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 9 18:23:32.747121 kernel: PCI: CLS 0 bytes, default 64 Feb 9 18:23:32.747128 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Feb 9 18:23:32.747135 kernel: kvm [1]: HYP mode not available Feb 9 18:23:32.747142 kernel: Initialise system trusted keyrings Feb 9 18:23:32.747149 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Feb 9 18:23:32.747155 kernel: Key type asymmetric registered Feb 9 18:23:32.747162 kernel: Asymmetric key parser 'x509' registered Feb 9 18:23:32.747168 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 9 18:23:32.747175 kernel: io scheduler mq-deadline registered Feb 9 18:23:32.747181 kernel: io scheduler kyber registered Feb 9 18:23:32.747188 kernel: io scheduler bfq registered Feb 9 18:23:32.747195 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Feb 9 18:23:32.747203 kernel: ACPI: button: Power Button [PWRB] Feb 9 18:23:32.747210 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Feb 9 18:23:32.747278 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Feb 9 18:23:32.747288 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 9 18:23:32.747295 kernel: thunder_xcv, ver 1.0 Feb 9 18:23:32.747302 kernel: thunder_bgx, ver 1.0 Feb 9 18:23:32.747308 kernel: nicpf, ver 1.0 Feb 9 18:23:32.747315 kernel: nicvf, ver 1.0 Feb 9 18:23:32.747384 kernel: rtc-efi rtc-efi.0: registered as rtc0 Feb 9 18:23:32.747445 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-02-09T18:23:32 UTC (1707503012) Feb 9 18:23:32.747454 kernel: hid: raw HID events driver (C) Jiri Kosina Feb 9 18:23:32.747461 kernel: NET: Registered PF_INET6 protocol family Feb 9 18:23:32.747472 kernel: Segment Routing with IPv6 Feb 9 18:23:32.747479 kernel: In-situ OAM (IOAM) with IPv6 Feb 9 18:23:32.747486 kernel: NET: Registered PF_PACKET protocol family Feb 9 18:23:32.747493 kernel: Key type dns_resolver registered Feb 9 18:23:32.747500 kernel: registered taskstats version 1 Feb 9 18:23:32.747509 kernel: Loading compiled-in X.509 certificates Feb 9 18:23:32.747519 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: 947a80114e81e2815f6db72a0d388260762488f9' Feb 9 18:23:32.747532 kernel: Key type .fscrypt registered Feb 9 18:23:32.747539 kernel: Key type fscrypt-provisioning registered Feb 9 18:23:32.747557 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 9 18:23:32.747565 kernel: ima: Allocated hash algorithm: sha1 Feb 9 18:23:32.747572 kernel: ima: No architecture policies found Feb 9 18:23:32.747582 kernel: Freeing unused kernel memory: 34688K Feb 9 18:23:32.747589 kernel: Run /init as init process Feb 9 18:23:32.747598 kernel: with arguments: Feb 9 18:23:32.747605 kernel: /init Feb 9 18:23:32.747613 kernel: with environment: Feb 9 18:23:32.747619 kernel: HOME=/ Feb 9 18:23:32.747626 kernel: TERM=linux Feb 9 18:23:32.747633 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 9 18:23:32.747642 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 18:23:32.747651 systemd[1]: Detected virtualization kvm. Feb 9 18:23:32.747661 systemd[1]: Detected architecture arm64. Feb 9 18:23:32.747668 systemd[1]: Running in initrd. Feb 9 18:23:32.747675 systemd[1]: No hostname configured, using default hostname. Feb 9 18:23:32.747682 systemd[1]: Hostname set to . Feb 9 18:23:32.747690 systemd[1]: Initializing machine ID from VM UUID. Feb 9 18:23:32.747698 systemd[1]: Queued start job for default target initrd.target. Feb 9 18:23:32.747705 systemd[1]: Started systemd-ask-password-console.path. Feb 9 18:23:32.747712 systemd[1]: Reached target cryptsetup.target. Feb 9 18:23:32.747721 systemd[1]: Reached target paths.target. Feb 9 18:23:32.747728 systemd[1]: Reached target slices.target. Feb 9 18:23:32.747735 systemd[1]: Reached target swap.target. Feb 9 18:23:32.747743 systemd[1]: Reached target timers.target. Feb 9 18:23:32.747756 systemd[1]: Listening on iscsid.socket. Feb 9 18:23:32.747764 systemd[1]: Listening on iscsiuio.socket. Feb 9 18:23:32.747771 systemd[1]: Listening on systemd-journald-audit.socket. Feb 9 18:23:32.747780 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 9 18:23:32.747787 systemd[1]: Listening on systemd-journald.socket. Feb 9 18:23:32.747794 systemd[1]: Listening on systemd-networkd.socket. Feb 9 18:23:32.747801 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 18:23:32.747809 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 18:23:32.747816 systemd[1]: Reached target sockets.target. Feb 9 18:23:32.747823 systemd[1]: Starting kmod-static-nodes.service... Feb 9 18:23:32.747830 systemd[1]: Finished network-cleanup.service. Feb 9 18:23:32.747837 systemd[1]: Starting systemd-fsck-usr.service... Feb 9 18:23:32.747845 systemd[1]: Starting systemd-journald.service... Feb 9 18:23:32.747852 systemd[1]: Starting systemd-modules-load.service... Feb 9 18:23:32.747859 systemd[1]: Starting systemd-resolved.service... Feb 9 18:23:32.747866 systemd[1]: Starting systemd-vconsole-setup.service... Feb 9 18:23:32.747873 systemd[1]: Finished kmod-static-nodes.service. Feb 9 18:23:32.747880 systemd[1]: Finished systemd-fsck-usr.service. Feb 9 18:23:32.747888 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 18:23:32.747895 systemd[1]: Finished systemd-vconsole-setup.service. Feb 9 18:23:32.747902 systemd[1]: Starting dracut-cmdline-ask.service... Feb 9 18:23:32.747910 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 18:23:32.747918 kernel: audit: type=1130 audit(1707503012.744:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.747928 systemd-journald[291]: Journal started Feb 9 18:23:32.747971 systemd-journald[291]: Runtime Journal (/run/log/journal/1ca2993376eb403c94f437f105e9ffe5) is 6.0M, max 48.7M, 42.6M free. Feb 9 18:23:32.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.735359 systemd-modules-load[292]: Inserted module 'overlay' Feb 9 18:23:32.749594 systemd[1]: Started systemd-journald.service. Feb 9 18:23:32.751552 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 9 18:23:32.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.754314 systemd-modules-load[292]: Inserted module 'br_netfilter' Feb 9 18:23:32.755148 kernel: audit: type=1130 audit(1707503012.751:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.755166 kernel: Bridge firewalling registered Feb 9 18:23:32.762372 systemd[1]: Finished dracut-cmdline-ask.service. Feb 9 18:23:32.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.766544 kernel: audit: type=1130 audit(1707503012.763:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.766565 kernel: SCSI subsystem initialized Feb 9 18:23:32.766561 systemd-resolved[293]: Positive Trust Anchors: Feb 9 18:23:32.766569 systemd-resolved[293]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 18:23:32.766598 systemd-resolved[293]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 18:23:32.770698 systemd-resolved[293]: Defaulting to hostname 'linux'. Feb 9 18:23:32.776392 kernel: audit: type=1130 audit(1707503012.772:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.776411 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 9 18:23:32.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.771598 systemd[1]: Started systemd-resolved.service. Feb 9 18:23:32.775321 systemd[1]: Reached target nss-lookup.target. Feb 9 18:23:32.778624 kernel: device-mapper: uevent: version 1.0.3 Feb 9 18:23:32.778641 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 9 18:23:32.777834 systemd[1]: Starting dracut-cmdline.service... Feb 9 18:23:32.781935 systemd-modules-load[292]: Inserted module 'dm_multipath' Feb 9 18:23:32.782657 systemd[1]: Finished systemd-modules-load.service. Feb 9 18:23:32.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.786622 kernel: audit: type=1130 audit(1707503012.782:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.786306 systemd[1]: Starting systemd-sysctl.service... Feb 9 18:23:32.788208 dracut-cmdline[309]: dracut-dracut-053 Feb 9 18:23:32.790448 dracut-cmdline[309]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=680ffc8c0dfb23738bd19ec96ea37b5bbadfb5cebf23767d1d52c89a6d5c00b4 Feb 9 18:23:32.795487 systemd[1]: Finished systemd-sysctl.service. Feb 9 18:23:32.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.798547 kernel: audit: type=1130 audit(1707503012.795:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.849546 kernel: Loading iSCSI transport class v2.0-870. Feb 9 18:23:32.857547 kernel: iscsi: registered transport (tcp) Feb 9 18:23:32.871549 kernel: iscsi: registered transport (qla4xxx) Feb 9 18:23:32.871564 kernel: QLogic iSCSI HBA Driver Feb 9 18:23:32.906206 systemd[1]: Finished dracut-cmdline.service. Feb 9 18:23:32.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.907652 systemd[1]: Starting dracut-pre-udev.service... Feb 9 18:23:32.909917 kernel: audit: type=1130 audit(1707503012.906:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:32.951564 kernel: raid6: neonx8 gen() 13817 MB/s Feb 9 18:23:32.968567 kernel: raid6: neonx8 xor() 10818 MB/s Feb 9 18:23:32.985565 kernel: raid6: neonx4 gen() 13489 MB/s Feb 9 18:23:33.002554 kernel: raid6: neonx4 xor() 11136 MB/s Feb 9 18:23:33.019547 kernel: raid6: neonx2 gen() 12905 MB/s Feb 9 18:23:33.036559 kernel: raid6: neonx2 xor() 10219 MB/s Feb 9 18:23:33.053561 kernel: raid6: neonx1 gen() 10504 MB/s Feb 9 18:23:33.070564 kernel: raid6: neonx1 xor() 8750 MB/s Feb 9 18:23:33.087566 kernel: raid6: int64x8 gen() 6276 MB/s Feb 9 18:23:33.104556 kernel: raid6: int64x8 xor() 3536 MB/s Feb 9 18:23:33.121550 kernel: raid6: int64x4 gen() 7177 MB/s Feb 9 18:23:33.138569 kernel: raid6: int64x4 xor() 3839 MB/s Feb 9 18:23:33.155550 kernel: raid6: int64x2 gen() 6131 MB/s Feb 9 18:23:33.172555 kernel: raid6: int64x2 xor() 3312 MB/s Feb 9 18:23:33.189542 kernel: raid6: int64x1 gen() 5024 MB/s Feb 9 18:23:33.206789 kernel: raid6: int64x1 xor() 2639 MB/s Feb 9 18:23:33.206813 kernel: raid6: using algorithm neonx8 gen() 13817 MB/s Feb 9 18:23:33.206823 kernel: raid6: .... xor() 10818 MB/s, rmw enabled Feb 9 18:23:33.206832 kernel: raid6: using neon recovery algorithm Feb 9 18:23:33.226546 kernel: xor: measuring software checksum speed Feb 9 18:23:33.227539 kernel: 8regs : 17286 MB/sec Feb 9 18:23:33.228538 kernel: 32regs : 20749 MB/sec Feb 9 18:23:33.229548 kernel: arm64_neon : 27835 MB/sec Feb 9 18:23:33.229565 kernel: xor: using function: arm64_neon (27835 MB/sec) Feb 9 18:23:33.302562 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Feb 9 18:23:33.318019 systemd[1]: Finished dracut-pre-udev.service. Feb 9 18:23:33.321602 kernel: audit: type=1130 audit(1707503013.318:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:33.321653 kernel: audit: type=1334 audit(1707503013.320:10): prog-id=7 op=LOAD Feb 9 18:23:33.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:33.320000 audit: BPF prog-id=7 op=LOAD Feb 9 18:23:33.320000 audit: BPF prog-id=8 op=LOAD Feb 9 18:23:33.321976 systemd[1]: Starting systemd-udevd.service... Feb 9 18:23:33.335437 systemd-udevd[492]: Using default interface naming scheme 'v252'. Feb 9 18:23:33.338794 systemd[1]: Started systemd-udevd.service. Feb 9 18:23:33.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:33.340705 systemd[1]: Starting dracut-pre-trigger.service... Feb 9 18:23:33.351122 dracut-pre-trigger[499]: rd.md=0: removing MD RAID activation Feb 9 18:23:33.377201 systemd[1]: Finished dracut-pre-trigger.service. Feb 9 18:23:33.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:33.378709 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 18:23:33.412331 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 18:23:33.412000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:33.442804 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Feb 9 18:23:33.445618 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 9 18:23:33.445656 kernel: GPT:9289727 != 19775487 Feb 9 18:23:33.445665 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 9 18:23:33.445675 kernel: GPT:9289727 != 19775487 Feb 9 18:23:33.445693 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 9 18:23:33.446542 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 9 18:23:33.460548 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (539) Feb 9 18:23:33.462650 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 9 18:23:33.463671 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 9 18:23:33.467624 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 9 18:23:33.475141 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 9 18:23:33.478474 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 18:23:33.480079 systemd[1]: Starting disk-uuid.service... Feb 9 18:23:33.485862 disk-uuid[562]: Primary Header is updated. Feb 9 18:23:33.485862 disk-uuid[562]: Secondary Entries is updated. Feb 9 18:23:33.485862 disk-uuid[562]: Secondary Header is updated. Feb 9 18:23:33.488684 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 9 18:23:34.501545 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 9 18:23:34.501806 disk-uuid[563]: The operation has completed successfully. Feb 9 18:23:34.532571 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 9 18:23:34.532655 systemd[1]: Finished disk-uuid.service. Feb 9 18:23:34.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.534900 systemd[1]: Starting verity-setup.service... Feb 9 18:23:34.565556 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Feb 9 18:23:34.609379 systemd[1]: Found device dev-mapper-usr.device. Feb 9 18:23:34.611487 systemd[1]: Mounting sysusr-usr.mount... Feb 9 18:23:34.613461 systemd[1]: Finished verity-setup.service. Feb 9 18:23:34.614000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.662571 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 9 18:23:34.662838 systemd[1]: Mounted sysusr-usr.mount. Feb 9 18:23:34.663650 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 9 18:23:34.664435 systemd[1]: Starting ignition-setup.service... Feb 9 18:23:34.666356 systemd[1]: Starting parse-ip-for-networkd.service... Feb 9 18:23:34.674811 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Feb 9 18:23:34.674874 kernel: BTRFS info (device vda6): using free space tree Feb 9 18:23:34.674885 kernel: BTRFS info (device vda6): has skinny extents Feb 9 18:23:34.682870 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 9 18:23:34.691156 systemd[1]: Finished ignition-setup.service. Feb 9 18:23:34.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.693107 systemd[1]: Starting ignition-fetch-offline.service... Feb 9 18:23:34.739195 systemd[1]: Finished parse-ip-for-networkd.service. Feb 9 18:23:34.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.740000 audit: BPF prog-id=9 op=LOAD Feb 9 18:23:34.741216 systemd[1]: Starting systemd-networkd.service... Feb 9 18:23:34.761707 systemd-networkd[733]: lo: Link UP Feb 9 18:23:34.761717 systemd-networkd[733]: lo: Gained carrier Feb 9 18:23:34.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.762082 systemd-networkd[733]: Enumeration completed Feb 9 18:23:34.762166 systemd[1]: Started systemd-networkd.service. Feb 9 18:23:34.762243 systemd-networkd[733]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 18:23:34.763266 systemd-networkd[733]: eth0: Link UP Feb 9 18:23:34.763270 systemd-networkd[733]: eth0: Gained carrier Feb 9 18:23:34.763608 systemd[1]: Reached target network.target. Feb 9 18:23:34.765031 systemd[1]: Starting iscsiuio.service... Feb 9 18:23:34.776325 systemd[1]: Started iscsiuio.service. Feb 9 18:23:34.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.777717 systemd[1]: Starting iscsid.service... Feb 9 18:23:34.780607 systemd-networkd[733]: eth0: DHCPv4 address 10.0.0.32/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 9 18:23:34.782064 iscsid[743]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 9 18:23:34.782064 iscsid[743]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 9 18:23:34.782064 iscsid[743]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 9 18:23:34.782064 iscsid[743]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 9 18:23:34.782064 iscsid[743]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 9 18:23:34.782064 iscsid[743]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 9 18:23:34.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.783997 systemd[1]: Started iscsid.service. Feb 9 18:23:34.789167 systemd[1]: Starting dracut-initqueue.service... Feb 9 18:23:34.801224 systemd[1]: Finished dracut-initqueue.service. Feb 9 18:23:34.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.802084 systemd[1]: Reached target remote-fs-pre.target. Feb 9 18:23:34.803166 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 18:23:34.804469 systemd[1]: Reached target remote-fs.target. Feb 9 18:23:34.812389 systemd[1]: Starting dracut-pre-mount.service... Feb 9 18:23:34.825906 systemd[1]: Finished dracut-pre-mount.service. Feb 9 18:23:34.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.841672 ignition[663]: Ignition 2.14.0 Feb 9 18:23:34.841682 ignition[663]: Stage: fetch-offline Feb 9 18:23:34.841724 ignition[663]: no configs at "/usr/lib/ignition/base.d" Feb 9 18:23:34.841733 ignition[663]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:23:34.841904 ignition[663]: parsed url from cmdline: "" Feb 9 18:23:34.841908 ignition[663]: no config URL provided Feb 9 18:23:34.841912 ignition[663]: reading system config file "/usr/lib/ignition/user.ign" Feb 9 18:23:34.841920 ignition[663]: no config at "/usr/lib/ignition/user.ign" Feb 9 18:23:34.841940 ignition[663]: op(1): [started] loading QEMU firmware config module Feb 9 18:23:34.841945 ignition[663]: op(1): executing: "modprobe" "qemu_fw_cfg" Feb 9 18:23:34.847629 ignition[663]: op(1): [finished] loading QEMU firmware config module Feb 9 18:23:34.918312 ignition[663]: parsing config with SHA512: dadb3e9cc679769fb951256962282c1b996ed55bd62652e92f47290ea1e9d759acbeb47bc7c4bb2804e1d78b1be830e8a7354f02026d9cd7462a3e03271bd664 Feb 9 18:23:34.952171 unknown[663]: fetched base config from "system" Feb 9 18:23:34.952183 unknown[663]: fetched user config from "qemu" Feb 9 18:23:34.953782 ignition[663]: fetch-offline: fetch-offline passed Feb 9 18:23:34.953875 ignition[663]: Ignition finished successfully Feb 9 18:23:34.954835 systemd[1]: Finished ignition-fetch-offline.service. Feb 9 18:23:34.955000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.956063 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Feb 9 18:23:34.956890 systemd[1]: Starting ignition-kargs.service... Feb 9 18:23:34.967072 ignition[760]: Ignition 2.14.0 Feb 9 18:23:34.967084 ignition[760]: Stage: kargs Feb 9 18:23:34.967205 ignition[760]: no configs at "/usr/lib/ignition/base.d" Feb 9 18:23:34.967216 ignition[760]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:23:34.970308 systemd[1]: Finished ignition-kargs.service. Feb 9 18:23:34.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.968470 ignition[760]: kargs: kargs passed Feb 9 18:23:34.968557 ignition[760]: Ignition finished successfully Feb 9 18:23:34.972631 systemd[1]: Starting ignition-disks.service... Feb 9 18:23:34.980309 ignition[766]: Ignition 2.14.0 Feb 9 18:23:34.980320 ignition[766]: Stage: disks Feb 9 18:23:34.980423 ignition[766]: no configs at "/usr/lib/ignition/base.d" Feb 9 18:23:34.980433 ignition[766]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:23:34.983186 systemd[1]: Finished ignition-disks.service. Feb 9 18:23:34.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:34.981756 ignition[766]: disks: disks passed Feb 9 18:23:34.984654 systemd[1]: Reached target initrd-root-device.target. Feb 9 18:23:34.981813 ignition[766]: Ignition finished successfully Feb 9 18:23:34.985650 systemd[1]: Reached target local-fs-pre.target. Feb 9 18:23:34.986545 systemd[1]: Reached target local-fs.target. Feb 9 18:23:34.987554 systemd[1]: Reached target sysinit.target. Feb 9 18:23:34.989081 systemd[1]: Reached target basic.target. Feb 9 18:23:34.991041 systemd[1]: Starting systemd-fsck-root.service... Feb 9 18:23:35.002162 systemd-fsck[775]: ROOT: clean, 602/553520 files, 56013/553472 blocks Feb 9 18:23:35.005668 systemd[1]: Finished systemd-fsck-root.service. Feb 9 18:23:35.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:35.007497 systemd[1]: Mounting sysroot.mount... Feb 9 18:23:35.014544 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 9 18:23:35.014786 systemd[1]: Mounted sysroot.mount. Feb 9 18:23:35.015462 systemd[1]: Reached target initrd-root-fs.target. Feb 9 18:23:35.017423 systemd[1]: Mounting sysroot-usr.mount... Feb 9 18:23:35.018260 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 9 18:23:35.018298 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 9 18:23:35.018320 systemd[1]: Reached target ignition-diskful.target. Feb 9 18:23:35.020299 systemd[1]: Mounted sysroot-usr.mount. Feb 9 18:23:35.021791 systemd[1]: Starting initrd-setup-root.service... Feb 9 18:23:35.026172 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Feb 9 18:23:35.029556 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Feb 9 18:23:35.033513 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Feb 9 18:23:35.037658 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Feb 9 18:23:35.066319 systemd[1]: Finished initrd-setup-root.service. Feb 9 18:23:35.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:35.068138 systemd[1]: Starting ignition-mount.service... Feb 9 18:23:35.069633 systemd[1]: Starting sysroot-boot.service... Feb 9 18:23:35.074128 bash[826]: umount: /sysroot/usr/share/oem: not mounted. Feb 9 18:23:35.082601 ignition[827]: INFO : Ignition 2.14.0 Feb 9 18:23:35.082601 ignition[827]: INFO : Stage: mount Feb 9 18:23:35.083828 ignition[827]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 9 18:23:35.083828 ignition[827]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:23:35.085747 ignition[827]: INFO : mount: mount passed Feb 9 18:23:35.085747 ignition[827]: INFO : Ignition finished successfully Feb 9 18:23:35.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:35.085310 systemd[1]: Finished ignition-mount.service. Feb 9 18:23:35.090789 systemd[1]: Finished sysroot-boot.service. Feb 9 18:23:35.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:35.621789 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 9 18:23:35.631677 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (837) Feb 9 18:23:35.633046 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Feb 9 18:23:35.633085 kernel: BTRFS info (device vda6): using free space tree Feb 9 18:23:35.633096 kernel: BTRFS info (device vda6): has skinny extents Feb 9 18:23:35.637276 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 9 18:23:35.638859 systemd[1]: Starting ignition-files.service... Feb 9 18:23:35.657831 ignition[857]: INFO : Ignition 2.14.0 Feb 9 18:23:35.657831 ignition[857]: INFO : Stage: files Feb 9 18:23:35.659079 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 9 18:23:35.659079 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:23:35.660745 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Feb 9 18:23:35.671775 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 9 18:23:35.671775 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 9 18:23:35.679116 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 9 18:23:35.680232 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 9 18:23:35.681450 unknown[857]: wrote ssh authorized keys file for user: core Feb 9 18:23:35.682343 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 9 18:23:35.684149 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 18:23:35.685650 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Feb 9 18:23:36.095989 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Feb 9 18:23:36.125242 systemd-networkd[733]: eth0: Gained IPv6LL Feb 9 18:23:36.357719 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Feb 9 18:23:36.357719 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 18:23:36.361080 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 18:23:36.361080 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Feb 9 18:23:36.567626 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Feb 9 18:23:36.689889 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Feb 9 18:23:36.689889 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 18:23:36.693451 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 18:23:36.693451 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Feb 9 18:23:36.732778 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Feb 9 18:23:36.775769 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 18:23:36.777255 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 9 18:23:36.777255 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://dl.k8s.io/release/v1.27.2/bin/linux/arm64/kubeadm: attempt #1 Feb 9 18:23:36.825508 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Feb 9 18:23:37.103677 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 45b3100984c979ba0f1c0df8f4211474c2d75ebe916e677dff5fc8e3b3697cf7a953da94e356f39684cc860dff6878b772b7514c55651c2f866d9efeef23f970 Feb 9 18:23:37.105786 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 9 18:23:37.107029 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubelet" Feb 9 18:23:37.107029 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://dl.k8s.io/release/v1.27.2/bin/linux/arm64/kubelet: attempt #1 Feb 9 18:23:37.128277 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Feb 9 18:23:37.690495 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 71857ff499ae135fa478e1827a0ed8865e578a8d2b1e25876e914fd0beba03733801c0654bcd4c0567bafeb16887dafb2dbbe8d1116e6ea28dcd8366c142d348 Feb 9 18:23:37.692671 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 9 18:23:37.692671 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubectl" Feb 9 18:23:37.692671 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET https://dl.k8s.io/release/v1.27.2/bin/linux/arm64/kubectl: attempt #1 Feb 9 18:23:37.714547 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET result: OK Feb 9 18:23:37.984421 ignition[857]: DEBUG : files: createFilesystemsFiles: createFiles: op(8): file matches expected sum of: 14be61ec35669a27acf2df0380afb85b9b42311d50ca1165718421c5f605df1119ec9ae314696a674051712e80deeaa65e62d2d62ed4d107fe99d0aaf419dafc Feb 9 18:23:37.984421 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 18:23:37.988102 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 18:23:37.988102 ignition[857]: INFO : files: op(f): [started] processing unit "prepare-cni-plugins.service" Feb 9 18:23:37.988102 ignition[857]: INFO : files: op(f): op(10): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 18:23:37.988102 ignition[857]: INFO : files: op(f): op(10): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 18:23:37.988102 ignition[857]: INFO : files: op(f): [finished] processing unit "prepare-cni-plugins.service" Feb 9 18:23:37.988102 ignition[857]: INFO : files: op(11): [started] processing unit "prepare-critools.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(11): op(12): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(11): op(12): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(11): [finished] processing unit "prepare-critools.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(15): [started] processing unit "coreos-metadata.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(15): op(16): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(15): op(16): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(15): [finished] processing unit "coreos-metadata.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(17): [started] setting preset to enabled for "prepare-helm.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(17): [finished] setting preset to enabled for "prepare-helm.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(18): [started] setting preset to disabled for "coreos-metadata.service" Feb 9 18:23:38.010235 ignition[857]: INFO : files: op(18): op(19): [started] removing enablement symlink(s) for "coreos-metadata.service" Feb 9 18:23:38.035594 kernel: kauditd_printk_skb: 22 callbacks suppressed Feb 9 18:23:38.035619 kernel: audit: type=1130 audit(1707503018.020:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.035630 kernel: audit: type=1130 audit(1707503018.028:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.035639 kernel: audit: type=1131 audit(1707503018.028:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.028000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.020170 systemd[1]: Finished ignition-files.service. Feb 9 18:23:38.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.038704 ignition[857]: INFO : files: op(18): op(19): [finished] removing enablement symlink(s) for "coreos-metadata.service" Feb 9 18:23:38.038704 ignition[857]: INFO : files: op(18): [finished] setting preset to disabled for "coreos-metadata.service" Feb 9 18:23:38.038704 ignition[857]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 18:23:38.038704 ignition[857]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 18:23:38.038704 ignition[857]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-critools.service" Feb 9 18:23:38.038704 ignition[857]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-critools.service" Feb 9 18:23:38.038704 ignition[857]: INFO : files: createResultFile: createFiles: op(1c): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 9 18:23:38.038704 ignition[857]: INFO : files: createResultFile: createFiles: op(1c): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 9 18:23:38.038704 ignition[857]: INFO : files: files passed Feb 9 18:23:38.038704 ignition[857]: INFO : Ignition finished successfully Feb 9 18:23:38.048787 kernel: audit: type=1130 audit(1707503018.035:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.022292 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 9 18:23:38.023368 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 9 18:23:38.050802 initrd-setup-root-after-ignition[882]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Feb 9 18:23:38.023977 systemd[1]: Starting ignition-quench.service... Feb 9 18:23:38.056588 kernel: audit: type=1130 audit(1707503018.051:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.056617 kernel: audit: type=1131 audit(1707503018.051:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.056703 initrd-setup-root-after-ignition[885]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 9 18:23:38.028435 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 9 18:23:38.028510 systemd[1]: Finished ignition-quench.service. Feb 9 18:23:38.035252 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 9 18:23:38.036475 systemd[1]: Reached target ignition-complete.target. Feb 9 18:23:38.039914 systemd[1]: Starting initrd-parse-etc.service... Feb 9 18:23:38.051646 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 9 18:23:38.051724 systemd[1]: Finished initrd-parse-etc.service. Feb 9 18:23:38.052604 systemd[1]: Reached target initrd-fs.target. Feb 9 18:23:38.057253 systemd[1]: Reached target initrd.target. Feb 9 18:23:38.058827 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 9 18:23:38.059456 systemd[1]: Starting dracut-pre-pivot.service... Feb 9 18:23:38.068994 systemd[1]: Finished dracut-pre-pivot.service. Feb 9 18:23:38.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.070329 systemd[1]: Starting initrd-cleanup.service... Feb 9 18:23:38.072850 kernel: audit: type=1130 audit(1707503018.069:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.077484 systemd[1]: Stopped target nss-lookup.target. Feb 9 18:23:38.078300 systemd[1]: Stopped target remote-cryptsetup.target. Feb 9 18:23:38.079459 systemd[1]: Stopped target timers.target. Feb 9 18:23:38.080558 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 9 18:23:38.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.080654 systemd[1]: Stopped dracut-pre-pivot.service. Feb 9 18:23:38.084905 kernel: audit: type=1131 audit(1707503018.081:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.081815 systemd[1]: Stopped target initrd.target. Feb 9 18:23:38.084519 systemd[1]: Stopped target basic.target. Feb 9 18:23:38.085436 systemd[1]: Stopped target ignition-complete.target. Feb 9 18:23:38.086536 systemd[1]: Stopped target ignition-diskful.target. Feb 9 18:23:38.087605 systemd[1]: Stopped target initrd-root-device.target. Feb 9 18:23:38.088868 systemd[1]: Stopped target remote-fs.target. Feb 9 18:23:38.089987 systemd[1]: Stopped target remote-fs-pre.target. Feb 9 18:23:38.091186 systemd[1]: Stopped target sysinit.target. Feb 9 18:23:38.092222 systemd[1]: Stopped target local-fs.target. Feb 9 18:23:38.093270 systemd[1]: Stopped target local-fs-pre.target. Feb 9 18:23:38.094320 systemd[1]: Stopped target swap.target. Feb 9 18:23:38.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.095273 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 9 18:23:38.099593 kernel: audit: type=1131 audit(1707503018.095:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.095373 systemd[1]: Stopped dracut-pre-mount.service. Feb 9 18:23:38.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.096405 systemd[1]: Stopped target cryptsetup.target. Feb 9 18:23:38.103508 kernel: audit: type=1131 audit(1707503018.099:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.103000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.099078 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 9 18:23:38.099176 systemd[1]: Stopped dracut-initqueue.service. Feb 9 18:23:38.100337 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 9 18:23:38.100423 systemd[1]: Stopped ignition-fetch-offline.service. Feb 9 18:23:38.103232 systemd[1]: Stopped target paths.target. Feb 9 18:23:38.104187 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 9 18:23:38.107571 systemd[1]: Stopped systemd-ask-password-console.path. Feb 9 18:23:38.108539 systemd[1]: Stopped target slices.target. Feb 9 18:23:38.109628 systemd[1]: Stopped target sockets.target. Feb 9 18:23:38.110648 systemd[1]: iscsid.socket: Deactivated successfully. Feb 9 18:23:38.110713 systemd[1]: Closed iscsid.socket. Feb 9 18:23:38.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.111512 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 9 18:23:38.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.111613 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 9 18:23:38.112894 systemd[1]: ignition-files.service: Deactivated successfully. Feb 9 18:23:38.112980 systemd[1]: Stopped ignition-files.service. Feb 9 18:23:38.114664 systemd[1]: Stopping ignition-mount.service... Feb 9 18:23:38.115845 systemd[1]: Stopping iscsiuio.service... Feb 9 18:23:38.118690 systemd[1]: Stopping sysroot-boot.service... Feb 9 18:23:38.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.119210 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 9 18:23:38.119333 systemd[1]: Stopped systemd-udev-trigger.service. Feb 9 18:23:38.122874 ignition[898]: INFO : Ignition 2.14.0 Feb 9 18:23:38.122874 ignition[898]: INFO : Stage: umount Feb 9 18:23:38.122874 ignition[898]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 9 18:23:38.122874 ignition[898]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:23:38.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.120324 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 9 18:23:38.128113 ignition[898]: INFO : umount: umount passed Feb 9 18:23:38.128113 ignition[898]: INFO : Ignition finished successfully Feb 9 18:23:38.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.120415 systemd[1]: Stopped dracut-pre-trigger.service. Feb 9 18:23:38.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.122694 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 9 18:23:38.122795 systemd[1]: Stopped iscsiuio.service. Feb 9 18:23:38.123857 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 9 18:23:38.123931 systemd[1]: Stopped ignition-mount.service. Feb 9 18:23:38.125378 systemd[1]: Stopped target network.target. Feb 9 18:23:38.138000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.138000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.126282 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 9 18:23:38.126352 systemd[1]: Closed iscsiuio.socket. Feb 9 18:23:38.127518 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 9 18:23:38.127580 systemd[1]: Stopped ignition-disks.service. Feb 9 18:23:38.128817 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 9 18:23:38.128862 systemd[1]: Stopped ignition-kargs.service. Feb 9 18:23:38.130026 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 9 18:23:38.130067 systemd[1]: Stopped ignition-setup.service. Feb 9 18:23:38.131274 systemd[1]: Stopping systemd-networkd.service... Feb 9 18:23:38.132363 systemd[1]: Stopping systemd-resolved.service... Feb 9 18:23:38.137262 systemd[1]: sysroot-boot.mount: Deactivated successfully. Feb 9 18:23:38.137776 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 9 18:23:38.137873 systemd[1]: Finished initrd-cleanup.service. Feb 9 18:23:38.141572 systemd-networkd[733]: eth0: DHCPv6 lease lost Feb 9 18:23:38.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.147482 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 9 18:23:38.147590 systemd[1]: Stopped sysroot-boot.service. Feb 9 18:23:38.148344 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 9 18:23:38.148000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.148416 systemd[1]: Stopped systemd-networkd.service. Feb 9 18:23:38.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.149566 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 9 18:23:38.149593 systemd[1]: Closed systemd-networkd.socket. Feb 9 18:23:38.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.150325 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 9 18:23:38.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.150361 systemd[1]: Stopped initrd-setup-root.service. Feb 9 18:23:38.155000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.152087 systemd[1]: Stopping network-cleanup.service... Feb 9 18:23:38.153077 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 9 18:23:38.153130 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 9 18:23:38.157000 audit: BPF prog-id=9 op=UNLOAD Feb 9 18:23:38.154245 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 9 18:23:38.154284 systemd[1]: Stopped systemd-sysctl.service. Feb 9 18:23:38.155548 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 9 18:23:38.155586 systemd[1]: Stopped systemd-modules-load.service. Feb 9 18:23:38.159378 systemd[1]: Stopping systemd-udevd.service... Feb 9 18:23:38.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.160969 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Feb 9 18:23:38.161379 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 9 18:23:38.161466 systemd[1]: Stopped systemd-resolved.service. Feb 9 18:23:38.165326 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 9 18:23:38.165000 audit: BPF prog-id=6 op=UNLOAD Feb 9 18:23:38.165442 systemd[1]: Stopped systemd-udevd.service. Feb 9 18:23:38.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.166994 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 9 18:23:38.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.167074 systemd[1]: Stopped network-cleanup.service. Feb 9 18:23:38.167893 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 9 18:23:38.167925 systemd[1]: Closed systemd-udevd-control.socket. Feb 9 18:23:38.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.169003 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 9 18:23:38.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.169030 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 9 18:23:38.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.169938 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 9 18:23:38.169974 systemd[1]: Stopped dracut-pre-udev.service. Feb 9 18:23:38.171074 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 9 18:23:38.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.171107 systemd[1]: Stopped dracut-cmdline.service. Feb 9 18:23:38.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.172060 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 9 18:23:38.177000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.172094 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 9 18:23:38.173847 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 9 18:23:38.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.174898 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Feb 9 18:23:38.174951 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Feb 9 18:23:38.176724 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 9 18:23:38.176767 systemd[1]: Stopped kmod-static-nodes.service. Feb 9 18:23:38.177542 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 9 18:23:38.177580 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 9 18:23:38.179214 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Feb 9 18:23:38.179637 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 9 18:23:38.179714 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 9 18:23:38.180564 systemd[1]: Reached target initrd-switch-root.target. Feb 9 18:23:38.182361 systemd[1]: Starting initrd-switch-root.service... Feb 9 18:23:38.188759 systemd[1]: Switching root. Feb 9 18:23:38.205725 iscsid[743]: iscsid shutting down. Feb 9 18:23:38.206210 systemd-journald[291]: Journal stopped Feb 9 18:23:40.317174 systemd-journald[291]: Received SIGTERM from PID 1 (systemd). Feb 9 18:23:40.317234 kernel: SELinux: Class mctp_socket not defined in policy. Feb 9 18:23:40.317247 kernel: SELinux: Class anon_inode not defined in policy. Feb 9 18:23:40.317257 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 9 18:23:40.317271 kernel: SELinux: policy capability network_peer_controls=1 Feb 9 18:23:40.317281 kernel: SELinux: policy capability open_perms=1 Feb 9 18:23:40.317290 kernel: SELinux: policy capability extended_socket_class=1 Feb 9 18:23:40.317300 kernel: SELinux: policy capability always_check_network=0 Feb 9 18:23:40.317313 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 9 18:23:40.317322 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 9 18:23:40.317332 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 9 18:23:40.317342 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 9 18:23:40.317355 systemd[1]: Successfully loaded SELinux policy in 32.872ms. Feb 9 18:23:40.317372 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.747ms. Feb 9 18:23:40.317385 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 18:23:40.317398 systemd[1]: Detected virtualization kvm. Feb 9 18:23:40.317411 systemd[1]: Detected architecture arm64. Feb 9 18:23:40.317422 systemd[1]: Detected first boot. Feb 9 18:23:40.317432 systemd[1]: Initializing machine ID from VM UUID. Feb 9 18:23:40.317447 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 9 18:23:40.317457 systemd[1]: Populated /etc with preset unit settings. Feb 9 18:23:40.317467 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 18:23:40.317479 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 18:23:40.317491 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 18:23:40.317504 systemd[1]: iscsid.service: Deactivated successfully. Feb 9 18:23:40.317514 systemd[1]: Stopped iscsid.service. Feb 9 18:23:40.317545 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 9 18:23:40.317557 systemd[1]: Stopped initrd-switch-root.service. Feb 9 18:23:40.317568 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 9 18:23:40.317579 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 9 18:23:40.317589 systemd[1]: Created slice system-addon\x2drun.slice. Feb 9 18:23:40.317601 systemd[1]: Created slice system-getty.slice. Feb 9 18:23:40.317611 systemd[1]: Created slice system-modprobe.slice. Feb 9 18:23:40.317622 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 9 18:23:40.317632 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 9 18:23:40.317642 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 9 18:23:40.317653 systemd[1]: Created slice user.slice. Feb 9 18:23:40.317664 systemd[1]: Started systemd-ask-password-console.path. Feb 9 18:23:40.317674 systemd[1]: Started systemd-ask-password-wall.path. Feb 9 18:23:40.317684 systemd[1]: Set up automount boot.automount. Feb 9 18:23:40.317696 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 9 18:23:40.317710 systemd[1]: Stopped target initrd-switch-root.target. Feb 9 18:23:40.317721 systemd[1]: Stopped target initrd-fs.target. Feb 9 18:23:40.317738 systemd[1]: Stopped target initrd-root-fs.target. Feb 9 18:23:40.317748 systemd[1]: Reached target integritysetup.target. Feb 9 18:23:40.317760 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 18:23:40.317771 systemd[1]: Reached target remote-fs.target. Feb 9 18:23:40.317781 systemd[1]: Reached target slices.target. Feb 9 18:23:40.317792 systemd[1]: Reached target swap.target. Feb 9 18:23:40.317803 systemd[1]: Reached target torcx.target. Feb 9 18:23:40.317814 systemd[1]: Reached target veritysetup.target. Feb 9 18:23:40.317824 systemd[1]: Listening on systemd-coredump.socket. Feb 9 18:23:40.317836 systemd[1]: Listening on systemd-initctl.socket. Feb 9 18:23:40.317847 systemd[1]: Listening on systemd-networkd.socket. Feb 9 18:23:40.317857 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 18:23:40.317868 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 18:23:40.317879 systemd[1]: Listening on systemd-userdbd.socket. Feb 9 18:23:40.317891 systemd[1]: Mounting dev-hugepages.mount... Feb 9 18:23:40.317903 systemd[1]: Mounting dev-mqueue.mount... Feb 9 18:23:40.317913 systemd[1]: Mounting media.mount... Feb 9 18:23:40.317924 systemd[1]: Mounting sys-kernel-debug.mount... Feb 9 18:23:40.317934 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 9 18:23:40.317944 systemd[1]: Mounting tmp.mount... Feb 9 18:23:40.317954 systemd[1]: Starting flatcar-tmpfiles.service... Feb 9 18:23:40.317966 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 9 18:23:40.317976 systemd[1]: Starting kmod-static-nodes.service... Feb 9 18:23:40.317987 systemd[1]: Starting modprobe@configfs.service... Feb 9 18:23:40.317999 systemd[1]: Starting modprobe@dm_mod.service... Feb 9 18:23:40.318009 systemd[1]: Starting modprobe@drm.service... Feb 9 18:23:40.318019 systemd[1]: Starting modprobe@efi_pstore.service... Feb 9 18:23:40.318029 systemd[1]: Starting modprobe@fuse.service... Feb 9 18:23:40.318040 systemd[1]: Starting modprobe@loop.service... Feb 9 18:23:40.318051 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 9 18:23:40.318061 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 9 18:23:40.318072 systemd[1]: Stopped systemd-fsck-root.service. Feb 9 18:23:40.318083 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 9 18:23:40.318094 systemd[1]: Stopped systemd-fsck-usr.service. Feb 9 18:23:40.318104 systemd[1]: Stopped systemd-journald.service. Feb 9 18:23:40.318114 systemd[1]: Starting systemd-journald.service... Feb 9 18:23:40.318126 systemd[1]: Starting systemd-modules-load.service... Feb 9 18:23:40.318136 kernel: loop: module loaded Feb 9 18:23:40.318145 systemd[1]: Starting systemd-network-generator.service... Feb 9 18:23:40.318156 systemd[1]: Starting systemd-remount-fs.service... Feb 9 18:23:40.318166 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 18:23:40.318177 kernel: fuse: init (API version 7.34) Feb 9 18:23:40.318189 systemd[1]: verity-setup.service: Deactivated successfully. Feb 9 18:23:40.318200 systemd[1]: Stopped verity-setup.service. Feb 9 18:23:40.318212 systemd[1]: Mounted dev-hugepages.mount. Feb 9 18:23:40.318222 systemd[1]: Mounted dev-mqueue.mount. Feb 9 18:23:40.318233 systemd[1]: Mounted media.mount. Feb 9 18:23:40.318243 systemd[1]: Mounted sys-kernel-debug.mount. Feb 9 18:23:40.318253 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 9 18:23:40.318263 systemd[1]: Mounted tmp.mount. Feb 9 18:23:40.318274 systemd[1]: Finished kmod-static-nodes.service. Feb 9 18:23:40.318285 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 9 18:23:40.318296 systemd[1]: Finished modprobe@configfs.service. Feb 9 18:23:40.319273 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 9 18:23:40.319308 systemd[1]: Finished modprobe@dm_mod.service. Feb 9 18:23:40.319335 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 9 18:23:40.319348 systemd[1]: Finished modprobe@drm.service. Feb 9 18:23:40.319358 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 9 18:23:40.319374 systemd[1]: Finished modprobe@efi_pstore.service. Feb 9 18:23:40.319384 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 9 18:23:40.319395 systemd[1]: Finished modprobe@fuse.service. Feb 9 18:23:40.319406 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 9 18:23:40.319416 systemd[1]: Finished modprobe@loop.service. Feb 9 18:23:40.319426 systemd[1]: Finished systemd-modules-load.service. Feb 9 18:23:40.319437 systemd[1]: Finished systemd-network-generator.service. Feb 9 18:23:40.319447 systemd[1]: Finished systemd-remount-fs.service. Feb 9 18:23:40.319461 systemd-journald[990]: Journal started Feb 9 18:23:40.319508 systemd-journald[990]: Runtime Journal (/run/log/journal/1ca2993376eb403c94f437f105e9ffe5) is 6.0M, max 48.7M, 42.6M free. Feb 9 18:23:38.269000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 9 18:23:38.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 18:23:38.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 18:23:38.447000 audit: BPF prog-id=10 op=LOAD Feb 9 18:23:38.447000 audit: BPF prog-id=10 op=UNLOAD Feb 9 18:23:38.447000 audit: BPF prog-id=11 op=LOAD Feb 9 18:23:38.447000 audit: BPF prog-id=11 op=UNLOAD Feb 9 18:23:38.484000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 9 18:23:38.484000 audit[932]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c58d4 a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:38.484000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 18:23:38.485000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 9 18:23:38.485000 audit[932]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c59b9 a2=1ed a3=0 items=2 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:38.485000 audit: CWD cwd="/" Feb 9 18:23:38.485000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:23:38.485000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:23:38.485000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 18:23:40.172000 audit: BPF prog-id=12 op=LOAD Feb 9 18:23:40.172000 audit: BPF prog-id=3 op=UNLOAD Feb 9 18:23:40.172000 audit: BPF prog-id=13 op=LOAD Feb 9 18:23:40.172000 audit: BPF prog-id=14 op=LOAD Feb 9 18:23:40.172000 audit: BPF prog-id=4 op=UNLOAD Feb 9 18:23:40.172000 audit: BPF prog-id=5 op=UNLOAD Feb 9 18:23:40.173000 audit: BPF prog-id=15 op=LOAD Feb 9 18:23:40.173000 audit: BPF prog-id=12 op=UNLOAD Feb 9 18:23:40.173000 audit: BPF prog-id=16 op=LOAD Feb 9 18:23:40.174000 audit: BPF prog-id=17 op=LOAD Feb 9 18:23:40.174000 audit: BPF prog-id=13 op=UNLOAD Feb 9 18:23:40.174000 audit: BPF prog-id=14 op=UNLOAD Feb 9 18:23:40.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.185000 audit: BPF prog-id=15 op=UNLOAD Feb 9 18:23:40.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.268000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.270000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.272000 audit: BPF prog-id=18 op=LOAD Feb 9 18:23:40.272000 audit: BPF prog-id=19 op=LOAD Feb 9 18:23:40.272000 audit: BPF prog-id=20 op=LOAD Feb 9 18:23:40.272000 audit: BPF prog-id=16 op=UNLOAD Feb 9 18:23:40.272000 audit: BPF prog-id=17 op=UNLOAD Feb 9 18:23:40.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.305000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.307000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.308000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 9 18:23:40.308000 audit[990]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=6 a1=ffffd21ad0b0 a2=4000 a3=1 items=0 ppid=1 pid=990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:40.308000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 9 18:23:40.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.310000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.314000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.316000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.317000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.483695 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 18:23:40.171825 systemd[1]: Queued start job for default target multi-user.target. Feb 9 18:23:40.321089 systemd[1]: Started systemd-journald.service. Feb 9 18:23:38.484026 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 18:23:40.171838 systemd[1]: Unnecessary job was removed for dev-vda6.device. Feb 9 18:23:40.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:38.484046 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 18:23:40.177164 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 9 18:23:38.484076 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 9 18:23:38.484085 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 9 18:23:38.484114 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 9 18:23:38.484126 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 9 18:23:38.484319 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 9 18:23:38.484353 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 18:23:38.484365 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 18:23:38.484825 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 9 18:23:40.321955 systemd[1]: Reached target network-pre.target. Feb 9 18:23:38.484858 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 9 18:23:38.484876 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 9 18:23:38.484889 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 9 18:23:38.484905 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 9 18:23:38.484918 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:38Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 9 18:23:39.916494 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:39Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 18:23:39.916791 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:39Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 18:23:39.916892 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:39Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 18:23:39.917048 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:39Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 18:23:39.917097 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:39Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 9 18:23:39.917150 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:23:39Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 9 18:23:40.323893 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 9 18:23:40.325603 systemd[1]: Mounting sys-kernel-config.mount... Feb 9 18:23:40.326282 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 9 18:23:40.327823 systemd[1]: Starting systemd-hwdb-update.service... Feb 9 18:23:40.329638 systemd[1]: Starting systemd-journal-flush.service... Feb 9 18:23:40.330428 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 9 18:23:40.331557 systemd[1]: Starting systemd-random-seed.service... Feb 9 18:23:40.332321 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 9 18:23:40.333502 systemd[1]: Starting systemd-sysctl.service... Feb 9 18:23:40.337582 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 9 18:23:40.338839 systemd[1]: Mounted sys-kernel-config.mount. Feb 9 18:23:40.340190 systemd-journald[990]: Time spent on flushing to /var/log/journal/1ca2993376eb403c94f437f105e9ffe5 is 14.867ms for 1025 entries. Feb 9 18:23:40.340190 systemd-journald[990]: System Journal (/var/log/journal/1ca2993376eb403c94f437f105e9ffe5) is 8.0M, max 195.6M, 187.6M free. Feb 9 18:23:40.375198 systemd-journald[990]: Received client request to flush runtime journal. Feb 9 18:23:40.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.348000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.347640 systemd[1]: Finished flatcar-tmpfiles.service. Feb 9 18:23:40.348622 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 18:23:40.350567 systemd[1]: Starting systemd-sysusers.service... Feb 9 18:23:40.375928 udevadm[1033]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Feb 9 18:23:40.353979 systemd[1]: Starting systemd-udev-settle.service... Feb 9 18:23:40.355891 systemd[1]: Finished systemd-random-seed.service. Feb 9 18:23:40.356787 systemd[1]: Reached target first-boot-complete.target. Feb 9 18:23:40.364424 systemd[1]: Finished systemd-sysctl.service. Feb 9 18:23:40.376170 systemd[1]: Finished systemd-journal-flush.service. Feb 9 18:23:40.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.387952 systemd[1]: Finished systemd-sysusers.service. Feb 9 18:23:40.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.389920 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 18:23:40.410117 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 18:23:40.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.719294 systemd[1]: Finished systemd-hwdb-update.service. Feb 9 18:23:40.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.720000 audit: BPF prog-id=21 op=LOAD Feb 9 18:23:40.720000 audit: BPF prog-id=22 op=LOAD Feb 9 18:23:40.720000 audit: BPF prog-id=7 op=UNLOAD Feb 9 18:23:40.720000 audit: BPF prog-id=8 op=UNLOAD Feb 9 18:23:40.721541 systemd[1]: Starting systemd-udevd.service... Feb 9 18:23:40.743660 systemd-udevd[1037]: Using default interface naming scheme 'v252'. Feb 9 18:23:40.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.770000 audit: BPF prog-id=23 op=LOAD Feb 9 18:23:40.764209 systemd[1]: Started systemd-udevd.service. Feb 9 18:23:40.774920 systemd[1]: Starting systemd-networkd.service... Feb 9 18:23:40.778000 audit: BPF prog-id=24 op=LOAD Feb 9 18:23:40.778000 audit: BPF prog-id=25 op=LOAD Feb 9 18:23:40.778000 audit: BPF prog-id=26 op=LOAD Feb 9 18:23:40.779646 systemd[1]: Starting systemd-userdbd.service... Feb 9 18:23:40.795241 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Feb 9 18:23:40.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.809213 systemd[1]: Started systemd-userdbd.service. Feb 9 18:23:40.864986 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 18:23:40.872004 systemd[1]: Finished systemd-udev-settle.service. Feb 9 18:23:40.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.874006 systemd[1]: Starting lvm2-activation-early.service... Feb 9 18:23:40.882009 systemd-networkd[1057]: lo: Link UP Feb 9 18:23:40.882276 systemd-networkd[1057]: lo: Gained carrier Feb 9 18:23:40.882748 systemd-networkd[1057]: Enumeration completed Feb 9 18:23:40.882959 systemd-networkd[1057]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 18:23:40.883002 systemd[1]: Started systemd-networkd.service. Feb 9 18:23:40.883000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.884976 systemd-networkd[1057]: eth0: Link UP Feb 9 18:23:40.885079 systemd-networkd[1057]: eth0: Gained carrier Feb 9 18:23:40.886732 lvm[1070]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 18:23:40.909341 systemd[1]: Finished lvm2-activation-early.service. Feb 9 18:23:40.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.910177 systemd[1]: Reached target cryptsetup.target. Feb 9 18:23:40.912092 systemd[1]: Starting lvm2-activation.service... Feb 9 18:23:40.915660 systemd-networkd[1057]: eth0: DHCPv4 address 10.0.0.32/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 9 18:23:40.916156 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 18:23:40.940411 systemd[1]: Finished lvm2-activation.service. Feb 9 18:23:40.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.941221 systemd[1]: Reached target local-fs-pre.target. Feb 9 18:23:40.941915 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 9 18:23:40.941951 systemd[1]: Reached target local-fs.target. Feb 9 18:23:40.942510 systemd[1]: Reached target machines.target. Feb 9 18:23:40.944318 systemd[1]: Starting ldconfig.service... Feb 9 18:23:40.945370 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 9 18:23:40.945471 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 18:23:40.946837 systemd[1]: Starting systemd-boot-update.service... Feb 9 18:23:40.948495 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 9 18:23:40.951266 systemd[1]: Starting systemd-machine-id-commit.service... Feb 9 18:23:40.952951 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 9 18:23:40.953113 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 9 18:23:40.954548 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 9 18:23:40.956918 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1073 (bootctl) Feb 9 18:23:40.958433 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 9 18:23:40.962211 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 9 18:23:40.960000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:40.968170 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 9 18:23:40.975416 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 9 18:23:40.977019 systemd-tmpfiles[1076]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 9 18:23:41.048658 systemd-fsck[1082]: fsck.fat 4.2 (2021-01-31) Feb 9 18:23:41.048658 systemd-fsck[1082]: /dev/vda1: 236 files, 113719/258078 clusters Feb 9 18:23:41.050747 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 9 18:23:41.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.069552 systemd[1]: Finished systemd-machine-id-commit.service. Feb 9 18:23:41.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.140772 ldconfig[1072]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 9 18:23:41.144439 systemd[1]: Finished ldconfig.service. Feb 9 18:23:41.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.292187 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 9 18:23:41.293508 systemd[1]: Mounting boot.mount... Feb 9 18:23:41.300792 systemd[1]: Mounted boot.mount. Feb 9 18:23:41.307828 systemd[1]: Finished systemd-boot-update.service. Feb 9 18:23:41.308000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.361343 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 9 18:23:41.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.363638 systemd[1]: Starting audit-rules.service... Feb 9 18:23:41.365583 systemd[1]: Starting clean-ca-certificates.service... Feb 9 18:23:41.367436 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 9 18:23:41.368000 audit: BPF prog-id=27 op=LOAD Feb 9 18:23:41.369982 systemd[1]: Starting systemd-resolved.service... Feb 9 18:23:41.370000 audit: BPF prog-id=28 op=LOAD Feb 9 18:23:41.372751 systemd[1]: Starting systemd-timesyncd.service... Feb 9 18:23:41.376006 systemd[1]: Starting systemd-update-utmp.service... Feb 9 18:23:41.384149 systemd[1]: Finished clean-ca-certificates.service. Feb 9 18:23:41.384000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.385338 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 9 18:23:41.390305 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 9 18:23:41.390000 audit[1098]: SYSTEM_BOOT pid=1098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.394281 systemd[1]: Starting systemd-update-done.service... Feb 9 18:23:41.396363 systemd[1]: Finished systemd-update-utmp.service. Feb 9 18:23:41.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.401741 systemd[1]: Finished systemd-update-done.service. Feb 9 18:23:41.401000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:41.426000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 9 18:23:41.426000 audit[1108]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcd2bcb50 a2=420 a3=0 items=0 ppid=1087 pid=1108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:41.426000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 9 18:23:41.426862 augenrules[1108]: No rules Feb 9 18:23:41.427468 systemd[1]: Finished audit-rules.service. Feb 9 18:23:41.431134 systemd-resolved[1091]: Positive Trust Anchors: Feb 9 18:23:41.431148 systemd-resolved[1091]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 18:23:41.431175 systemd-resolved[1091]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 18:23:41.432436 systemd[1]: Started systemd-timesyncd.service. Feb 9 18:23:41.433562 systemd[1]: Reached target time-set.target. Feb 9 18:23:41.433835 systemd-timesyncd[1092]: Contacted time server 10.0.0.1:123 (10.0.0.1). Feb 9 18:23:41.434140 systemd-timesyncd[1092]: Initial clock synchronization to Fri 2024-02-09 18:23:41.433258 UTC. Feb 9 18:23:41.444042 systemd-resolved[1091]: Defaulting to hostname 'linux'. Feb 9 18:23:41.445411 systemd[1]: Started systemd-resolved.service. Feb 9 18:23:41.446313 systemd[1]: Reached target network.target. Feb 9 18:23:41.447039 systemd[1]: Reached target nss-lookup.target. Feb 9 18:23:41.447779 systemd[1]: Reached target sysinit.target. Feb 9 18:23:41.448587 systemd[1]: Started motdgen.path. Feb 9 18:23:41.449248 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 9 18:23:41.450405 systemd[1]: Started logrotate.timer. Feb 9 18:23:41.451171 systemd[1]: Started mdadm.timer. Feb 9 18:23:41.451827 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 9 18:23:41.452593 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 9 18:23:41.452622 systemd[1]: Reached target paths.target. Feb 9 18:23:41.453267 systemd[1]: Reached target timers.target. Feb 9 18:23:41.454472 systemd[1]: Listening on dbus.socket. Feb 9 18:23:41.456094 systemd[1]: Starting docker.socket... Feb 9 18:23:41.461071 systemd[1]: Listening on sshd.socket. Feb 9 18:23:41.461761 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 18:23:41.462183 systemd[1]: Listening on docker.socket. Feb 9 18:23:41.462948 systemd[1]: Reached target sockets.target. Feb 9 18:23:41.463607 systemd[1]: Reached target basic.target. Feb 9 18:23:41.464295 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 18:23:41.464327 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 18:23:41.465356 systemd[1]: Starting containerd.service... Feb 9 18:23:41.466992 systemd[1]: Starting dbus.service... Feb 9 18:23:41.468541 systemd[1]: Starting enable-oem-cloudinit.service... Feb 9 18:23:41.470196 systemd[1]: Starting extend-filesystems.service... Feb 9 18:23:41.471003 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 9 18:23:41.472252 systemd[1]: Starting motdgen.service... Feb 9 18:23:41.474017 systemd[1]: Starting prepare-cni-plugins.service... Feb 9 18:23:41.476559 systemd[1]: Starting prepare-critools.service... Feb 9 18:23:41.478205 systemd[1]: Starting prepare-helm.service... Feb 9 18:23:41.479664 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 9 18:23:41.481243 systemd[1]: Starting sshd-keygen.service... Feb 9 18:23:41.483746 systemd[1]: Starting systemd-logind.service... Feb 9 18:23:41.484536 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 18:23:41.484610 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 9 18:23:41.485014 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 9 18:23:41.485692 systemd[1]: Starting update-engine.service... Feb 9 18:23:41.487792 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 9 18:23:41.490679 jq[1134]: true Feb 9 18:23:41.491590 jq[1118]: false Feb 9 18:23:41.494856 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 9 18:23:41.495002 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 9 18:23:41.503241 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 9 18:23:41.503401 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 9 18:23:41.508304 extend-filesystems[1119]: Found vda Feb 9 18:23:41.508304 extend-filesystems[1119]: Found vda1 Feb 9 18:23:41.508304 extend-filesystems[1119]: Found vda2 Feb 9 18:23:41.508304 extend-filesystems[1119]: Found vda3 Feb 9 18:23:41.508304 extend-filesystems[1119]: Found usr Feb 9 18:23:41.508304 extend-filesystems[1119]: Found vda4 Feb 9 18:23:41.508304 extend-filesystems[1119]: Found vda6 Feb 9 18:23:41.508304 extend-filesystems[1119]: Found vda7 Feb 9 18:23:41.508304 extend-filesystems[1119]: Found vda9 Feb 9 18:23:41.508304 extend-filesystems[1119]: Checking size of /dev/vda9 Feb 9 18:23:41.516495 jq[1144]: true Feb 9 18:23:41.516625 tar[1143]: linux-arm64/helm Feb 9 18:23:41.519229 tar[1141]: ./ Feb 9 18:23:41.519229 tar[1141]: ./loopback Feb 9 18:23:41.521030 systemd[1]: motdgen.service: Deactivated successfully. Feb 9 18:23:41.521187 systemd[1]: Finished motdgen.service. Feb 9 18:23:41.525831 tar[1142]: crictl Feb 9 18:23:41.526577 dbus-daemon[1117]: [system] SELinux support is enabled Feb 9 18:23:41.526734 systemd[1]: Started dbus.service. Feb 9 18:23:41.529064 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 9 18:23:41.529088 systemd[1]: Reached target system-config.target. Feb 9 18:23:41.529712 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 9 18:23:41.529738 systemd[1]: Reached target user-config.target. Feb 9 18:23:41.550365 bash[1168]: Updated "/home/core/.ssh/authorized_keys" Feb 9 18:23:41.551069 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 9 18:23:41.558617 extend-filesystems[1119]: Resized partition /dev/vda9 Feb 9 18:23:41.561312 extend-filesystems[1173]: resize2fs 1.46.5 (30-Dec-2021) Feb 9 18:23:41.568465 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Feb 9 18:23:41.576390 systemd-logind[1130]: Watching system buttons on /dev/input/event0 (Power Button) Feb 9 18:23:41.578273 tar[1141]: ./bandwidth Feb 9 18:23:41.580414 systemd-logind[1130]: New seat seat0. Feb 9 18:23:41.584401 systemd[1]: Started systemd-logind.service. Feb 9 18:23:41.612596 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Feb 9 18:23:41.626031 update_engine[1132]: I0209 18:23:41.618685 1132 main.cc:92] Flatcar Update Engine starting Feb 9 18:23:41.626031 update_engine[1132]: I0209 18:23:41.622449 1132 update_check_scheduler.cc:74] Next update check in 5m42s Feb 9 18:23:41.622439 systemd[1]: Started update-engine.service. Feb 9 18:23:41.624866 systemd[1]: Started locksmithd.service. Feb 9 18:23:41.627855 extend-filesystems[1173]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Feb 9 18:23:41.627855 extend-filesystems[1173]: old_desc_blocks = 1, new_desc_blocks = 1 Feb 9 18:23:41.627855 extend-filesystems[1173]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Feb 9 18:23:41.627697 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 9 18:23:41.632073 extend-filesystems[1119]: Resized filesystem in /dev/vda9 Feb 9 18:23:41.627861 systemd[1]: Finished extend-filesystems.service. Feb 9 18:23:41.650450 tar[1141]: ./ptp Feb 9 18:23:41.686311 tar[1141]: ./vlan Feb 9 18:23:41.706341 env[1146]: time="2024-02-09T18:23:41.706285480Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 9 18:23:41.722000 tar[1141]: ./host-device Feb 9 18:23:41.755423 tar[1141]: ./tuning Feb 9 18:23:41.768925 env[1146]: time="2024-02-09T18:23:41.768882280Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 9 18:23:41.769044 env[1146]: time="2024-02-09T18:23:41.769023520Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 9 18:23:41.770358 env[1146]: time="2024-02-09T18:23:41.770322040Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 9 18:23:41.770358 env[1146]: time="2024-02-09T18:23:41.770354360Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 9 18:23:41.770598 env[1146]: time="2024-02-09T18:23:41.770571840Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 18:23:41.770598 env[1146]: time="2024-02-09T18:23:41.770596600Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 9 18:23:41.770659 env[1146]: time="2024-02-09T18:23:41.770610120Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 9 18:23:41.770659 env[1146]: time="2024-02-09T18:23:41.770620920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 9 18:23:41.770717 env[1146]: time="2024-02-09T18:23:41.770699360Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 9 18:23:41.771000 env[1146]: time="2024-02-09T18:23:41.770975400Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 9 18:23:41.771137 env[1146]: time="2024-02-09T18:23:41.771114680Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 18:23:41.771137 env[1146]: time="2024-02-09T18:23:41.771135520Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 9 18:23:41.771208 env[1146]: time="2024-02-09T18:23:41.771190120Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 9 18:23:41.771240 env[1146]: time="2024-02-09T18:23:41.771205280Z" level=info msg="metadata content store policy set" policy=shared Feb 9 18:23:41.783030 env[1146]: time="2024-02-09T18:23:41.782995840Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 9 18:23:41.783098 env[1146]: time="2024-02-09T18:23:41.783036920Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 9 18:23:41.783098 env[1146]: time="2024-02-09T18:23:41.783051920Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 9 18:23:41.783153 env[1146]: time="2024-02-09T18:23:41.783082480Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 9 18:23:41.783176 env[1146]: time="2024-02-09T18:23:41.783150440Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 9 18:23:41.783197 env[1146]: time="2024-02-09T18:23:41.783182280Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 9 18:23:41.783217 env[1146]: time="2024-02-09T18:23:41.783196760Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 9 18:23:41.783576 env[1146]: time="2024-02-09T18:23:41.783553680Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 9 18:23:41.783616 env[1146]: time="2024-02-09T18:23:41.783576840Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 9 18:23:41.783616 env[1146]: time="2024-02-09T18:23:41.783592680Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 9 18:23:41.783663 env[1146]: time="2024-02-09T18:23:41.783615920Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 9 18:23:41.783663 env[1146]: time="2024-02-09T18:23:41.783630000Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 9 18:23:41.783803 env[1146]: time="2024-02-09T18:23:41.783780920Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 9 18:23:41.783897 env[1146]: time="2024-02-09T18:23:41.783879840Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 9 18:23:41.784131 env[1146]: time="2024-02-09T18:23:41.784110480Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 9 18:23:41.784169 env[1146]: time="2024-02-09T18:23:41.784140000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784169 env[1146]: time="2024-02-09T18:23:41.784162320Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 9 18:23:41.784290 env[1146]: time="2024-02-09T18:23:41.784273200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784320 env[1146]: time="2024-02-09T18:23:41.784290360Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784320 env[1146]: time="2024-02-09T18:23:41.784303320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784320 env[1146]: time="2024-02-09T18:23:41.784316000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784382 env[1146]: time="2024-02-09T18:23:41.784335400Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784382 env[1146]: time="2024-02-09T18:23:41.784349160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784382 env[1146]: time="2024-02-09T18:23:41.784360920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784382 env[1146]: time="2024-02-09T18:23:41.784372200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784458 env[1146]: time="2024-02-09T18:23:41.784384480Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 9 18:23:41.784557 env[1146]: time="2024-02-09T18:23:41.784538640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784587 env[1146]: time="2024-02-09T18:23:41.784561200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784587 env[1146]: time="2024-02-09T18:23:41.784575120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784625 env[1146]: time="2024-02-09T18:23:41.784586240Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 9 18:23:41.784625 env[1146]: time="2024-02-09T18:23:41.784599960Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 9 18:23:41.784625 env[1146]: time="2024-02-09T18:23:41.784620120Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 9 18:23:41.784680 env[1146]: time="2024-02-09T18:23:41.784638520Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 9 18:23:41.784680 env[1146]: time="2024-02-09T18:23:41.784672520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 9 18:23:41.784958 env[1146]: time="2024-02-09T18:23:41.784895440Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.784961800Z" level=info msg="Connect containerd service" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.785002440Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.785802920Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.786180720Z" level=info msg="Start subscribing containerd event" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.786199760Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.786226640Z" level=info msg="Start recovering state" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.786260240Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.786282240Z" level=info msg="Start event monitor" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.786305520Z" level=info msg="containerd successfully booted in 0.081280s" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.786311320Z" level=info msg="Start snapshots syncer" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.786336120Z" level=info msg="Start cni network conf syncer for default" Feb 9 18:23:41.788307 env[1146]: time="2024-02-09T18:23:41.786344320Z" level=info msg="Start streaming server" Feb 9 18:23:41.787518 systemd[1]: Started containerd.service. Feb 9 18:23:41.790449 tar[1141]: ./vrf Feb 9 18:23:41.821383 tar[1141]: ./sbr Feb 9 18:23:41.851201 tar[1141]: ./tap Feb 9 18:23:41.885889 tar[1141]: ./dhcp Feb 9 18:23:41.941584 systemd[1]: Finished prepare-critools.service. Feb 9 18:23:41.973896 tar[1141]: ./static Feb 9 18:23:41.997586 tar[1143]: linux-arm64/LICENSE Feb 9 18:23:41.997691 tar[1143]: linux-arm64/README.md Feb 9 18:23:42.000269 tar[1141]: ./firewall Feb 9 18:23:42.002737 systemd[1]: Finished prepare-helm.service. Feb 9 18:23:42.037471 locksmithd[1175]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 9 18:23:42.037887 tar[1141]: ./macvlan Feb 9 18:23:42.067309 tar[1141]: ./dummy Feb 9 18:23:42.096108 tar[1141]: ./bridge Feb 9 18:23:42.127231 tar[1141]: ./ipvlan Feb 9 18:23:42.140741 systemd-networkd[1057]: eth0: Gained IPv6LL Feb 9 18:23:42.156836 tar[1141]: ./portmap Feb 9 18:23:42.184033 tar[1141]: ./host-local Feb 9 18:23:42.218078 systemd[1]: Finished prepare-cni-plugins.service. Feb 9 18:23:43.908526 sshd_keygen[1136]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 9 18:23:43.927809 systemd[1]: Finished sshd-keygen.service. Feb 9 18:23:43.930204 systemd[1]: Starting issuegen.service... Feb 9 18:23:43.935339 systemd[1]: issuegen.service: Deactivated successfully. Feb 9 18:23:43.935509 systemd[1]: Finished issuegen.service. Feb 9 18:23:43.937847 systemd[1]: Starting systemd-user-sessions.service... Feb 9 18:23:43.945022 systemd[1]: Finished systemd-user-sessions.service. Feb 9 18:23:43.947293 systemd[1]: Started getty@tty1.service. Feb 9 18:23:43.949255 systemd[1]: Started serial-getty@ttyAMA0.service. Feb 9 18:23:43.950284 systemd[1]: Reached target getty.target. Feb 9 18:23:43.951061 systemd[1]: Reached target multi-user.target. Feb 9 18:23:43.953105 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 9 18:23:43.960417 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 9 18:23:43.960621 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 9 18:23:43.961583 systemd[1]: Startup finished in 583ms (kernel) + 5.651s (initrd) + 5.728s (userspace) = 11.964s. Feb 9 18:23:44.980831 systemd[1]: Created slice system-sshd.slice. Feb 9 18:23:44.982205 systemd[1]: Started sshd@0-10.0.0.32:22-10.0.0.1:34618.service. Feb 9 18:23:45.036013 sshd[1205]: Accepted publickey for core from 10.0.0.1 port 34618 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:23:45.038820 sshd[1205]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:23:45.046863 systemd[1]: Created slice user-500.slice. Feb 9 18:23:45.048209 systemd[1]: Starting user-runtime-dir@500.service... Feb 9 18:23:45.050345 systemd-logind[1130]: New session 1 of user core. Feb 9 18:23:45.056343 systemd[1]: Finished user-runtime-dir@500.service. Feb 9 18:23:45.057976 systemd[1]: Starting user@500.service... Feb 9 18:23:45.061053 (systemd)[1208]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:23:45.121437 systemd[1208]: Queued start job for default target default.target. Feb 9 18:23:45.121967 systemd[1208]: Reached target paths.target. Feb 9 18:23:45.121986 systemd[1208]: Reached target sockets.target. Feb 9 18:23:45.121998 systemd[1208]: Reached target timers.target. Feb 9 18:23:45.122008 systemd[1208]: Reached target basic.target. Feb 9 18:23:45.122060 systemd[1208]: Reached target default.target. Feb 9 18:23:45.122083 systemd[1208]: Startup finished in 54ms. Feb 9 18:23:45.122285 systemd[1]: Started user@500.service. Feb 9 18:23:45.123310 systemd[1]: Started session-1.scope. Feb 9 18:23:45.174630 systemd[1]: Started sshd@1-10.0.0.32:22-10.0.0.1:34622.service. Feb 9 18:23:45.231499 sshd[1217]: Accepted publickey for core from 10.0.0.1 port 34622 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:23:45.232645 sshd[1217]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:23:45.236631 systemd-logind[1130]: New session 2 of user core. Feb 9 18:23:45.237057 systemd[1]: Started session-2.scope. Feb 9 18:23:45.294589 sshd[1217]: pam_unix(sshd:session): session closed for user core Feb 9 18:23:45.297072 systemd[1]: sshd@1-10.0.0.32:22-10.0.0.1:34622.service: Deactivated successfully. Feb 9 18:23:45.297715 systemd[1]: session-2.scope: Deactivated successfully. Feb 9 18:23:45.298346 systemd-logind[1130]: Session 2 logged out. Waiting for processes to exit. Feb 9 18:23:45.299709 systemd[1]: Started sshd@2-10.0.0.32:22-10.0.0.1:34624.service. Feb 9 18:23:45.300506 systemd-logind[1130]: Removed session 2. Feb 9 18:23:45.341115 sshd[1223]: Accepted publickey for core from 10.0.0.1 port 34624 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:23:45.342173 sshd[1223]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:23:45.345588 systemd-logind[1130]: New session 3 of user core. Feb 9 18:23:45.345992 systemd[1]: Started session-3.scope. Feb 9 18:23:45.396058 sshd[1223]: pam_unix(sshd:session): session closed for user core Feb 9 18:23:45.398660 systemd[1]: sshd@2-10.0.0.32:22-10.0.0.1:34624.service: Deactivated successfully. Feb 9 18:23:45.399189 systemd[1]: session-3.scope: Deactivated successfully. Feb 9 18:23:45.399654 systemd-logind[1130]: Session 3 logged out. Waiting for processes to exit. Feb 9 18:23:45.400646 systemd[1]: Started sshd@3-10.0.0.32:22-10.0.0.1:34628.service. Feb 9 18:23:45.401314 systemd-logind[1130]: Removed session 3. Feb 9 18:23:45.441555 sshd[1230]: Accepted publickey for core from 10.0.0.1 port 34628 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:23:45.442724 sshd[1230]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:23:45.445810 systemd-logind[1130]: New session 4 of user core. Feb 9 18:23:45.446597 systemd[1]: Started session-4.scope. Feb 9 18:23:45.500563 sshd[1230]: pam_unix(sshd:session): session closed for user core Feb 9 18:23:45.503266 systemd[1]: sshd@3-10.0.0.32:22-10.0.0.1:34628.service: Deactivated successfully. Feb 9 18:23:45.503893 systemd[1]: session-4.scope: Deactivated successfully. Feb 9 18:23:45.504347 systemd-logind[1130]: Session 4 logged out. Waiting for processes to exit. Feb 9 18:23:45.505801 systemd[1]: Started sshd@4-10.0.0.32:22-10.0.0.1:34636.service. Feb 9 18:23:45.506363 systemd-logind[1130]: Removed session 4. Feb 9 18:23:45.554179 sshd[1236]: Accepted publickey for core from 10.0.0.1 port 34636 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:23:45.557179 sshd[1236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:23:45.560938 systemd-logind[1130]: New session 5 of user core. Feb 9 18:23:45.561343 systemd[1]: Started session-5.scope. Feb 9 18:23:45.626217 sudo[1240]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 9 18:23:45.626430 sudo[1240]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 18:23:45.634759 dbus-daemon[1117]: avc: received setenforce notice (enforcing=1) Feb 9 18:23:45.636480 sudo[1240]: pam_unix(sudo:session): session closed for user root Feb 9 18:23:45.638238 sshd[1236]: pam_unix(sshd:session): session closed for user core Feb 9 18:23:45.640950 systemd[1]: sshd@4-10.0.0.32:22-10.0.0.1:34636.service: Deactivated successfully. Feb 9 18:23:45.641595 systemd[1]: session-5.scope: Deactivated successfully. Feb 9 18:23:45.642129 systemd-logind[1130]: Session 5 logged out. Waiting for processes to exit. Feb 9 18:23:45.643102 systemd[1]: Started sshd@5-10.0.0.32:22-10.0.0.1:34642.service. Feb 9 18:23:45.643787 systemd-logind[1130]: Removed session 5. Feb 9 18:23:45.685045 sshd[1244]: Accepted publickey for core from 10.0.0.1 port 34642 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:23:45.686162 sshd[1244]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:23:45.689397 systemd-logind[1130]: New session 6 of user core. Feb 9 18:23:45.690156 systemd[1]: Started session-6.scope. Feb 9 18:23:45.741896 sudo[1248]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 9 18:23:45.742103 sudo[1248]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 18:23:45.744857 sudo[1248]: pam_unix(sudo:session): session closed for user root Feb 9 18:23:45.748879 sudo[1247]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 9 18:23:45.749080 sudo[1247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 18:23:45.757342 systemd[1]: Stopping audit-rules.service... Feb 9 18:23:45.757000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 18:23:45.758956 auditctl[1251]: No rules Feb 9 18:23:45.759835 systemd[1]: audit-rules.service: Deactivated successfully. Feb 9 18:23:45.760013 systemd[1]: Stopped audit-rules.service. Feb 9 18:23:45.760593 kernel: kauditd_printk_skb: 132 callbacks suppressed Feb 9 18:23:45.760649 kernel: audit: type=1305 audit(1707503025.757:164): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 18:23:45.760671 kernel: audit: type=1300 audit(1707503025.757:164): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffee86d7f0 a2=420 a3=0 items=0 ppid=1 pid=1251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:45.757000 audit[1251]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffee86d7f0 a2=420 a3=0 items=0 ppid=1 pid=1251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:45.761372 systemd[1]: Starting audit-rules.service... Feb 9 18:23:45.763143 kernel: audit: type=1327 audit(1707503025.757:164): proctitle=2F7362696E2F617564697463746C002D44 Feb 9 18:23:45.757000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 9 18:23:45.763894 kernel: audit: type=1131 audit(1707503025.758:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.777350 augenrules[1268]: No rules Feb 9 18:23:45.777982 systemd[1]: Finished audit-rules.service. Feb 9 18:23:45.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.779075 sudo[1247]: pam_unix(sudo:session): session closed for user root Feb 9 18:23:45.777000 audit[1247]: USER_END pid=1247 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.781354 sshd[1244]: pam_unix(sshd:session): session closed for user core Feb 9 18:23:45.784202 kernel: audit: type=1130 audit(1707503025.776:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.784254 kernel: audit: type=1106 audit(1707503025.777:167): pid=1247 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.784285 kernel: audit: type=1104 audit(1707503025.777:168): pid=1247 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.777000 audit[1247]: CRED_DISP pid=1247 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.785058 systemd[1]: Started sshd@6-10.0.0.32:22-10.0.0.1:34644.service. Feb 9 18:23:45.785783 systemd[1]: sshd@5-10.0.0.32:22-10.0.0.1:34642.service: Deactivated successfully. Feb 9 18:23:45.786411 systemd[1]: session-6.scope: Deactivated successfully. Feb 9 18:23:45.787590 systemd-logind[1130]: Session 6 logged out. Waiting for processes to exit. Feb 9 18:23:45.788457 systemd-logind[1130]: Removed session 6. Feb 9 18:23:45.782000 audit[1244]: USER_END pid=1244 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:23:45.791965 kernel: audit: type=1106 audit(1707503025.782:169): pid=1244 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:23:45.792006 kernel: audit: type=1104 audit(1707503025.783:170): pid=1244 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:23:45.783000 audit[1244]: CRED_DISP pid=1244 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:23:45.795882 kernel: audit: type=1130 audit(1707503025.783:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.32:22-10.0.0.1:34644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.32:22-10.0.0.1:34644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.32:22-10.0.0.1:34642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.825000 audit[1273]: USER_ACCT pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:23:45.827514 sshd[1273]: Accepted publickey for core from 10.0.0.1 port 34644 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:23:45.827000 audit[1273]: CRED_ACQ pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:23:45.827000 audit[1273]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9056970 a2=3 a3=1 items=0 ppid=1 pid=1273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:45.827000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:23:45.828977 sshd[1273]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:23:45.832595 systemd-logind[1130]: New session 7 of user core. Feb 9 18:23:45.833171 systemd[1]: Started session-7.scope. Feb 9 18:23:45.834000 audit[1273]: USER_START pid=1273 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:23:45.836000 audit[1276]: CRED_ACQ pid=1276 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:23:45.882000 audit[1277]: USER_ACCT pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.883000 audit[1277]: CRED_REFR pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:23:45.884550 sudo[1277]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 9 18:23:45.884761 sudo[1277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 18:23:45.884000 audit[1277]: USER_START pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:23:46.449211 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 9 18:23:46.454998 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 9 18:23:46.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:46.455286 systemd[1]: Reached target network-online.target. Feb 9 18:23:46.456635 systemd[1]: Starting docker.service... Feb 9 18:23:46.536023 env[1295]: time="2024-02-09T18:23:46.535962227Z" level=info msg="Starting up" Feb 9 18:23:46.537561 env[1295]: time="2024-02-09T18:23:46.537511950Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 18:23:46.537561 env[1295]: time="2024-02-09T18:23:46.537561069Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 18:23:46.537657 env[1295]: time="2024-02-09T18:23:46.537594268Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 18:23:46.537657 env[1295]: time="2024-02-09T18:23:46.537606028Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 18:23:46.539531 env[1295]: time="2024-02-09T18:23:46.539500944Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 18:23:46.539604 env[1295]: time="2024-02-09T18:23:46.539523063Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 18:23:46.539604 env[1295]: time="2024-02-09T18:23:46.539559502Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 18:23:46.539604 env[1295]: time="2024-02-09T18:23:46.539572062Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 18:23:46.543310 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1490110068-merged.mount: Deactivated successfully. Feb 9 18:23:46.776771 env[1295]: time="2024-02-09T18:23:46.776668238Z" level=info msg="Loading containers: start." Feb 9 18:23:46.817000 audit[1330]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.817000 audit[1330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc3d8a640 a2=0 a3=1 items=0 ppid=1295 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.817000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 9 18:23:46.821000 audit[1332]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.821000 audit[1332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffe8a74e00 a2=0 a3=1 items=0 ppid=1295 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.821000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 9 18:23:46.822000 audit[1334]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.822000 audit[1334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe751f550 a2=0 a3=1 items=0 ppid=1295 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.822000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 18:23:46.824000 audit[1336]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.824000 audit[1336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd68b32c0 a2=0 a3=1 items=0 ppid=1295 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.824000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 18:23:46.826000 audit[1338]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.826000 audit[1338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe58e6000 a2=0 a3=1 items=0 ppid=1295 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.826000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 9 18:23:46.848000 audit[1343]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.848000 audit[1343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff99b3c20 a2=0 a3=1 items=0 ppid=1295 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.848000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 9 18:23:46.857000 audit[1345]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.857000 audit[1345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc8111b90 a2=0 a3=1 items=0 ppid=1295 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.857000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 9 18:23:46.859000 audit[1347]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.859000 audit[1347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffddab2ef0 a2=0 a3=1 items=0 ppid=1295 pid=1347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.859000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 9 18:23:46.860000 audit[1349]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.860000 audit[1349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffcd258c70 a2=0 a3=1 items=0 ppid=1295 pid=1349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.860000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:23:46.868000 audit[1353]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.868000 audit[1353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff0600cd0 a2=0 a3=1 items=0 ppid=1295 pid=1353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.868000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:23:46.869000 audit[1354]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1354 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.869000 audit[1354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffdcbb0860 a2=0 a3=1 items=0 ppid=1295 pid=1354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.869000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:23:46.876541 kernel: Initializing XFRM netlink socket Feb 9 18:23:46.897798 env[1295]: time="2024-02-09T18:23:46.897760626Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 9 18:23:46.910000 audit[1362]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1362 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.910000 audit[1362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff3bc79e0 a2=0 a3=1 items=0 ppid=1295 pid=1362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.910000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 9 18:23:46.929000 audit[1365]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1365 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.929000 audit[1365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd01f43a0 a2=0 a3=1 items=0 ppid=1295 pid=1365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.929000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 9 18:23:46.931000 audit[1368]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1368 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.931000 audit[1368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffd03eb2d0 a2=0 a3=1 items=0 ppid=1295 pid=1368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.931000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 9 18:23:46.933000 audit[1370]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.933000 audit[1370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff80ba800 a2=0 a3=1 items=0 ppid=1295 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.933000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 9 18:23:46.935000 audit[1372]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1372 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.935000 audit[1372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd8792d60 a2=0 a3=1 items=0 ppid=1295 pid=1372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.935000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 9 18:23:46.938000 audit[1374]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.938000 audit[1374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffff04f1870 a2=0 a3=1 items=0 ppid=1295 pid=1374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.938000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 9 18:23:46.940000 audit[1376]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1376 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.940000 audit[1376]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff008a910 a2=0 a3=1 items=0 ppid=1295 pid=1376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.940000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 9 18:23:46.948000 audit[1379]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.948000 audit[1379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffe35012e0 a2=0 a3=1 items=0 ppid=1295 pid=1379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.948000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 9 18:23:46.950000 audit[1381]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1381 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.950000 audit[1381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffcf2e3ae0 a2=0 a3=1 items=0 ppid=1295 pid=1381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.950000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 18:23:46.951000 audit[1383]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.951000 audit[1383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffd32860d0 a2=0 a3=1 items=0 ppid=1295 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.951000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 18:23:46.953000 audit[1385]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.953000 audit[1385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc8045390 a2=0 a3=1 items=0 ppid=1295 pid=1385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.953000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 9 18:23:46.955351 systemd-networkd[1057]: docker0: Link UP Feb 9 18:23:46.960000 audit[1389]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.960000 audit[1389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffca8c37e0 a2=0 a3=1 items=0 ppid=1295 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.960000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:23:46.961000 audit[1390]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:23:46.961000 audit[1390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffeb5e73d0 a2=0 a3=1 items=0 ppid=1295 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:23:46.961000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:23:46.962997 env[1295]: time="2024-02-09T18:23:46.962959290Z" level=info msg="Loading containers: done." Feb 9 18:23:46.983261 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck892217921-merged.mount: Deactivated successfully. Feb 9 18:23:46.989356 env[1295]: time="2024-02-09T18:23:46.989308630Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 9 18:23:46.989483 env[1295]: time="2024-02-09T18:23:46.989466146Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 9 18:23:46.989612 env[1295]: time="2024-02-09T18:23:46.989594063Z" level=info msg="Daemon has completed initialization" Feb 9 18:23:47.005706 systemd[1]: Started docker.service. Feb 9 18:23:47.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:47.006675 env[1295]: time="2024-02-09T18:23:47.006635349Z" level=info msg="API listen on /run/docker.sock" Feb 9 18:23:47.022720 systemd[1]: Reloading. Feb 9 18:23:47.062201 /usr/lib/systemd/system-generators/torcx-generator[1438]: time="2024-02-09T18:23:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 18:23:47.062228 /usr/lib/systemd/system-generators/torcx-generator[1438]: time="2024-02-09T18:23:47Z" level=info msg="torcx already run" Feb 9 18:23:47.117080 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 18:23:47.117098 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 18:23:47.133887 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit: BPF prog-id=34 op=LOAD Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit: BPF prog-id=35 op=LOAD Feb 9 18:23:47.177000 audit: BPF prog-id=21 op=UNLOAD Feb 9 18:23:47.177000 audit: BPF prog-id=22 op=UNLOAD Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.177000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit: BPF prog-id=36 op=LOAD Feb 9 18:23:47.178000 audit: BPF prog-id=23 op=UNLOAD Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.178000 audit: BPF prog-id=37 op=LOAD Feb 9 18:23:47.178000 audit: BPF prog-id=27 op=UNLOAD Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit: BPF prog-id=38 op=LOAD Feb 9 18:23:47.179000 audit: BPF prog-id=28 op=UNLOAD Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.179000 audit: BPF prog-id=39 op=LOAD Feb 9 18:23:47.179000 audit: BPF prog-id=18 op=UNLOAD Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit: BPF prog-id=40 op=LOAD Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit: BPF prog-id=41 op=LOAD Feb 9 18:23:47.180000 audit: BPF prog-id=19 op=UNLOAD Feb 9 18:23:47.180000 audit: BPF prog-id=20 op=UNLOAD Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit: BPF prog-id=42 op=LOAD Feb 9 18:23:47.180000 audit: BPF prog-id=24 op=UNLOAD Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit: BPF prog-id=43 op=LOAD Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.180000 audit: BPF prog-id=44 op=LOAD Feb 9 18:23:47.180000 audit: BPF prog-id=25 op=UNLOAD Feb 9 18:23:47.180000 audit: BPF prog-id=26 op=UNLOAD Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit: BPF prog-id=45 op=LOAD Feb 9 18:23:47.182000 audit: BPF prog-id=29 op=UNLOAD Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit: BPF prog-id=46 op=LOAD Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.182000 audit: BPF prog-id=47 op=LOAD Feb 9 18:23:47.182000 audit: BPF prog-id=30 op=UNLOAD Feb 9 18:23:47.182000 audit: BPF prog-id=31 op=UNLOAD Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:23:47.184000 audit: BPF prog-id=48 op=LOAD Feb 9 18:23:47.184000 audit: BPF prog-id=32 op=UNLOAD Feb 9 18:23:47.191641 systemd[1]: Started kubelet.service. Feb 9 18:23:47.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:47.320223 kubelet[1475]: E0209 18:23:47.320074 1475 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 9 18:23:47.323006 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 18:23:47.323130 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 18:23:47.321000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 18:23:47.650064 env[1146]: time="2024-02-09T18:23:47.649956305Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\"" Feb 9 18:23:48.282404 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount5184536.mount: Deactivated successfully. Feb 9 18:23:49.988121 env[1146]: time="2024-02-09T18:23:49.988072817Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:49.989546 env[1146]: time="2024-02-09T18:23:49.989493749Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:d19178cf7413f0942a116deaaea447983d297afb5dc7f62456c43839e7aaecfa,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:49.991579 env[1146]: time="2024-02-09T18:23:49.991549909Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:49.993219 env[1146]: time="2024-02-09T18:23:49.993196317Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:cfcebda74d6e665b68931d3589ee69fde81cd503ff3169888e4502af65579d98,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:49.994082 env[1146]: time="2024-02-09T18:23:49.994049581Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.10\" returns image reference \"sha256:d19178cf7413f0942a116deaaea447983d297afb5dc7f62456c43839e7aaecfa\"" Feb 9 18:23:50.003710 env[1146]: time="2024-02-09T18:23:50.003681796Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\"" Feb 9 18:23:51.905781 env[1146]: time="2024-02-09T18:23:51.905724381Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:51.908977 env[1146]: time="2024-02-09T18:23:51.908937606Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6b9759f115be4c68b4a500b8c1d7bbeaf16e8e887b01eaf79c135b7b267baf95,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:51.910692 env[1146]: time="2024-02-09T18:23:51.910661977Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:51.912351 env[1146]: time="2024-02-09T18:23:51.912323708Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:fa168ebca1f6dbfe86ef0a690e007531c1f53569274fc7dc2774fe228b6ce8c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:51.913906 env[1146]: time="2024-02-09T18:23:51.913875602Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.10\" returns image reference \"sha256:6b9759f115be4c68b4a500b8c1d7bbeaf16e8e887b01eaf79c135b7b267baf95\"" Feb 9 18:23:51.922751 env[1146]: time="2024-02-09T18:23:51.922723811Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\"" Feb 9 18:23:53.056163 env[1146]: time="2024-02-09T18:23:53.056093417Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:53.057654 env[1146]: time="2024-02-09T18:23:53.057619954Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:745369ed75bfc0dd1319e4c64383b4ef2cb163cec6630fa288ad3fb6bf6624eb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:53.059389 env[1146]: time="2024-02-09T18:23:53.059342248Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:53.061768 env[1146]: time="2024-02-09T18:23:53.061739972Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:09294de61e63987f181077cbc2f5c82463878af9cd8ecc6110c54150c9ae3143,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:53.062454 env[1146]: time="2024-02-09T18:23:53.062421762Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.10\" returns image reference \"sha256:745369ed75bfc0dd1319e4c64383b4ef2cb163cec6630fa288ad3fb6bf6624eb\"" Feb 9 18:23:53.072384 env[1146]: time="2024-02-09T18:23:53.072342133Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\"" Feb 9 18:23:54.149140 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3510070355.mount: Deactivated successfully. Feb 9 18:23:54.525389 env[1146]: time="2024-02-09T18:23:54.525167845Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:54.526849 env[1146]: time="2024-02-09T18:23:54.526811542Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f17f9528c5073692925255c3de3f310109480873912e8b5ddc171ae1e64324ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:54.528515 env[1146]: time="2024-02-09T18:23:54.528487519Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:54.529612 env[1146]: time="2024-02-09T18:23:54.529576543Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d084b53c772f62ec38fddb2348a82d4234016daf6cd43fedbf0b3281f3790f88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:54.530139 env[1146]: time="2024-02-09T18:23:54.530105496Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.10\" returns image reference \"sha256:f17f9528c5073692925255c3de3f310109480873912e8b5ddc171ae1e64324ef\"" Feb 9 18:23:54.539254 env[1146]: time="2024-02-09T18:23:54.539184808Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 9 18:23:54.988098 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3393439812.mount: Deactivated successfully. Feb 9 18:23:54.992079 env[1146]: time="2024-02-09T18:23:54.992042444Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:54.994121 env[1146]: time="2024-02-09T18:23:54.994083415Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:54.996171 env[1146]: time="2024-02-09T18:23:54.996139386Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:54.997926 env[1146]: time="2024-02-09T18:23:54.997896802Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:54.998170 env[1146]: time="2024-02-09T18:23:54.998147878Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Feb 9 18:23:55.006704 env[1146]: time="2024-02-09T18:23:55.006673323Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Feb 9 18:23:55.780636 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4285895196.mount: Deactivated successfully. Feb 9 18:23:57.573930 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 9 18:23:57.572000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:57.574106 systemd[1]: Stopped kubelet.service. Feb 9 18:23:57.574660 kernel: kauditd_printk_skb: 259 callbacks suppressed Feb 9 18:23:57.574758 kernel: audit: type=1130 audit(1707503037.572:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:57.575560 systemd[1]: Started kubelet.service. Feb 9 18:23:57.572000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:57.578121 kernel: audit: type=1131 audit(1707503037.572:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:57.578169 kernel: audit: type=1130 audit(1707503037.574:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:57.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:23:57.627649 kubelet[1529]: E0209 18:23:57.627595 1529 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Feb 9 18:23:57.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 18:23:57.630710 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 18:23:57.630835 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 18:23:57.633639 kernel: audit: type=1131 audit(1707503037.629:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 18:23:57.679781 env[1146]: time="2024-02-09T18:23:57.679725330Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:57.681024 env[1146]: time="2024-02-09T18:23:57.680978876Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:57.683938 env[1146]: time="2024-02-09T18:23:57.683900122Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:57.685901 env[1146]: time="2024-02-09T18:23:57.685856579Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:57.686513 env[1146]: time="2024-02-09T18:23:57.686482372Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:24bc64e911039ecf00e263be2161797c758b7d82403ca5516ab64047a477f737\"" Feb 9 18:23:57.695984 env[1146]: time="2024-02-09T18:23:57.695945582Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Feb 9 18:23:58.205118 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1074860939.mount: Deactivated successfully. Feb 9 18:23:58.882561 env[1146]: time="2024-02-09T18:23:58.882495840Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:58.885055 env[1146]: time="2024-02-09T18:23:58.885013493Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:58.886385 env[1146]: time="2024-02-09T18:23:58.886349078Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:58.888025 env[1146]: time="2024-02-09T18:23:58.887997220Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:23:58.888582 env[1146]: time="2024-02-09T18:23:58.888550574Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Feb 9 18:24:03.658560 systemd[1]: Stopped kubelet.service. Feb 9 18:24:03.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:03.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:03.663141 kernel: audit: type=1130 audit(1707503043.657:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:03.663214 kernel: audit: type=1131 audit(1707503043.657:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:03.673901 systemd[1]: Reloading. Feb 9 18:24:03.717047 /usr/lib/systemd/system-generators/torcx-generator[1643]: time="2024-02-09T18:24:03Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 18:24:03.717076 /usr/lib/systemd/system-generators/torcx-generator[1643]: time="2024-02-09T18:24:03Z" level=info msg="torcx already run" Feb 9 18:24:03.777457 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 18:24:03.777476 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 18:24:03.794646 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 18:24:03.847194 kernel: audit: type=1400 audit(1707503043.838:387): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.847285 kernel: audit: type=1400 audit(1707503043.838:388): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.847321 kernel: audit: type=1400 audit(1707503043.838:389): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.847344 kernel: audit: type=1400 audit(1707503043.838:390): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.851007 kernel: audit: type=1400 audit(1707503043.838:391): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.851047 kernel: audit: type=1400 audit(1707503043.838:392): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.853373 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 9 18:24:03.853418 kernel: audit: type=1400 audit(1707503043.838:393): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.840000 audit: BPF prog-id=49 op=LOAD Feb 9 18:24:03.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit: BPF prog-id=50 op=LOAD Feb 9 18:24:03.842000 audit: BPF prog-id=34 op=UNLOAD Feb 9 18:24:03.842000 audit: BPF prog-id=35 op=UNLOAD Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.843000 audit: BPF prog-id=51 op=LOAD Feb 9 18:24:03.843000 audit: BPF prog-id=36 op=UNLOAD Feb 9 18:24:03.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.844000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.844000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.845000 audit: BPF prog-id=52 op=LOAD Feb 9 18:24:03.845000 audit: BPF prog-id=37 op=UNLOAD Feb 9 18:24:03.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.846000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.847000 audit: BPF prog-id=53 op=LOAD Feb 9 18:24:03.847000 audit: BPF prog-id=38 op=UNLOAD Feb 9 18:24:03.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.849000 audit: BPF prog-id=54 op=LOAD Feb 9 18:24:03.849000 audit: BPF prog-id=39 op=UNLOAD Feb 9 18:24:03.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.851000 audit: BPF prog-id=41 op=UNLOAD Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit: BPF prog-id=57 op=LOAD Feb 9 18:24:03.852000 audit: BPF prog-id=42 op=UNLOAD Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit: BPF prog-id=58 op=LOAD Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.852000 audit: BPF prog-id=43 op=UNLOAD Feb 9 18:24:03.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit: BPF prog-id=60 op=LOAD Feb 9 18:24:03.854000 audit: BPF prog-id=45 op=UNLOAD Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit: BPF prog-id=61 op=LOAD Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.854000 audit: BPF prog-id=62 op=LOAD Feb 9 18:24:03.854000 audit: BPF prog-id=46 op=UNLOAD Feb 9 18:24:03.854000 audit: BPF prog-id=47 op=UNLOAD Feb 9 18:24:03.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.856000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:03.856000 audit: BPF prog-id=63 op=LOAD Feb 9 18:24:03.856000 audit: BPF prog-id=48 op=UNLOAD Feb 9 18:24:03.867489 systemd[1]: Started kubelet.service. Feb 9 18:24:03.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:03.906656 kubelet[1681]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 18:24:03.906656 kubelet[1681]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 18:24:03.906656 kubelet[1681]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 18:24:03.907252 kubelet[1681]: I0209 18:24:03.906697 1681 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 18:24:04.403414 kubelet[1681]: I0209 18:24:04.403381 1681 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 9 18:24:04.403582 kubelet[1681]: I0209 18:24:04.403569 1681 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 18:24:04.403884 kubelet[1681]: I0209 18:24:04.403865 1681 server.go:837] "Client rotation is on, will bootstrap in background" Feb 9 18:24:04.408622 kubelet[1681]: I0209 18:24:04.408554 1681 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 18:24:04.408961 kubelet[1681]: E0209 18:24:04.408933 1681 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.32:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:04.410494 kubelet[1681]: W0209 18:24:04.410474 1681 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 18:24:04.411268 kubelet[1681]: I0209 18:24:04.411247 1681 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 18:24:04.411570 kubelet[1681]: I0209 18:24:04.411555 1681 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 18:24:04.411703 kubelet[1681]: I0209 18:24:04.411683 1681 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 9 18:24:04.411835 kubelet[1681]: I0209 18:24:04.411823 1681 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 9 18:24:04.411893 kubelet[1681]: I0209 18:24:04.411884 1681 container_manager_linux.go:302] "Creating device plugin manager" Feb 9 18:24:04.412026 kubelet[1681]: I0209 18:24:04.412013 1681 state_mem.go:36] "Initialized new in-memory state store" Feb 9 18:24:04.415453 kubelet[1681]: I0209 18:24:04.415431 1681 kubelet.go:405] "Attempting to sync node with API server" Feb 9 18:24:04.415601 kubelet[1681]: I0209 18:24:04.415589 1681 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 18:24:04.415674 kubelet[1681]: I0209 18:24:04.415665 1681 kubelet.go:309] "Adding apiserver pod source" Feb 9 18:24:04.415737 kubelet[1681]: I0209 18:24:04.415729 1681 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 18:24:04.416435 kubelet[1681]: W0209 18:24:04.416399 1681 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.32:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:04.416550 kubelet[1681]: E0209 18:24:04.416522 1681 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.32:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:04.416673 kubelet[1681]: I0209 18:24:04.416659 1681 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 18:24:04.417070 kubelet[1681]: W0209 18:24:04.417054 1681 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 9 18:24:04.417663 kubelet[1681]: W0209 18:24:04.417615 1681 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.32:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:04.417663 kubelet[1681]: E0209 18:24:04.417662 1681 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.32:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:04.417868 kubelet[1681]: I0209 18:24:04.417853 1681 server.go:1168] "Started kubelet" Feb 9 18:24:04.418126 kubelet[1681]: I0209 18:24:04.418047 1681 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 18:24:04.418421 kubelet[1681]: I0209 18:24:04.418403 1681 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 18:24:04.418966 kubelet[1681]: E0209 18:24:04.418878 1681 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.17b244f8df6c3f90", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2024, time.February, 9, 18, 24, 4, 417830800, time.Local), LastTimestamp:time.Date(2024, time.February, 9, 18, 24, 4, 417830800, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://10.0.0.32:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.32:6443: connect: connection refused'(may retry after sleeping) Feb 9 18:24:04.419084 kubelet[1681]: I0209 18:24:04.418958 1681 server.go:461] "Adding debug handlers to kubelet server" Feb 9 18:24:04.419000 audit[1681]: AVC avc: denied { mac_admin } for pid=1681 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:04.419000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:24:04.419000 audit[1681]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40006e9bf0 a1=4000a0eb10 a2=40006e9bc0 a3=25 items=0 ppid=1 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.419000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:24:04.421515 kubelet[1681]: I0209 18:24:04.421499 1681 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 18:24:04.420000 audit[1681]: AVC avc: denied { mac_admin } for pid=1681 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:04.420000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:24:04.420000 audit[1681]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40006fb200 a1=4000a0eb28 a2=40006e9c80 a3=25 items=0 ppid=1 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.420000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:24:04.421804 kubelet[1681]: I0209 18:24:04.421791 1681 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 18:24:04.421933 kubelet[1681]: E0209 18:24:04.421892 1681 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 18:24:04.421933 kubelet[1681]: E0209 18:24:04.421931 1681 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 18:24:04.422193 kubelet[1681]: I0209 18:24:04.421912 1681 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 18:24:04.423518 kubelet[1681]: I0209 18:24:04.423492 1681 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 9 18:24:04.423625 kubelet[1681]: I0209 18:24:04.423608 1681 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 9 18:24:04.423868 kubelet[1681]: E0209 18:24:04.423848 1681 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.32:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.32:6443: connect: connection refused" interval="200ms" Feb 9 18:24:04.424460 kubelet[1681]: W0209 18:24:04.424419 1681 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.32:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:04.424513 kubelet[1681]: E0209 18:24:04.424469 1681 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.32:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:04.424000 audit[1693]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:04.424000 audit[1693]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe37caad0 a2=0 a3=1 items=0 ppid=1681 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.424000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 18:24:04.425000 audit[1694]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:04.425000 audit[1694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe28bcf30 a2=0 a3=1 items=0 ppid=1681 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.425000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 18:24:04.427000 audit[1696]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:04.427000 audit[1696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffe879a3c0 a2=0 a3=1 items=0 ppid=1681 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.427000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 18:24:04.429000 audit[1698]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:04.429000 audit[1698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffdee388f0 a2=0 a3=1 items=0 ppid=1681 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.429000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 18:24:04.436000 audit[1703]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1703 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:04.436000 audit[1703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffd815c080 a2=0 a3=1 items=0 ppid=1681 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.436000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 9 18:24:04.438053 kubelet[1681]: I0209 18:24:04.438035 1681 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 9 18:24:04.437000 audit[1707]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:04.437000 audit[1707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe31e77c0 a2=0 a3=1 items=0 ppid=1681 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.437000 audit[1706]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1706 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:04.437000 audit[1706]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffdde21d60 a2=0 a3=1 items=0 ppid=1681 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.437000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 18:24:04.439298 kubelet[1681]: I0209 18:24:04.439273 1681 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 9 18:24:04.439392 kubelet[1681]: I0209 18:24:04.439381 1681 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 9 18:24:04.439462 kubelet[1681]: I0209 18:24:04.439452 1681 kubelet.go:2257] "Starting kubelet main sync loop" Feb 9 18:24:04.439583 kubelet[1681]: E0209 18:24:04.439570 1681 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 18:24:04.437000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 18:24:04.440121 kubelet[1681]: W0209 18:24:04.440065 1681 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.32:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:04.440121 kubelet[1681]: E0209 18:24:04.440118 1681 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.32:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:04.439000 audit[1710]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1710 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:04.439000 audit[1710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0eb1d10 a2=0 a3=1 items=0 ppid=1681 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.439000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 18:24:04.441421 kubelet[1681]: I0209 18:24:04.441403 1681 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 18:24:04.441421 kubelet[1681]: I0209 18:24:04.441418 1681 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 18:24:04.441504 kubelet[1681]: I0209 18:24:04.441432 1681 state_mem.go:36] "Initialized new in-memory state store" Feb 9 18:24:04.440000 audit[1712]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1712 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:04.440000 audit[1712]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe574cc20 a2=0 a3=1 items=0 ppid=1681 pid=1712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 18:24:04.440000 audit[1711]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=1711 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:04.440000 audit[1711]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeab3f080 a2=0 a3=1 items=0 ppid=1681 pid=1711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.440000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 18:24:04.441000 audit[1713]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:04.441000 audit[1713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffeeb7bfc0 a2=0 a3=1 items=0 ppid=1681 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.441000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 18:24:04.443424 kubelet[1681]: I0209 18:24:04.443397 1681 policy_none.go:49] "None policy: Start" Feb 9 18:24:04.442000 audit[1714]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1714 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:04.442000 audit[1714]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffa8c7c70 a2=0 a3=1 items=0 ppid=1681 pid=1714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 18:24:04.443989 kubelet[1681]: I0209 18:24:04.443975 1681 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 18:24:04.444035 kubelet[1681]: I0209 18:24:04.444000 1681 state_mem.go:35] "Initializing new in-memory state store" Feb 9 18:24:04.448464 systemd[1]: Created slice kubepods.slice. Feb 9 18:24:04.451945 systemd[1]: Created slice kubepods-burstable.slice. Feb 9 18:24:04.454312 systemd[1]: Created slice kubepods-besteffort.slice. Feb 9 18:24:04.465308 kubelet[1681]: I0209 18:24:04.465285 1681 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 18:24:04.463000 audit[1681]: AVC avc: denied { mac_admin } for pid=1681 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:04.463000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:24:04.463000 audit[1681]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400108dc50 a1=4001087068 a2=400108dc20 a3=25 items=0 ppid=1 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:04.463000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:24:04.465670 kubelet[1681]: I0209 18:24:04.465653 1681 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 18:24:04.466240 kubelet[1681]: I0209 18:24:04.466225 1681 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 18:24:04.466588 kubelet[1681]: E0209 18:24:04.466227 1681 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Feb 9 18:24:04.524777 kubelet[1681]: I0209 18:24:04.524759 1681 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:24:04.525209 kubelet[1681]: E0209 18:24:04.525190 1681 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.32:6443/api/v1/nodes\": dial tcp 10.0.0.32:6443: connect: connection refused" node="localhost" Feb 9 18:24:04.540407 kubelet[1681]: I0209 18:24:04.540385 1681 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:04.541628 kubelet[1681]: I0209 18:24:04.541600 1681 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:04.542304 kubelet[1681]: I0209 18:24:04.542273 1681 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:04.546480 systemd[1]: Created slice kubepods-burstable-pod7e49e243b40f7a396c87195d7675eac4.slice. Feb 9 18:24:04.560666 systemd[1]: Created slice kubepods-burstable-pod7709ea05d7cdf82b0d7e594b61a10331.slice. Feb 9 18:24:04.564304 systemd[1]: Created slice kubepods-burstable-pod2b0e94b38682f4e439413801d3cc54db.slice. Feb 9 18:24:04.624894 kubelet[1681]: E0209 18:24:04.624858 1681 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.32:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.32:6443: connect: connection refused" interval="400ms" Feb 9 18:24:04.725606 kubelet[1681]: I0209 18:24:04.725509 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7e49e243b40f7a396c87195d7675eac4-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"7e49e243b40f7a396c87195d7675eac4\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:24:04.725753 kubelet[1681]: I0209 18:24:04.725737 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:04.725828 kubelet[1681]: I0209 18:24:04.725819 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:04.725908 kubelet[1681]: I0209 18:24:04.725898 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2b0e94b38682f4e439413801d3cc54db-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"2b0e94b38682f4e439413801d3cc54db\") " pod="kube-system/kube-scheduler-localhost" Feb 9 18:24:04.725988 kubelet[1681]: I0209 18:24:04.725977 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7e49e243b40f7a396c87195d7675eac4-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"7e49e243b40f7a396c87195d7675eac4\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:24:04.726071 kubelet[1681]: I0209 18:24:04.726061 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7e49e243b40f7a396c87195d7675eac4-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"7e49e243b40f7a396c87195d7675eac4\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:24:04.726140 kubelet[1681]: I0209 18:24:04.726131 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:04.726207 kubelet[1681]: I0209 18:24:04.726198 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:04.726281 kubelet[1681]: I0209 18:24:04.726270 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:04.728412 kubelet[1681]: I0209 18:24:04.728396 1681 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:24:04.728690 kubelet[1681]: E0209 18:24:04.728676 1681 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.32:6443/api/v1/nodes\": dial tcp 10.0.0.32:6443: connect: connection refused" node="localhost" Feb 9 18:24:04.858593 kubelet[1681]: E0209 18:24:04.858568 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:04.859292 env[1146]: time="2024-02-09T18:24:04.859219667Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:7e49e243b40f7a396c87195d7675eac4,Namespace:kube-system,Attempt:0,}" Feb 9 18:24:04.863403 kubelet[1681]: E0209 18:24:04.863376 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:04.863785 env[1146]: time="2024-02-09T18:24:04.863746274Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:7709ea05d7cdf82b0d7e594b61a10331,Namespace:kube-system,Attempt:0,}" Feb 9 18:24:04.866256 kubelet[1681]: E0209 18:24:04.866234 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:04.866612 env[1146]: time="2024-02-09T18:24:04.866566853Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:2b0e94b38682f4e439413801d3cc54db,Namespace:kube-system,Attempt:0,}" Feb 9 18:24:05.025864 kubelet[1681]: E0209 18:24:05.025769 1681 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.32:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.32:6443: connect: connection refused" interval="800ms" Feb 9 18:24:05.130206 kubelet[1681]: I0209 18:24:05.130173 1681 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:24:05.130557 kubelet[1681]: E0209 18:24:05.130540 1681 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.32:6443/api/v1/nodes\": dial tcp 10.0.0.32:6443: connect: connection refused" node="localhost" Feb 9 18:24:05.305571 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2744768783.mount: Deactivated successfully. Feb 9 18:24:05.308747 env[1146]: time="2024-02-09T18:24:05.308708855Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.311370 env[1146]: time="2024-02-09T18:24:05.311311917Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.312783 env[1146]: time="2024-02-09T18:24:05.312741868Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.313459 env[1146]: time="2024-02-09T18:24:05.313427063Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.315367 env[1146]: time="2024-02-09T18:24:05.315333850Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.316679 env[1146]: time="2024-02-09T18:24:05.316653721Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.318905 env[1146]: time="2024-02-09T18:24:05.318879785Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.321916 env[1146]: time="2024-02-09T18:24:05.321892644Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.323474 env[1146]: time="2024-02-09T18:24:05.323450474Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.324200 env[1146]: time="2024-02-09T18:24:05.324176429Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.325847 env[1146]: time="2024-02-09T18:24:05.325822617Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.326876 env[1146]: time="2024-02-09T18:24:05.326846330Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:05.363774 env[1146]: time="2024-02-09T18:24:05.363543437Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:05.363774 env[1146]: time="2024-02-09T18:24:05.363584116Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:05.363774 env[1146]: time="2024-02-09T18:24:05.363594276Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:05.364085 env[1146]: time="2024-02-09T18:24:05.364021713Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:05.364085 env[1146]: time="2024-02-09T18:24:05.364070513Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:05.364151 env[1146]: time="2024-02-09T18:24:05.364081953Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:05.365080 env[1146]: time="2024-02-09T18:24:05.364349911Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:05.365080 env[1146]: time="2024-02-09T18:24:05.364375191Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:05.365080 env[1146]: time="2024-02-09T18:24:05.364384711Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:05.365080 env[1146]: time="2024-02-09T18:24:05.364482350Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4895f4589e3363c6d5043c7409c8a90da83c5e895d1e056ec55d5348f4c5115c pid=1737 runtime=io.containerd.runc.v2 Feb 9 18:24:05.365080 env[1146]: time="2024-02-09T18:24:05.364242952Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/26cbdf3ff31862eaa652fed00c9049fc3cf2b91374939272ad79fba746bc81e3 pid=1736 runtime=io.containerd.runc.v2 Feb 9 18:24:05.365080 env[1146]: time="2024-02-09T18:24:05.364198232Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6bc7ba4da5dc45fb5d46ad1c3aaab7dd5d56bef8457073d39387a2fad70c99ca pid=1734 runtime=io.containerd.runc.v2 Feb 9 18:24:05.377103 systemd[1]: Started cri-containerd-26cbdf3ff31862eaa652fed00c9049fc3cf2b91374939272ad79fba746bc81e3.scope. Feb 9 18:24:05.377975 systemd[1]: Started cri-containerd-6bc7ba4da5dc45fb5d46ad1c3aaab7dd5d56bef8457073d39387a2fad70c99ca.scope. Feb 9 18:24:05.392019 systemd[1]: Started cri-containerd-4895f4589e3363c6d5043c7409c8a90da83c5e895d1e056ec55d5348f4c5115c.scope. Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.423000 audit: BPF prog-id=64 op=LOAD Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1734 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633762613464613564633435666235643436616431633361616162 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1734 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633762613464613564633435666235643436616431633361616162 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit: BPF prog-id=65 op=LOAD Feb 9 18:24:05.424000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1734 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633762613464613564633435666235643436616431633361616162 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit: BPF prog-id=66 op=LOAD Feb 9 18:24:05.424000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1734 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633762613464613564633435666235643436616431633361616162 Feb 9 18:24:05.424000 audit: BPF prog-id=66 op=UNLOAD Feb 9 18:24:05.424000 audit: BPF prog-id=65 op=UNLOAD Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { perfmon } for pid=1766 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit[1766]: AVC avc: denied { bpf } for pid=1766 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.424000 audit: BPF prog-id=67 op=LOAD Feb 9 18:24:05.424000 audit[1766]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1734 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662633762613464613564633435666235643436616431633361616162 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit: BPF prog-id=68 op=LOAD Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1736 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636264663366663331383632656161363532666564303063393034 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1736 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636264663366663331383632656161363532666564303063393034 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit: BPF prog-id=69 op=LOAD Feb 9 18:24:05.429000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1736 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636264663366663331383632656161363532666564303063393034 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit: BPF prog-id=70 op=LOAD Feb 9 18:24:05.429000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1736 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636264663366663331383632656161363532666564303063393034 Feb 9 18:24:05.429000 audit: BPF prog-id=70 op=UNLOAD Feb 9 18:24:05.429000 audit: BPF prog-id=69 op=UNLOAD Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.429000 audit: BPF prog-id=71 op=LOAD Feb 9 18:24:05.429000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1736 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.429000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236636264663366663331383632656161363532666564303063393034 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.430000 audit: BPF prog-id=72 op=LOAD Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393566343538396533333633633664353034336337343039633861 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393566343538396533333633633664353034336337343039633861 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit: BPF prog-id=73 op=LOAD Feb 9 18:24:05.431000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393566343538396533333633633664353034336337343039633861 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit: BPF prog-id=74 op=LOAD Feb 9 18:24:05.431000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393566343538396533333633633664353034336337343039633861 Feb 9 18:24:05.431000 audit: BPF prog-id=74 op=UNLOAD Feb 9 18:24:05.431000 audit: BPF prog-id=73 op=UNLOAD Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { perfmon } for pid=1767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit[1767]: AVC avc: denied { bpf } for pid=1767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.431000 audit: BPF prog-id=75 op=LOAD Feb 9 18:24:05.431000 audit[1767]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1737 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438393566343538396533333633633664353034336337343039633861 Feb 9 18:24:05.449787 env[1146]: time="2024-02-09T18:24:05.449740201Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:7709ea05d7cdf82b0d7e594b61a10331,Namespace:kube-system,Attempt:0,} returns sandbox id \"6bc7ba4da5dc45fb5d46ad1c3aaab7dd5d56bef8457073d39387a2fad70c99ca\"" Feb 9 18:24:05.450917 kubelet[1681]: E0209 18:24:05.450747 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:05.453312 env[1146]: time="2024-02-09T18:24:05.453266297Z" level=info msg="CreateContainer within sandbox \"6bc7ba4da5dc45fb5d46ad1c3aaab7dd5d56bef8457073d39387a2fad70c99ca\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 9 18:24:05.458454 env[1146]: time="2024-02-09T18:24:05.458416741Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:7e49e243b40f7a396c87195d7675eac4,Namespace:kube-system,Attempt:0,} returns sandbox id \"4895f4589e3363c6d5043c7409c8a90da83c5e895d1e056ec55d5348f4c5115c\"" Feb 9 18:24:05.458727 env[1146]: time="2024-02-09T18:24:05.458552860Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:2b0e94b38682f4e439413801d3cc54db,Namespace:kube-system,Attempt:0,} returns sandbox id \"26cbdf3ff31862eaa652fed00c9049fc3cf2b91374939272ad79fba746bc81e3\"" Feb 9 18:24:05.459187 kubelet[1681]: E0209 18:24:05.459053 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:05.459629 kubelet[1681]: E0209 18:24:05.459508 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:05.461339 env[1146]: time="2024-02-09T18:24:05.461293881Z" level=info msg="CreateContainer within sandbox \"26cbdf3ff31862eaa652fed00c9049fc3cf2b91374939272ad79fba746bc81e3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 9 18:24:05.461494 env[1146]: time="2024-02-09T18:24:05.461351761Z" level=info msg="CreateContainer within sandbox \"4895f4589e3363c6d5043c7409c8a90da83c5e895d1e056ec55d5348f4c5115c\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 9 18:24:05.465054 env[1146]: time="2024-02-09T18:24:05.465020015Z" level=info msg="CreateContainer within sandbox \"6bc7ba4da5dc45fb5d46ad1c3aaab7dd5d56bef8457073d39387a2fad70c99ca\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"e6d5cb7af0df88f7ba255419906f834cad06b9da2761253bb7c2c72105fc6927\"" Feb 9 18:24:05.465558 env[1146]: time="2024-02-09T18:24:05.465520572Z" level=info msg="StartContainer for \"e6d5cb7af0df88f7ba255419906f834cad06b9da2761253bb7c2c72105fc6927\"" Feb 9 18:24:05.476299 env[1146]: time="2024-02-09T18:24:05.476251938Z" level=info msg="CreateContainer within sandbox \"26cbdf3ff31862eaa652fed00c9049fc3cf2b91374939272ad79fba746bc81e3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"527aeabf533f3a2381cf71ce40f888a074110485f2b8dfe706b79f1c3951c4e2\"" Feb 9 18:24:05.477108 env[1146]: time="2024-02-09T18:24:05.477079292Z" level=info msg="CreateContainer within sandbox \"4895f4589e3363c6d5043c7409c8a90da83c5e895d1e056ec55d5348f4c5115c\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"d09af33842ad62f10f94bbd655ba862cf364bbbb1c5c2c7f593b029fd96c67de\"" Feb 9 18:24:05.477350 env[1146]: time="2024-02-09T18:24:05.477313930Z" level=info msg="StartContainer for \"527aeabf533f3a2381cf71ce40f888a074110485f2b8dfe706b79f1c3951c4e2\"" Feb 9 18:24:05.477395 env[1146]: time="2024-02-09T18:24:05.477370050Z" level=info msg="StartContainer for \"d09af33842ad62f10f94bbd655ba862cf364bbbb1c5c2c7f593b029fd96c67de\"" Feb 9 18:24:05.484942 systemd[1]: Started cri-containerd-e6d5cb7af0df88f7ba255419906f834cad06b9da2761253bb7c2c72105fc6927.scope. Feb 9 18:24:05.505323 systemd[1]: Started cri-containerd-527aeabf533f3a2381cf71ce40f888a074110485f2b8dfe706b79f1c3951c4e2.scope. Feb 9 18:24:05.506113 systemd[1]: Started cri-containerd-d09af33842ad62f10f94bbd655ba862cf364bbbb1c5c2c7f593b029fd96c67de.scope. Feb 9 18:24:05.516769 kubelet[1681]: W0209 18:24:05.516707 1681 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.32:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:05.516769 kubelet[1681]: E0209 18:24:05.516774 1681 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.32:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit: BPF prog-id=76 op=LOAD Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1736 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532376165616266353333663361323338316366373163653430663838 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1736 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532376165616266353333663361323338316366373163653430663838 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit: BPF prog-id=77 op=LOAD Feb 9 18:24:05.525000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1736 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532376165616266353333663361323338316366373163653430663838 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.525000 audit: BPF prog-id=78 op=LOAD Feb 9 18:24:05.525000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1736 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532376165616266353333663361323338316366373163653430663838 Feb 9 18:24:05.525000 audit: BPF prog-id=78 op=UNLOAD Feb 9 18:24:05.525000 audit: BPF prog-id=77 op=UNLOAD Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { perfmon } for pid=1871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit[1871]: AVC avc: denied { bpf } for pid=1871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.526000 audit: BPF prog-id=79 op=LOAD Feb 9 18:24:05.526000 audit[1871]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1736 pid=1871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.526000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532376165616266353333663361323338316366373163653430663838 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit: BPF prog-id=80 op=LOAD Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1737 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430396166333338343261643632663130663934626264363535626138 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1737 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430396166333338343261643632663130663934626264363535626138 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.529000 audit: BPF prog-id=81 op=LOAD Feb 9 18:24:05.529000 audit[1875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1737 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.529000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430396166333338343261643632663130663934626264363535626138 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit: BPF prog-id=82 op=LOAD Feb 9 18:24:05.530000 audit[1875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1737 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430396166333338343261643632663130663934626264363535626138 Feb 9 18:24:05.530000 audit: BPF prog-id=82 op=UNLOAD Feb 9 18:24:05.530000 audit: BPF prog-id=81 op=UNLOAD Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { perfmon } for pid=1875 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit[1875]: AVC avc: denied { bpf } for pid=1875 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.530000 audit: BPF prog-id=83 op=LOAD Feb 9 18:24:05.530000 audit[1875]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1737 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.530000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430396166333338343261643632663130663934626264363535626138 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit: BPF prog-id=84 op=LOAD Feb 9 18:24:05.531000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.531000 audit[1846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1734 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.531000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643563623761663064663838663762613235353431393930366638 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1734 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643563623761663064663838663762613235353431393930366638 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit: BPF prog-id=85 op=LOAD Feb 9 18:24:05.532000 audit[1846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1734 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643563623761663064663838663762613235353431393930366638 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit: BPF prog-id=86 op=LOAD Feb 9 18:24:05.532000 audit[1846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1734 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643563623761663064663838663762613235353431393930366638 Feb 9 18:24:05.532000 audit: BPF prog-id=86 op=UNLOAD Feb 9 18:24:05.532000 audit: BPF prog-id=85 op=UNLOAD Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { perfmon } for pid=1846 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit[1846]: AVC avc: denied { bpf } for pid=1846 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:05.532000 audit: BPF prog-id=87 op=LOAD Feb 9 18:24:05.532000 audit[1846]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1734 pid=1846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:05.532000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536643563623761663064663838663762613235353431393930366638 Feb 9 18:24:05.556981 env[1146]: time="2024-02-09T18:24:05.554680436Z" level=info msg="StartContainer for \"d09af33842ad62f10f94bbd655ba862cf364bbbb1c5c2c7f593b029fd96c67de\" returns successfully" Feb 9 18:24:05.564256 kubelet[1681]: W0209 18:24:05.564193 1681 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.32:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:05.564359 kubelet[1681]: E0209 18:24:05.564264 1681 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.32:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:05.564630 kubelet[1681]: W0209 18:24:05.564519 1681 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.32:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:05.564630 kubelet[1681]: E0209 18:24:05.564571 1681 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.32:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:05.569159 kubelet[1681]: W0209 18:24:05.569107 1681 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.32:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:05.569159 kubelet[1681]: E0209 18:24:05.569156 1681 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.32:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.32:6443: connect: connection refused Feb 9 18:24:05.576996 env[1146]: time="2024-02-09T18:24:05.576960562Z" level=info msg="StartContainer for \"527aeabf533f3a2381cf71ce40f888a074110485f2b8dfe706b79f1c3951c4e2\" returns successfully" Feb 9 18:24:05.584381 env[1146]: time="2024-02-09T18:24:05.580141940Z" level=info msg="StartContainer for \"e6d5cb7af0df88f7ba255419906f834cad06b9da2761253bb7c2c72105fc6927\" returns successfully" Feb 9 18:24:05.932010 kubelet[1681]: I0209 18:24:05.931912 1681 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:24:06.445146 kubelet[1681]: E0209 18:24:06.445119 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:06.446302 kubelet[1681]: E0209 18:24:06.446266 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:06.448104 kubelet[1681]: E0209 18:24:06.448077 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:07.450545 kubelet[1681]: E0209 18:24:07.450505 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:07.451351 kubelet[1681]: E0209 18:24:07.451331 1681 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:07.853000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6225 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:07.853000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000c5e000 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:07.853000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:07.854000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:07.854000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000142940 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:07.854000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:08.181000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6225 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:08.182000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:08.181000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=4005904000 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:24:08.182000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=400175a960 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:24:08.182000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:24:08.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:24:08.182000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6221 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:08.182000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3e a1=40070160c0 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:24:08.182000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:24:08.196000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6227 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:08.196000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=54 a1=400464abd0 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:24:08.196000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:24:08.252000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:08.252000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=84 a1=400a813f40 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:24:08.252000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:24:08.253000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6225 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:08.253000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=84 a1=40092ce6f0 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:24:08.253000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:24:08.318465 kubelet[1681]: E0209 18:24:08.318414 1681 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Feb 9 18:24:08.370368 kubelet[1681]: I0209 18:24:08.370330 1681 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 9 18:24:08.379774 kubelet[1681]: E0209 18:24:08.379727 1681 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Feb 9 18:24:08.480128 kubelet[1681]: E0209 18:24:08.480040 1681 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Feb 9 18:24:09.418719 kubelet[1681]: I0209 18:24:09.418680 1681 apiserver.go:52] "Watching apiserver" Feb 9 18:24:09.424570 kubelet[1681]: I0209 18:24:09.424515 1681 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 9 18:24:09.450998 kubelet[1681]: I0209 18:24:09.450942 1681 reconciler.go:41] "Reconciler: start to sync state" Feb 9 18:24:10.946588 systemd[1]: Reloading. Feb 9 18:24:11.023724 /usr/lib/systemd/system-generators/torcx-generator[1977]: time="2024-02-09T18:24:11Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 18:24:11.023755 /usr/lib/systemd/system-generators/torcx-generator[1977]: time="2024-02-09T18:24:11Z" level=info msg="torcx already run" Feb 9 18:24:11.083376 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 18:24:11.083396 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 18:24:11.102100 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 18:24:11.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.165705 kernel: kauditd_printk_skb: 633 callbacks suppressed Feb 9 18:24:11.165764 kernel: audit: type=1400 audit(1707503051.163:664): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.169081 kernel: audit: type=1400 audit(1707503051.165:665): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170871 kernel: audit: type=1400 audit(1707503051.165:666): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172671 kernel: audit: type=1400 audit(1707503051.165:667): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172723 kernel: audit: type=1400 audit(1707503051.165:668): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.174413 kernel: audit: type=1400 audit(1707503051.165:669): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.177816 kernel: audit: type=1400 audit(1707503051.165:670): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.177854 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 9 18:24:11.177880 kernel: audit: type=1400 audit(1707503051.165:671): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.177899 kernel: audit: type=1400 audit(1707503051.166:672): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.166000 audit: BPF prog-id=88 op=LOAD Feb 9 18:24:11.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.166000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.166000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit: BPF prog-id=89 op=LOAD Feb 9 18:24:11.168000 audit: BPF prog-id=49 op=UNLOAD Feb 9 18:24:11.168000 audit: BPF prog-id=50 op=UNLOAD Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.168000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit: BPF prog-id=90 op=LOAD Feb 9 18:24:11.170000 audit: BPF prog-id=51 op=UNLOAD Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.170000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit: BPF prog-id=91 op=LOAD Feb 9 18:24:11.172000 audit: BPF prog-id=52 op=UNLOAD Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.172000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit: BPF prog-id=92 op=LOAD Feb 9 18:24:11.173000 audit: BPF prog-id=64 op=UNLOAD Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.173000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.175000 audit: BPF prog-id=93 op=LOAD Feb 9 18:24:11.175000 audit: BPF prog-id=80 op=UNLOAD Feb 9 18:24:11.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit: BPF prog-id=94 op=LOAD Feb 9 18:24:11.180000 audit: BPF prog-id=76 op=UNLOAD Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit: BPF prog-id=95 op=LOAD Feb 9 18:24:11.181000 audit: BPF prog-id=53 op=UNLOAD Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit: BPF prog-id=96 op=LOAD Feb 9 18:24:11.181000 audit: BPF prog-id=54 op=UNLOAD Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit: BPF prog-id=97 op=LOAD Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.181000 audit: BPF prog-id=98 op=LOAD Feb 9 18:24:11.181000 audit: BPF prog-id=55 op=UNLOAD Feb 9 18:24:11.181000 audit: BPF prog-id=56 op=UNLOAD Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit: BPF prog-id=99 op=LOAD Feb 9 18:24:11.182000 audit: BPF prog-id=57 op=UNLOAD Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit: BPF prog-id=100 op=LOAD Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.182000 audit: BPF prog-id=101 op=LOAD Feb 9 18:24:11.182000 audit: BPF prog-id=58 op=UNLOAD Feb 9 18:24:11.182000 audit: BPF prog-id=59 op=UNLOAD Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.183000 audit: BPF prog-id=102 op=LOAD Feb 9 18:24:11.183000 audit: BPF prog-id=68 op=UNLOAD Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit: BPF prog-id=103 op=LOAD Feb 9 18:24:11.184000 audit: BPF prog-id=60 op=UNLOAD Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit: BPF prog-id=104 op=LOAD Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.184000 audit: BPF prog-id=105 op=LOAD Feb 9 18:24:11.184000 audit: BPF prog-id=61 op=UNLOAD Feb 9 18:24:11.184000 audit: BPF prog-id=62 op=UNLOAD Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit: BPF prog-id=106 op=LOAD Feb 9 18:24:11.186000 audit: BPF prog-id=72 op=UNLOAD Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.186000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit: BPF prog-id=107 op=LOAD Feb 9 18:24:11.187000 audit: BPF prog-id=84 op=UNLOAD Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.187000 audit: BPF prog-id=108 op=LOAD Feb 9 18:24:11.187000 audit: BPF prog-id=63 op=UNLOAD Feb 9 18:24:11.199218 systemd[1]: Stopping kubelet.service... Feb 9 18:24:11.224917 systemd[1]: kubelet.service: Deactivated successfully. Feb 9 18:24:11.225291 systemd[1]: Stopped kubelet.service. Feb 9 18:24:11.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:11.227746 systemd[1]: Started kubelet.service. Feb 9 18:24:11.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:11.282078 kubelet[2015]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 18:24:11.282390 kubelet[2015]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 18:24:11.282441 kubelet[2015]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 18:24:11.282623 kubelet[2015]: I0209 18:24:11.282588 2015 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 18:24:11.286806 kubelet[2015]: I0209 18:24:11.286775 2015 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Feb 9 18:24:11.286806 kubelet[2015]: I0209 18:24:11.286799 2015 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 18:24:11.286976 kubelet[2015]: I0209 18:24:11.286960 2015 server.go:837] "Client rotation is on, will bootstrap in background" Feb 9 18:24:11.288375 kubelet[2015]: I0209 18:24:11.288353 2015 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 9 18:24:11.290638 kubelet[2015]: I0209 18:24:11.290589 2015 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 18:24:11.292057 kubelet[2015]: W0209 18:24:11.292036 2015 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 18:24:11.292815 kubelet[2015]: I0209 18:24:11.292795 2015 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 18:24:11.292985 kubelet[2015]: I0209 18:24:11.292964 2015 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 18:24:11.293039 kubelet[2015]: I0209 18:24:11.293029 2015 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Feb 9 18:24:11.293112 kubelet[2015]: I0209 18:24:11.293050 2015 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Feb 9 18:24:11.293112 kubelet[2015]: I0209 18:24:11.293061 2015 container_manager_linux.go:302] "Creating device plugin manager" Feb 9 18:24:11.293112 kubelet[2015]: I0209 18:24:11.293087 2015 state_mem.go:36] "Initialized new in-memory state store" Feb 9 18:24:11.295252 kubelet[2015]: I0209 18:24:11.295224 2015 kubelet.go:405] "Attempting to sync node with API server" Feb 9 18:24:11.295323 kubelet[2015]: I0209 18:24:11.295274 2015 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 18:24:11.295323 kubelet[2015]: I0209 18:24:11.295298 2015 kubelet.go:309] "Adding apiserver pod source" Feb 9 18:24:11.295323 kubelet[2015]: I0209 18:24:11.295311 2015 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 18:24:11.295863 kubelet[2015]: I0209 18:24:11.295841 2015 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 18:24:11.296322 kubelet[2015]: I0209 18:24:11.296301 2015 server.go:1168] "Started kubelet" Feb 9 18:24:11.296652 kubelet[2015]: I0209 18:24:11.296606 2015 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 18:24:11.296819 kubelet[2015]: I0209 18:24:11.296804 2015 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 18:24:11.297347 kubelet[2015]: E0209 18:24:11.297317 2015 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 18:24:11.297347 kubelet[2015]: E0209 18:24:11.297339 2015 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 18:24:11.296000 audit[2015]: AVC avc: denied { mac_admin } for pid=2015 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.296000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:24:11.296000 audit[2015]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d16600 a1=4000269c50 a2=4000d165d0 a3=25 items=0 ppid=1 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:11.296000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:24:11.298508 kubelet[2015]: I0209 18:24:11.298443 2015 server.go:461] "Adding debug handlers to kubelet server" Feb 9 18:24:11.298690 kubelet[2015]: I0209 18:24:11.298670 2015 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 18:24:11.297000 audit[2015]: AVC avc: denied { mac_admin } for pid=2015 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.297000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:24:11.297000 audit[2015]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400009af40 a1=4000269c68 a2=4000d16690 a3=25 items=0 ppid=1 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:11.297000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:24:11.298951 kubelet[2015]: I0209 18:24:11.298934 2015 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 18:24:11.299036 kubelet[2015]: I0209 18:24:11.299025 2015 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 18:24:11.299198 kubelet[2015]: I0209 18:24:11.299181 2015 volume_manager.go:284] "Starting Kubelet Volume Manager" Feb 9 18:24:11.300353 kubelet[2015]: I0209 18:24:11.300321 2015 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Feb 9 18:24:11.300844 kubelet[2015]: E0209 18:24:11.300824 2015 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"localhost\" not found" Feb 9 18:24:11.338990 kubelet[2015]: I0209 18:24:11.338610 2015 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Feb 9 18:24:11.346653 kubelet[2015]: I0209 18:24:11.346629 2015 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Feb 9 18:24:11.346653 kubelet[2015]: I0209 18:24:11.346658 2015 status_manager.go:207] "Starting to sync pod status with apiserver" Feb 9 18:24:11.346810 kubelet[2015]: I0209 18:24:11.346677 2015 kubelet.go:2257] "Starting kubelet main sync loop" Feb 9 18:24:11.346810 kubelet[2015]: E0209 18:24:11.346738 2015 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 18:24:11.373502 kubelet[2015]: I0209 18:24:11.372921 2015 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 18:24:11.373502 kubelet[2015]: I0209 18:24:11.372941 2015 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 18:24:11.373502 kubelet[2015]: I0209 18:24:11.372958 2015 state_mem.go:36] "Initialized new in-memory state store" Feb 9 18:24:11.373502 kubelet[2015]: I0209 18:24:11.373107 2015 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 9 18:24:11.373502 kubelet[2015]: I0209 18:24:11.373120 2015 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Feb 9 18:24:11.373502 kubelet[2015]: I0209 18:24:11.373126 2015 policy_none.go:49] "None policy: Start" Feb 9 18:24:11.373745 kubelet[2015]: I0209 18:24:11.373670 2015 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 18:24:11.373745 kubelet[2015]: I0209 18:24:11.373689 2015 state_mem.go:35] "Initializing new in-memory state store" Feb 9 18:24:11.373829 kubelet[2015]: I0209 18:24:11.373809 2015 state_mem.go:75] "Updated machine memory state" Feb 9 18:24:11.377171 kubelet[2015]: I0209 18:24:11.377141 2015 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 18:24:11.375000 audit[2015]: AVC avc: denied { mac_admin } for pid=2015 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:11.375000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:24:11.375000 audit[2015]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400026be30 a1=400113c540 a2=400026bdd0 a3=25 items=0 ppid=1 pid=2015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:11.375000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:24:11.377472 kubelet[2015]: I0209 18:24:11.377198 2015 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 18:24:11.378248 kubelet[2015]: I0209 18:24:11.377974 2015 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 18:24:11.404190 kubelet[2015]: I0209 18:24:11.404148 2015 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:24:11.411615 kubelet[2015]: I0209 18:24:11.411580 2015 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Feb 9 18:24:11.412026 kubelet[2015]: I0209 18:24:11.412010 2015 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 9 18:24:11.447613 kubelet[2015]: I0209 18:24:11.447578 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:11.447849 kubelet[2015]: I0209 18:24:11.447834 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:11.447944 kubelet[2015]: I0209 18:24:11.447932 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:11.501461 kubelet[2015]: I0209 18:24:11.501362 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7e49e243b40f7a396c87195d7675eac4-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"7e49e243b40f7a396c87195d7675eac4\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:24:11.501658 kubelet[2015]: I0209 18:24:11.501643 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:11.501855 kubelet[2015]: I0209 18:24:11.501728 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:11.502193 kubelet[2015]: I0209 18:24:11.502173 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:11.502761 kubelet[2015]: I0209 18:24:11.502679 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/7e49e243b40f7a396c87195d7675eac4-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"7e49e243b40f7a396c87195d7675eac4\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:24:11.503057 kubelet[2015]: I0209 18:24:11.503038 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7e49e243b40f7a396c87195d7675eac4-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"7e49e243b40f7a396c87195d7675eac4\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:24:11.503423 kubelet[2015]: I0209 18:24:11.503345 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:11.503782 kubelet[2015]: I0209 18:24:11.503724 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/7709ea05d7cdf82b0d7e594b61a10331-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"7709ea05d7cdf82b0d7e594b61a10331\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:24:11.504053 kubelet[2015]: I0209 18:24:11.504037 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/2b0e94b38682f4e439413801d3cc54db-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"2b0e94b38682f4e439413801d3cc54db\") " pod="kube-system/kube-scheduler-localhost" Feb 9 18:24:11.756990 kubelet[2015]: E0209 18:24:11.756885 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:11.757430 kubelet[2015]: E0209 18:24:11.757362 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:11.757917 kubelet[2015]: E0209 18:24:11.757902 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:12.296439 kubelet[2015]: I0209 18:24:12.296399 2015 apiserver.go:52] "Watching apiserver" Feb 9 18:24:12.301336 kubelet[2015]: I0209 18:24:12.301293 2015 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Feb 9 18:24:12.308518 kubelet[2015]: I0209 18:24:12.308466 2015 reconciler.go:41] "Reconciler: start to sync state" Feb 9 18:24:12.364925 kubelet[2015]: E0209 18:24:12.364893 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:12.365269 kubelet[2015]: E0209 18:24:12.365249 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:12.365769 kubelet[2015]: E0209 18:24:12.365752 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:12.422192 kubelet[2015]: I0209 18:24:12.422155 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.422107692 podCreationTimestamp="2024-02-09 18:24:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:24:12.414197607 +0000 UTC m=+1.183342971" watchObservedRunningTime="2024-02-09 18:24:12.422107692 +0000 UTC m=+1.191253016" Feb 9 18:24:12.431085 kubelet[2015]: I0209 18:24:12.431050 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.431015333 podCreationTimestamp="2024-02-09 18:24:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:24:12.422378371 +0000 UTC m=+1.191523735" watchObservedRunningTime="2024-02-09 18:24:12.431015333 +0000 UTC m=+1.200160697" Feb 9 18:24:12.591000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=6259 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 9 18:24:12.591000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a62440 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:12.591000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:13.366291 kubelet[2015]: E0209 18:24:13.366250 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:14.266325 sudo[1277]: pam_unix(sudo:session): session closed for user root Feb 9 18:24:14.264000 audit[1277]: USER_END pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:24:14.264000 audit[1277]: CRED_DISP pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:24:14.267916 sshd[1273]: pam_unix(sshd:session): session closed for user core Feb 9 18:24:14.267000 audit[1273]: USER_END pid=1273 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:14.267000 audit[1273]: CRED_DISP pid=1273 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:14.269000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.32:22-10.0.0.1:34644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:14.270739 systemd-logind[1130]: Session 7 logged out. Waiting for processes to exit. Feb 9 18:24:14.270976 systemd[1]: sshd@6-10.0.0.32:22-10.0.0.1:34644.service: Deactivated successfully. Feb 9 18:24:14.271776 systemd[1]: session-7.scope: Deactivated successfully. Feb 9 18:24:14.271964 systemd[1]: session-7.scope: Consumed 6.590s CPU time. Feb 9 18:24:14.272837 systemd-logind[1130]: Removed session 7. Feb 9 18:24:14.367786 kubelet[2015]: E0209 18:24:14.367762 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:17.166938 kubelet[2015]: E0209 18:24:17.166897 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:17.181385 kubelet[2015]: I0209 18:24:17.181338 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=6.18130732 podCreationTimestamp="2024-02-09 18:24:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:24:12.431303412 +0000 UTC m=+1.200448776" watchObservedRunningTime="2024-02-09 18:24:17.18130732 +0000 UTC m=+5.950452644" Feb 9 18:24:17.373061 kubelet[2015]: E0209 18:24:17.373026 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:19.419459 kubelet[2015]: E0209 18:24:19.419431 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:20.376710 kubelet[2015]: E0209 18:24:20.376684 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:23.607000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:23.611297 kernel: kauditd_printk_skb: 258 callbacks suppressed Feb 9 18:24:23.611380 kernel: audit: type=1400 audit(1707503063.607:918): avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:23.611412 kernel: audit: type=1300 audit(1707503063.607:918): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400119a940 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:23.607000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400119a940 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:23.607000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:23.616446 kernel: audit: type=1327 audit(1707503063.607:918): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:23.616509 kernel: audit: type=1400 audit(1707503063.614:919): avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:23.614000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:23.614000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400119aaa0 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:23.621768 kernel: audit: type=1300 audit(1707503063.614:919): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400119aaa0 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:23.621834 kernel: audit: type=1327 audit(1707503063.614:919): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:23.614000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:23.614000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:23.626794 kernel: audit: type=1400 audit(1707503063.614:920): avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:23.626851 kernel: audit: type=1300 audit(1707503063.614:920): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400119abe0 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:23.614000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400119abe0 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:23.614000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:23.632752 kernel: audit: type=1327 audit(1707503063.614:920): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:23.632890 kernel: audit: type=1400 audit(1707503063.615:921): avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:23.615000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:24:23.615000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400119ad20 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:24:23.615000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:24:23.870635 kubelet[2015]: I0209 18:24:23.870389 2015 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 9 18:24:23.871118 env[1146]: time="2024-02-09T18:24:23.870789450Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 9 18:24:23.872168 kubelet[2015]: I0209 18:24:23.871396 2015 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 9 18:24:24.216038 kubelet[2015]: I0209 18:24:24.215941 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:24.222198 systemd[1]: Created slice kubepods-besteffort-pod67d3d535_e21b_486e_9bef_60f83c0090d1.slice. Feb 9 18:24:24.239144 kubelet[2015]: E0209 18:24:24.238933 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:24.290691 kubelet[2015]: I0209 18:24:24.290661 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/67d3d535-e21b-486e-9bef-60f83c0090d1-xtables-lock\") pod \"kube-proxy-fmkwl\" (UID: \"67d3d535-e21b-486e-9bef-60f83c0090d1\") " pod="kube-system/kube-proxy-fmkwl" Feb 9 18:24:24.290915 kubelet[2015]: I0209 18:24:24.290903 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/67d3d535-e21b-486e-9bef-60f83c0090d1-lib-modules\") pod \"kube-proxy-fmkwl\" (UID: \"67d3d535-e21b-486e-9bef-60f83c0090d1\") " pod="kube-system/kube-proxy-fmkwl" Feb 9 18:24:24.291012 kubelet[2015]: I0209 18:24:24.291002 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zc4fs\" (UniqueName: \"kubernetes.io/projected/67d3d535-e21b-486e-9bef-60f83c0090d1-kube-api-access-zc4fs\") pod \"kube-proxy-fmkwl\" (UID: \"67d3d535-e21b-486e-9bef-60f83c0090d1\") " pod="kube-system/kube-proxy-fmkwl" Feb 9 18:24:24.291136 kubelet[2015]: I0209 18:24:24.291123 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/67d3d535-e21b-486e-9bef-60f83c0090d1-kube-proxy\") pod \"kube-proxy-fmkwl\" (UID: \"67d3d535-e21b-486e-9bef-60f83c0090d1\") " pod="kube-system/kube-proxy-fmkwl" Feb 9 18:24:24.382480 kubelet[2015]: E0209 18:24:24.382455 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:24.399866 kubelet[2015]: E0209 18:24:24.399828 2015 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Feb 9 18:24:24.399866 kubelet[2015]: E0209 18:24:24.399857 2015 projected.go:198] Error preparing data for projected volume kube-api-access-zc4fs for pod kube-system/kube-proxy-fmkwl: configmap "kube-root-ca.crt" not found Feb 9 18:24:24.400051 kubelet[2015]: E0209 18:24:24.399912 2015 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/67d3d535-e21b-486e-9bef-60f83c0090d1-kube-api-access-zc4fs podName:67d3d535-e21b-486e-9bef-60f83c0090d1 nodeName:}" failed. No retries permitted until 2024-02-09 18:24:24.899890879 +0000 UTC m=+13.669036243 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-zc4fs" (UniqueName: "kubernetes.io/projected/67d3d535-e21b-486e-9bef-60f83c0090d1-kube-api-access-zc4fs") pod "kube-proxy-fmkwl" (UID: "67d3d535-e21b-486e-9bef-60f83c0090d1") : configmap "kube-root-ca.crt" not found Feb 9 18:24:24.877940 kubelet[2015]: I0209 18:24:24.877904 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:24.882929 systemd[1]: Created slice kubepods-besteffort-pod5dcf1745_6cfe_4dd8_840e_6a36d957dd60.slice. Feb 9 18:24:24.894026 kubelet[2015]: I0209 18:24:24.893960 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m4nvq\" (UniqueName: \"kubernetes.io/projected/5dcf1745-6cfe-4dd8-840e-6a36d957dd60-kube-api-access-m4nvq\") pod \"tigera-operator-7ff8dc855-pk458\" (UID: \"5dcf1745-6cfe-4dd8-840e-6a36d957dd60\") " pod="tigera-operator/tigera-operator-7ff8dc855-pk458" Feb 9 18:24:24.894026 kubelet[2015]: I0209 18:24:24.894003 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/5dcf1745-6cfe-4dd8-840e-6a36d957dd60-var-lib-calico\") pod \"tigera-operator-7ff8dc855-pk458\" (UID: \"5dcf1745-6cfe-4dd8-840e-6a36d957dd60\") " pod="tigera-operator/tigera-operator-7ff8dc855-pk458" Feb 9 18:24:25.131847 kubelet[2015]: E0209 18:24:25.131753 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:25.132363 env[1146]: time="2024-02-09T18:24:25.132290851Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fmkwl,Uid:67d3d535-e21b-486e-9bef-60f83c0090d1,Namespace:kube-system,Attempt:0,}" Feb 9 18:24:25.149296 env[1146]: time="2024-02-09T18:24:25.149225899Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:25.149296 env[1146]: time="2024-02-09T18:24:25.149261979Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:25.149296 env[1146]: time="2024-02-09T18:24:25.149273539Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:25.149708 env[1146]: time="2024-02-09T18:24:25.149670178Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ebd9594b1115ca7596f23ab3e782a0e941ff74ea5d51a05d9c88844a8886b260 pid=2110 runtime=io.containerd.runc.v2 Feb 9 18:24:25.160245 systemd[1]: Started cri-containerd-ebd9594b1115ca7596f23ab3e782a0e941ff74ea5d51a05d9c88844a8886b260.scope. Feb 9 18:24:25.185742 env[1146]: time="2024-02-09T18:24:25.185700950Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-pk458,Uid:5dcf1745-6cfe-4dd8-840e-6a36d957dd60,Namespace:tigera-operator,Attempt:0,}" Feb 9 18:24:25.204584 env[1146]: time="2024-02-09T18:24:25.204509954Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:25.204726 env[1146]: time="2024-02-09T18:24:25.204596714Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:25.204726 env[1146]: time="2024-02-09T18:24:25.204623994Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:25.204827 env[1146]: time="2024-02-09T18:24:25.204794873Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/de53ed39d80e280be94fd201797e07724df3b8cebefee92b8803741f4cb03ab0 pid=2142 runtime=io.containerd.runc.v2 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.210000 audit: BPF prog-id=109 op=LOAD Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643935393462313131356361373539366632336162336537383261 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643935393462313131356361373539366632336162336537383261 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit: BPF prog-id=110 op=LOAD Feb 9 18:24:25.211000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643935393462313131356361373539366632336162336537383261 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit: BPF prog-id=111 op=LOAD Feb 9 18:24:25.211000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643935393462313131356361373539366632336162336537383261 Feb 9 18:24:25.211000 audit: BPF prog-id=111 op=UNLOAD Feb 9 18:24:25.211000 audit: BPF prog-id=110 op=UNLOAD Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { perfmon } for pid=2120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit[2120]: AVC avc: denied { bpf } for pid=2120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.211000 audit: BPF prog-id=112 op=LOAD Feb 9 18:24:25.211000 audit[2120]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=2110 pid=2120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643935393462313131356361373539366632336162336537383261 Feb 9 18:24:25.218933 systemd[1]: Started cri-containerd-de53ed39d80e280be94fd201797e07724df3b8cebefee92b8803741f4cb03ab0.scope. Feb 9 18:24:25.228350 env[1146]: time="2024-02-09T18:24:25.228297709Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-fmkwl,Uid:67d3d535-e21b-486e-9bef-60f83c0090d1,Namespace:kube-system,Attempt:0,} returns sandbox id \"ebd9594b1115ca7596f23ab3e782a0e941ff74ea5d51a05d9c88844a8886b260\"" Feb 9 18:24:25.229106 kubelet[2015]: E0209 18:24:25.229065 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:25.231248 env[1146]: time="2024-02-09T18:24:25.231209863Z" level=info msg="CreateContainer within sandbox \"ebd9594b1115ca7596f23ab3e782a0e941ff74ea5d51a05d9c88844a8886b260\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 9 18:24:25.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.239000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.239000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit: BPF prog-id=113 op=LOAD Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2142 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465353365643339643830653238306265393466643230313739376530 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2142 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465353365643339643830653238306265393466643230313739376530 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit: BPF prog-id=114 op=LOAD Feb 9 18:24:25.240000 audit[2150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2142 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465353365643339643830653238306265393466643230313739376530 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit: BPF prog-id=115 op=LOAD Feb 9 18:24:25.240000 audit[2150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2142 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465353365643339643830653238306265393466643230313739376530 Feb 9 18:24:25.240000 audit: BPF prog-id=115 op=UNLOAD Feb 9 18:24:25.240000 audit: BPF prog-id=114 op=UNLOAD Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { perfmon } for pid=2150 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit[2150]: AVC avc: denied { bpf } for pid=2150 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.240000 audit: BPF prog-id=116 op=LOAD Feb 9 18:24:25.240000 audit[2150]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2142 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6465353365643339643830653238306265393466643230313739376530 Feb 9 18:24:25.244521 env[1146]: time="2024-02-09T18:24:25.244480798Z" level=info msg="CreateContainer within sandbox \"ebd9594b1115ca7596f23ab3e782a0e941ff74ea5d51a05d9c88844a8886b260\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"9308056f90cc1e0998ad1177a30b0c357f3abeb67dee38fa7b731892bdb7fd92\"" Feb 9 18:24:25.245211 env[1146]: time="2024-02-09T18:24:25.245181957Z" level=info msg="StartContainer for \"9308056f90cc1e0998ad1177a30b0c357f3abeb67dee38fa7b731892bdb7fd92\"" Feb 9 18:24:25.262381 systemd[1]: Started cri-containerd-9308056f90cc1e0998ad1177a30b0c357f3abeb67dee38fa7b731892bdb7fd92.scope. Feb 9 18:24:25.264429 env[1146]: time="2024-02-09T18:24:25.264359480Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-7ff8dc855-pk458,Uid:5dcf1745-6cfe-4dd8-840e-6a36d957dd60,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"de53ed39d80e280be94fd201797e07724df3b8cebefee92b8803741f4cb03ab0\"" Feb 9 18:24:25.266104 env[1146]: time="2024-02-09T18:24:25.266072437Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2110 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303830353666393063633165303939386164313137376133306230 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit: BPF prog-id=117 op=LOAD Feb 9 18:24:25.302000 audit[2183]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2110 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303830353666393063633165303939386164313137376133306230 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit: BPF prog-id=118 op=LOAD Feb 9 18:24:25.302000 audit[2183]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2110 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303830353666393063633165303939386164313137376133306230 Feb 9 18:24:25.302000 audit: BPF prog-id=118 op=UNLOAD Feb 9 18:24:25.302000 audit: BPF prog-id=117 op=UNLOAD Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { perfmon } for pid=2183 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit[2183]: AVC avc: denied { bpf } for pid=2183 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:25.302000 audit: BPF prog-id=119 op=LOAD Feb 9 18:24:25.302000 audit[2183]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2110 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933303830353666393063633165303939386164313137376133306230 Feb 9 18:24:25.315937 env[1146]: time="2024-02-09T18:24:25.315892022Z" level=info msg="StartContainer for \"9308056f90cc1e0998ad1177a30b0c357f3abeb67dee38fa7b731892bdb7fd92\" returns successfully" Feb 9 18:24:25.388157 kubelet[2015]: E0209 18:24:25.387775 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:25.411654 kubelet[2015]: I0209 18:24:25.411624 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-fmkwl" podStartSLOduration=1.4115798 podCreationTimestamp="2024-02-09 18:24:24 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:24:25.404229054 +0000 UTC m=+14.173374378" watchObservedRunningTime="2024-02-09 18:24:25.4115798 +0000 UTC m=+14.180725164" Feb 9 18:24:25.429000 audit[2241]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.429000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff4bf49c0 a2=0 a3=ffff971da6c0 items=0 ppid=2202 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.429000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 18:24:25.431000 audit[2243]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.431000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0b4b0d0 a2=0 a3=ffffa0a886c0 items=0 ppid=2202 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.431000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 18:24:25.431000 audit[2242]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.431000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff7894a00 a2=0 a3=ffff826326c0 items=0 ppid=2202 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.431000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 18:24:25.432000 audit[2246]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.432000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe38a0aa0 a2=0 a3=ffffb61e76c0 items=0 ppid=2202 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.432000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 18:24:25.432000 audit[2247]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.432000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffee6447e0 a2=0 a3=ffffb0f8d6c0 items=0 ppid=2202 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 18:24:25.433000 audit[2248]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.433000 audit[2248]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1a13190 a2=0 a3=ffffaf7b56c0 items=0 ppid=2202 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.433000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 18:24:25.534000 audit[2249]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.534000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffef83d0c0 a2=0 a3=ffff853026c0 items=0 ppid=2202 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.534000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 18:24:25.536000 audit[2251]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.536000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff98b1740 a2=0 a3=ffffb83626c0 items=0 ppid=2202 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.536000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 9 18:24:25.539000 audit[2254]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.539000 audit[2254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc899db70 a2=0 a3=ffffa97146c0 items=0 ppid=2202 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.539000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 9 18:24:25.540000 audit[2255]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.540000 audit[2255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffde6b4010 a2=0 a3=ffffabb396c0 items=0 ppid=2202 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.540000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 18:24:25.543000 audit[2257]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.543000 audit[2257]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe0b60d10 a2=0 a3=ffff8a8736c0 items=0 ppid=2202 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.543000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 18:24:25.543000 audit[2258]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2258 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.543000 audit[2258]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffda6dc3f0 a2=0 a3=ffff94e4f6c0 items=0 ppid=2202 pid=2258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.543000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 18:24:25.546000 audit[2260]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.546000 audit[2260]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd761d680 a2=0 a3=ffffa5ac76c0 items=0 ppid=2202 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 18:24:25.549000 audit[2263]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2263 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.549000 audit[2263]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff2d346c0 a2=0 a3=ffff866576c0 items=0 ppid=2202 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.549000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 9 18:24:25.550000 audit[2264]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.550000 audit[2264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffe7b730 a2=0 a3=ffffbd0a86c0 items=0 ppid=2202 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.550000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 18:24:25.553000 audit[2266]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.553000 audit[2266]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffdcd82370 a2=0 a3=ffff9dff36c0 items=0 ppid=2202 pid=2266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.553000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 18:24:25.555000 audit[2267]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.555000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff5cbcfa0 a2=0 a3=ffffa77a76c0 items=0 ppid=2202 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.555000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 18:24:25.557000 audit[2269]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2269 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.557000 audit[2269]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffe1a0400 a2=0 a3=ffffaf71c6c0 items=0 ppid=2202 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.557000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 18:24:25.561000 audit[2272]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2272 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.561000 audit[2272]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe16d50e0 a2=0 a3=ffffa99276c0 items=0 ppid=2202 pid=2272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.561000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 18:24:25.564000 audit[2275]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2275 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.564000 audit[2275]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdfeddf50 a2=0 a3=ffffb3ce86c0 items=0 ppid=2202 pid=2275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.564000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 18:24:25.566000 audit[2276]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2276 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.566000 audit[2276]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc95360c0 a2=0 a3=ffffad8336c0 items=0 ppid=2202 pid=2276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.566000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 18:24:25.568000 audit[2278]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2278 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.568000 audit[2278]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffd607c1a0 a2=0 a3=ffffab8ab6c0 items=0 ppid=2202 pid=2278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.568000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 18:24:25.571000 audit[2281]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2281 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.571000 audit[2281]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe98824d0 a2=0 a3=ffffa330c6c0 items=0 ppid=2202 pid=2281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.571000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 18:24:25.577000 audit[2286]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.577000 audit[2286]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffebd3a770 a2=0 a3=ffffb9c8f6c0 items=0 ppid=2202 pid=2286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.577000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 18:24:25.580000 audit[2288]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:24:25.580000 audit[2288]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffebdebe00 a2=0 a3=ffff99e7a6c0 items=0 ppid=2202 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.580000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 18:24:25.591000 audit[2290]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:25.591000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe9247ef0 a2=0 a3=ffff90d916c0 items=0 ppid=2202 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.591000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:25.606000 audit[2290]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:25.606000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffe9247ef0 a2=0 a3=ffff90d916c0 items=0 ppid=2202 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.606000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:25.607000 audit[2296]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.607000 audit[2296]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe37ff740 a2=0 a3=ffff96edd6c0 items=0 ppid=2202 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.607000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 18:24:25.609000 audit[2298]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.609000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe33a05f0 a2=0 a3=ffffacc856c0 items=0 ppid=2202 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.609000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 9 18:24:25.613000 audit[2301]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.613000 audit[2301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc3509140 a2=0 a3=ffffa68516c0 items=0 ppid=2202 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.613000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 9 18:24:25.614000 audit[2302]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.614000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd8337010 a2=0 a3=ffffbea396c0 items=0 ppid=2202 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.614000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 18:24:25.616000 audit[2304]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.616000 audit[2304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc47ab4c0 a2=0 a3=ffffb64636c0 items=0 ppid=2202 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.616000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 18:24:25.617000 audit[2305]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.617000 audit[2305]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffebbd16f0 a2=0 a3=ffff87f996c0 items=0 ppid=2202 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.617000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 18:24:25.619000 audit[2307]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.619000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffccb28960 a2=0 a3=ffff897086c0 items=0 ppid=2202 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.619000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 9 18:24:25.623000 audit[2310]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.623000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff8c8a670 a2=0 a3=ffff86ef06c0 items=0 ppid=2202 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.623000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 18:24:25.624000 audit[2311]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.624000 audit[2311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffddab11d0 a2=0 a3=ffffb3a596c0 items=0 ppid=2202 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.624000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 18:24:25.626000 audit[2313]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.626000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffbea3830 a2=0 a3=ffffa23036c0 items=0 ppid=2202 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.626000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 18:24:25.627000 audit[2314]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.627000 audit[2314]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd6287780 a2=0 a3=ffff956de6c0 items=0 ppid=2202 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.627000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 18:24:25.630000 audit[2316]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.630000 audit[2316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd4f64bb0 a2=0 a3=ffff9b72d6c0 items=0 ppid=2202 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.630000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 18:24:25.633000 audit[2319]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.633000 audit[2319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc86b5d30 a2=0 a3=ffff91d3e6c0 items=0 ppid=2202 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.633000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 18:24:25.637000 audit[2322]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.637000 audit[2322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeca4cd50 a2=0 a3=ffff917a06c0 items=0 ppid=2202 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.637000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 9 18:24:25.639000 audit[2323]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.639000 audit[2323]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc47ea930 a2=0 a3=ffffb7e3b6c0 items=0 ppid=2202 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.639000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 18:24:25.642000 audit[2325]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.642000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffd6408130 a2=0 a3=ffffa63026c0 items=0 ppid=2202 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.642000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 18:24:25.646000 audit[2328]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.646000 audit[2328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffec68be60 a2=0 a3=ffffbb9ef6c0 items=0 ppid=2202 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.646000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 18:24:25.648000 audit[2329]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.648000 audit[2329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff9904470 a2=0 a3=ffff8f0496c0 items=0 ppid=2202 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.648000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 18:24:25.650000 audit[2331]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.650000 audit[2331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffee525820 a2=0 a3=ffffa14ba6c0 items=0 ppid=2202 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.650000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 18:24:25.654000 audit[2334]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=2334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.654000 audit[2334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc8e51e10 a2=0 a3=ffff9dcec6c0 items=0 ppid=2202 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.654000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 18:24:25.655000 audit[2335]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=2335 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.655000 audit[2335]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd9469ee0 a2=0 a3=ffff94dc26c0 items=0 ppid=2202 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.655000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 18:24:25.658000 audit[2337]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=2337 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:24:25.658000 audit[2337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe51c4b40 a2=0 a3=ffff9f8a36c0 items=0 ppid=2202 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.658000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 18:24:25.660000 audit[2339]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 18:24:25.660000 audit[2339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffc9cefb00 a2=0 a3=ffff9510c6c0 items=0 ppid=2202 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.660000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:25.661000 audit[2339]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2339 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 18:24:25.661000 audit[2339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffc9cefb00 a2=0 a3=ffff9510c6c0 items=0 ppid=2202 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:25.661000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:26.180914 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1111617642.mount: Deactivated successfully. Feb 9 18:24:26.683316 env[1146]: time="2024-02-09T18:24:26.683270065Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:26.684997 env[1146]: time="2024-02-09T18:24:26.684966902Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:26.686808 env[1146]: time="2024-02-09T18:24:26.686782458Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:26.688410 env[1146]: time="2024-02-09T18:24:26.687991136Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:26.688781 env[1146]: time="2024-02-09T18:24:26.688751895Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f\"" Feb 9 18:24:26.690697 env[1146]: time="2024-02-09T18:24:26.690667771Z" level=info msg="CreateContainer within sandbox \"de53ed39d80e280be94fd201797e07724df3b8cebefee92b8803741f4cb03ab0\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 9 18:24:26.699346 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2119978418.mount: Deactivated successfully. Feb 9 18:24:26.700730 env[1146]: time="2024-02-09T18:24:26.700698833Z" level=info msg="CreateContainer within sandbox \"de53ed39d80e280be94fd201797e07724df3b8cebefee92b8803741f4cb03ab0\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"fe994b8c63b81798dad83a96ac45a69f544e65fbbead0b902f77800ad3036bd3\"" Feb 9 18:24:26.701214 env[1146]: time="2024-02-09T18:24:26.701188993Z" level=info msg="StartContainer for \"fe994b8c63b81798dad83a96ac45a69f544e65fbbead0b902f77800ad3036bd3\"" Feb 9 18:24:26.716089 systemd[1]: Started cri-containerd-fe994b8c63b81798dad83a96ac45a69f544e65fbbead0b902f77800ad3036bd3.scope. Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit: BPF prog-id=120 op=LOAD Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2142 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:26.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393934623863363362383137393864616438336139366163343561 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2142 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:26.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393934623863363362383137393864616438336139366163343561 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit: BPF prog-id=121 op=LOAD Feb 9 18:24:26.734000 audit[2348]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2142 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:26.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393934623863363362383137393864616438336139366163343561 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.734000 audit: BPF prog-id=122 op=LOAD Feb 9 18:24:26.734000 audit[2348]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2142 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:26.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393934623863363362383137393864616438336139366163343561 Feb 9 18:24:26.734000 audit: BPF prog-id=122 op=UNLOAD Feb 9 18:24:26.734000 audit: BPF prog-id=121 op=UNLOAD Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { perfmon } for pid=2348 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit[2348]: AVC avc: denied { bpf } for pid=2348 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:26.735000 audit: BPF prog-id=123 op=LOAD Feb 9 18:24:26.735000 audit[2348]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2142 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:26.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6665393934623863363362383137393864616438336139366163343561 Feb 9 18:24:26.751222 env[1146]: time="2024-02-09T18:24:26.751179224Z" level=info msg="StartContainer for \"fe994b8c63b81798dad83a96ac45a69f544e65fbbead0b902f77800ad3036bd3\" returns successfully" Feb 9 18:24:26.999182 update_engine[1132]: I0209 18:24:26.998708 1132 update_attempter.cc:509] Updating boot flags... Feb 9 18:24:27.399600 kubelet[2015]: I0209 18:24:27.399480 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-7ff8dc855-pk458" podStartSLOduration=1.9758315770000001 podCreationTimestamp="2024-02-09 18:24:24 +0000 UTC" firstStartedPulling="2024-02-09 18:24:25.265511958 +0000 UTC m=+14.034657282" lastFinishedPulling="2024-02-09 18:24:26.689122694 +0000 UTC m=+15.458268058" observedRunningTime="2024-02-09 18:24:27.399298673 +0000 UTC m=+16.168444037" watchObservedRunningTime="2024-02-09 18:24:27.399442353 +0000 UTC m=+16.168587717" Feb 9 18:24:29.226000 audit[2393]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:29.230409 kernel: kauditd_printk_skb: 369 callbacks suppressed Feb 9 18:24:29.230496 kernel: audit: type=1325 audit(1707503069.226:1033): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:29.230518 kernel: audit: type=1300 audit(1707503069.226:1033): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffdea5dfa0 a2=0 a3=ffffab7ed6c0 items=0 ppid=2202 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.226000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffdea5dfa0 a2=0 a3=ffffab7ed6c0 items=0 ppid=2202 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.226000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:29.234450 kernel: audit: type=1327 audit(1707503069.226:1033): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:29.227000 audit[2393]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:29.227000 audit[2393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffdea5dfa0 a2=0 a3=ffffab7ed6c0 items=0 ppid=2202 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.239814 kernel: audit: type=1325 audit(1707503069.227:1034): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:29.239889 kernel: audit: type=1300 audit(1707503069.227:1034): arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffdea5dfa0 a2=0 a3=ffffab7ed6c0 items=0 ppid=2202 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.239912 kernel: audit: type=1327 audit(1707503069.227:1034): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:29.227000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:29.238000 audit[2395]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:29.238000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffe5edc130 a2=0 a3=ffff9c3006c0 items=0 ppid=2202 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.251016 kernel: audit: type=1325 audit(1707503069.238:1035): table=filter:91 family=2 entries=16 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:29.251069 kernel: audit: type=1300 audit(1707503069.238:1035): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffe5edc130 a2=0 a3=ffff9c3006c0 items=0 ppid=2202 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.251087 kernel: audit: type=1327 audit(1707503069.238:1035): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:29.238000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:29.245000 audit[2395]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:29.245000 audit[2395]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffe5edc130 a2=0 a3=ffff9c3006c0 items=0 ppid=2202 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.245000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:29.263571 kernel: audit: type=1325 audit(1707503069.245:1036): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:29.365925 kubelet[2015]: I0209 18:24:29.365880 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:29.371333 systemd[1]: Created slice kubepods-besteffort-pod148dd0be_d353_4528_bd6f_77917ab39145.slice. Feb 9 18:24:29.418626 kubelet[2015]: I0209 18:24:29.418541 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:29.423592 systemd[1]: Created slice kubepods-besteffort-pode3d9faea_7abd_4bc6_ae88_a88b2860287d.slice. Feb 9 18:24:29.425102 kubelet[2015]: I0209 18:24:29.425058 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/148dd0be-d353-4528-bd6f-77917ab39145-typha-certs\") pod \"calico-typha-d6b846b8b-4hx9p\" (UID: \"148dd0be-d353-4528-bd6f-77917ab39145\") " pod="calico-system/calico-typha-d6b846b8b-4hx9p" Feb 9 18:24:29.425102 kubelet[2015]: I0209 18:24:29.425092 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/e3d9faea-7abd-4bc6-ae88-a88b2860287d-flexvol-driver-host\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425240 kubelet[2015]: I0209 18:24:29.425114 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/148dd0be-d353-4528-bd6f-77917ab39145-tigera-ca-bundle\") pod \"calico-typha-d6b846b8b-4hx9p\" (UID: \"148dd0be-d353-4528-bd6f-77917ab39145\") " pod="calico-system/calico-typha-d6b846b8b-4hx9p" Feb 9 18:24:29.425240 kubelet[2015]: I0209 18:24:29.425146 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/e3d9faea-7abd-4bc6-ae88-a88b2860287d-var-lib-calico\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425240 kubelet[2015]: I0209 18:24:29.425168 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e3d9faea-7abd-4bc6-ae88-a88b2860287d-xtables-lock\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425240 kubelet[2015]: I0209 18:24:29.425187 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/e3d9faea-7abd-4bc6-ae88-a88b2860287d-policysync\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425240 kubelet[2015]: I0209 18:24:29.425205 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/e3d9faea-7abd-4bc6-ae88-a88b2860287d-cni-bin-dir\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425356 kubelet[2015]: I0209 18:24:29.425223 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/e3d9faea-7abd-4bc6-ae88-a88b2860287d-var-run-calico\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425356 kubelet[2015]: I0209 18:24:29.425240 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/e3d9faea-7abd-4bc6-ae88-a88b2860287d-cni-net-dir\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425356 kubelet[2015]: I0209 18:24:29.425260 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9dks9\" (UniqueName: \"kubernetes.io/projected/148dd0be-d353-4528-bd6f-77917ab39145-kube-api-access-9dks9\") pod \"calico-typha-d6b846b8b-4hx9p\" (UID: \"148dd0be-d353-4528-bd6f-77917ab39145\") " pod="calico-system/calico-typha-d6b846b8b-4hx9p" Feb 9 18:24:29.425356 kubelet[2015]: I0209 18:24:29.425279 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e3d9faea-7abd-4bc6-ae88-a88b2860287d-lib-modules\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425356 kubelet[2015]: I0209 18:24:29.425298 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/e3d9faea-7abd-4bc6-ae88-a88b2860287d-node-certs\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425462 kubelet[2015]: I0209 18:24:29.425319 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/e3d9faea-7abd-4bc6-ae88-a88b2860287d-cni-log-dir\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425462 kubelet[2015]: I0209 18:24:29.425347 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e3d9faea-7abd-4bc6-ae88-a88b2860287d-tigera-ca-bundle\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.425462 kubelet[2015]: I0209 18:24:29.425365 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lpvtk\" (UniqueName: \"kubernetes.io/projected/e3d9faea-7abd-4bc6-ae88-a88b2860287d-kube-api-access-lpvtk\") pod \"calico-node-vhtn2\" (UID: \"e3d9faea-7abd-4bc6-ae88-a88b2860287d\") " pod="calico-system/calico-node-vhtn2" Feb 9 18:24:29.534112 kubelet[2015]: E0209 18:24:29.534083 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.534112 kubelet[2015]: W0209 18:24:29.534105 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.534274 kubelet[2015]: E0209 18:24:29.534138 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.534606 kubelet[2015]: E0209 18:24:29.534560 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.534606 kubelet[2015]: W0209 18:24:29.534578 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.534606 kubelet[2015]: E0209 18:24:29.534596 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.534862 kubelet[2015]: E0209 18:24:29.534814 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.534862 kubelet[2015]: W0209 18:24:29.534827 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.534862 kubelet[2015]: E0209 18:24:29.534839 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.538911 kubelet[2015]: I0209 18:24:29.538875 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:29.539180 kubelet[2015]: E0209 18:24:29.539159 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-grv8c" podUID=b639ee65-0665-4723-89db-1a6786b4dbb8 Feb 9 18:24:29.555555 kubelet[2015]: E0209 18:24:29.555496 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.555555 kubelet[2015]: W0209 18:24:29.555514 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.555555 kubelet[2015]: E0209 18:24:29.555555 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.555761 kubelet[2015]: E0209 18:24:29.555740 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.555761 kubelet[2015]: W0209 18:24:29.555748 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.555761 kubelet[2015]: E0209 18:24:29.555760 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.626007 kubelet[2015]: E0209 18:24:29.625978 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.626007 kubelet[2015]: W0209 18:24:29.625998 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.626007 kubelet[2015]: E0209 18:24:29.626019 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.626261 kubelet[2015]: E0209 18:24:29.626231 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.626261 kubelet[2015]: W0209 18:24:29.626240 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.626261 kubelet[2015]: E0209 18:24:29.626254 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.626454 kubelet[2015]: E0209 18:24:29.626441 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.626454 kubelet[2015]: W0209 18:24:29.626452 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.626628 kubelet[2015]: E0209 18:24:29.626463 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.626662 kubelet[2015]: E0209 18:24:29.626641 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.626662 kubelet[2015]: W0209 18:24:29.626649 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.626662 kubelet[2015]: E0209 18:24:29.626661 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.626846 kubelet[2015]: E0209 18:24:29.626824 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.626846 kubelet[2015]: W0209 18:24:29.626841 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.626922 kubelet[2015]: E0209 18:24:29.626852 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.627021 kubelet[2015]: E0209 18:24:29.626997 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.627021 kubelet[2015]: W0209 18:24:29.627011 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.627079 kubelet[2015]: E0209 18:24:29.627025 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.627237 kubelet[2015]: E0209 18:24:29.627223 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.627237 kubelet[2015]: W0209 18:24:29.627235 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.627320 kubelet[2015]: E0209 18:24:29.627247 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.627451 kubelet[2015]: E0209 18:24:29.627437 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.627451 kubelet[2015]: W0209 18:24:29.627448 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.627538 kubelet[2015]: E0209 18:24:29.627459 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.627635 kubelet[2015]: E0209 18:24:29.627616 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.627635 kubelet[2015]: W0209 18:24:29.627628 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.627635 kubelet[2015]: E0209 18:24:29.627638 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.627828 kubelet[2015]: E0209 18:24:29.627810 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.627828 kubelet[2015]: W0209 18:24:29.627821 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.627828 kubelet[2015]: E0209 18:24:29.627831 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.627982 kubelet[2015]: E0209 18:24:29.627967 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.627982 kubelet[2015]: W0209 18:24:29.627975 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.627982 kubelet[2015]: E0209 18:24:29.627984 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.628115 kubelet[2015]: E0209 18:24:29.628097 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.628115 kubelet[2015]: W0209 18:24:29.628111 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.628189 kubelet[2015]: E0209 18:24:29.628120 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.628338 kubelet[2015]: E0209 18:24:29.628322 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.628338 kubelet[2015]: W0209 18:24:29.628333 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.628429 kubelet[2015]: E0209 18:24:29.628344 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.628494 kubelet[2015]: E0209 18:24:29.628483 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.628494 kubelet[2015]: W0209 18:24:29.628492 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.628622 kubelet[2015]: E0209 18:24:29.628502 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.628672 kubelet[2015]: E0209 18:24:29.628658 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.628672 kubelet[2015]: W0209 18:24:29.628667 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.628746 kubelet[2015]: E0209 18:24:29.628677 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.628932 kubelet[2015]: E0209 18:24:29.628918 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.628932 kubelet[2015]: W0209 18:24:29.628931 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.629000 kubelet[2015]: E0209 18:24:29.628944 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.629000 kubelet[2015]: I0209 18:24:29.628968 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/b639ee65-0665-4723-89db-1a6786b4dbb8-socket-dir\") pod \"csi-node-driver-grv8c\" (UID: \"b639ee65-0665-4723-89db-1a6786b4dbb8\") " pod="calico-system/csi-node-driver-grv8c" Feb 9 18:24:29.629139 kubelet[2015]: E0209 18:24:29.629121 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.629177 kubelet[2015]: W0209 18:24:29.629141 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.629177 kubelet[2015]: E0209 18:24:29.629153 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.629230 kubelet[2015]: I0209 18:24:29.629178 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/b639ee65-0665-4723-89db-1a6786b4dbb8-kubelet-dir\") pod \"csi-node-driver-grv8c\" (UID: \"b639ee65-0665-4723-89db-1a6786b4dbb8\") " pod="calico-system/csi-node-driver-grv8c" Feb 9 18:24:29.629339 kubelet[2015]: E0209 18:24:29.629317 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.629339 kubelet[2015]: W0209 18:24:29.629333 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.629388 kubelet[2015]: E0209 18:24:29.629344 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.629388 kubelet[2015]: I0209 18:24:29.629360 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dsns5\" (UniqueName: \"kubernetes.io/projected/b639ee65-0665-4723-89db-1a6786b4dbb8-kube-api-access-dsns5\") pod \"csi-node-driver-grv8c\" (UID: \"b639ee65-0665-4723-89db-1a6786b4dbb8\") " pod="calico-system/csi-node-driver-grv8c" Feb 9 18:24:29.629507 kubelet[2015]: E0209 18:24:29.629494 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.629507 kubelet[2015]: W0209 18:24:29.629505 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.629571 kubelet[2015]: E0209 18:24:29.629520 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.629668 kubelet[2015]: E0209 18:24:29.629654 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.629668 kubelet[2015]: W0209 18:24:29.629665 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.629727 kubelet[2015]: E0209 18:24:29.629677 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.629945 kubelet[2015]: E0209 18:24:29.629908 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.629945 kubelet[2015]: W0209 18:24:29.629924 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.629945 kubelet[2015]: E0209 18:24:29.629939 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.630079 kubelet[2015]: E0209 18:24:29.630065 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.630079 kubelet[2015]: W0209 18:24:29.630074 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.630153 kubelet[2015]: E0209 18:24:29.630085 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.630316 kubelet[2015]: E0209 18:24:29.630293 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.630316 kubelet[2015]: W0209 18:24:29.630309 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.630429 kubelet[2015]: E0209 18:24:29.630324 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.630429 kubelet[2015]: I0209 18:24:29.630344 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/b639ee65-0665-4723-89db-1a6786b4dbb8-varrun\") pod \"csi-node-driver-grv8c\" (UID: \"b639ee65-0665-4723-89db-1a6786b4dbb8\") " pod="calico-system/csi-node-driver-grv8c" Feb 9 18:24:29.630778 kubelet[2015]: E0209 18:24:29.630762 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.630778 kubelet[2015]: W0209 18:24:29.630776 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.630861 kubelet[2015]: E0209 18:24:29.630791 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.630975 kubelet[2015]: E0209 18:24:29.630960 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.630975 kubelet[2015]: W0209 18:24:29.630970 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.631031 kubelet[2015]: E0209 18:24:29.630981 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.631199 kubelet[2015]: E0209 18:24:29.631182 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.631199 kubelet[2015]: W0209 18:24:29.631194 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.631275 kubelet[2015]: E0209 18:24:29.631207 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.631366 kubelet[2015]: E0209 18:24:29.631349 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.631366 kubelet[2015]: W0209 18:24:29.631358 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.631366 kubelet[2015]: E0209 18:24:29.631367 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.631546 kubelet[2015]: E0209 18:24:29.631511 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.631546 kubelet[2015]: W0209 18:24:29.631542 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.631609 kubelet[2015]: E0209 18:24:29.631553 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.631609 kubelet[2015]: I0209 18:24:29.631575 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/b639ee65-0665-4723-89db-1a6786b4dbb8-registration-dir\") pod \"csi-node-driver-grv8c\" (UID: \"b639ee65-0665-4723-89db-1a6786b4dbb8\") " pod="calico-system/csi-node-driver-grv8c" Feb 9 18:24:29.631762 kubelet[2015]: E0209 18:24:29.631734 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.631762 kubelet[2015]: W0209 18:24:29.631745 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.631762 kubelet[2015]: E0209 18:24:29.631758 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.631897 kubelet[2015]: E0209 18:24:29.631880 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.631897 kubelet[2015]: W0209 18:24:29.631890 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.631968 kubelet[2015]: E0209 18:24:29.631901 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.679186 kubelet[2015]: E0209 18:24:29.679136 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:29.679692 env[1146]: time="2024-02-09T18:24:29.679643225Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-d6b846b8b-4hx9p,Uid:148dd0be-d353-4528-bd6f-77917ab39145,Namespace:calico-system,Attempt:0,}" Feb 9 18:24:29.714227 env[1146]: time="2024-02-09T18:24:29.714156535Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:29.714345 env[1146]: time="2024-02-09T18:24:29.714248534Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:29.714345 env[1146]: time="2024-02-09T18:24:29.714275854Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:29.714596 env[1146]: time="2024-02-09T18:24:29.714484854Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ef782c33459661f525c4ba15d8edbf4a12465fa0d8f9131f71e46324615544a5 pid=2441 runtime=io.containerd.runc.v2 Feb 9 18:24:29.726396 kubelet[2015]: E0209 18:24:29.726368 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:29.726904 env[1146]: time="2024-02-09T18:24:29.726866436Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-vhtn2,Uid:e3d9faea-7abd-4bc6-ae88-a88b2860287d,Namespace:calico-system,Attempt:0,}" Feb 9 18:24:29.728087 systemd[1]: Started cri-containerd-ef782c33459661f525c4ba15d8edbf4a12465fa0d8f9131f71e46324615544a5.scope. Feb 9 18:24:29.732263 kubelet[2015]: E0209 18:24:29.732219 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.732263 kubelet[2015]: W0209 18:24:29.732243 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.732263 kubelet[2015]: E0209 18:24:29.732265 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.733380 kubelet[2015]: E0209 18:24:29.733359 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.733380 kubelet[2015]: W0209 18:24:29.733373 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.733468 kubelet[2015]: E0209 18:24:29.733390 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.733685 kubelet[2015]: E0209 18:24:29.733667 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.733685 kubelet[2015]: W0209 18:24:29.733681 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.733793 kubelet[2015]: E0209 18:24:29.733697 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.743797 kubelet[2015]: E0209 18:24:29.743758 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.743797 kubelet[2015]: W0209 18:24:29.743782 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.743980 kubelet[2015]: E0209 18:24:29.743919 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.744067 kubelet[2015]: E0209 18:24:29.744050 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.744067 kubelet[2015]: W0209 18:24:29.744061 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.744144 kubelet[2015]: E0209 18:24:29.744103 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.745498 kubelet[2015]: E0209 18:24:29.744280 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.745498 kubelet[2015]: W0209 18:24:29.744296 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.745498 kubelet[2015]: E0209 18:24:29.744380 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.745498 kubelet[2015]: E0209 18:24:29.744461 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.745498 kubelet[2015]: W0209 18:24:29.744468 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.745498 kubelet[2015]: E0209 18:24:29.744550 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.745498 kubelet[2015]: E0209 18:24:29.744736 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.745498 kubelet[2015]: W0209 18:24:29.744746 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.745498 kubelet[2015]: E0209 18:24:29.744762 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.745498 kubelet[2015]: E0209 18:24:29.745121 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.745790 kubelet[2015]: W0209 18:24:29.745142 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.745790 kubelet[2015]: E0209 18:24:29.745165 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.745790 kubelet[2015]: E0209 18:24:29.745338 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.745790 kubelet[2015]: W0209 18:24:29.745346 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.745790 kubelet[2015]: E0209 18:24:29.745433 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.745790 kubelet[2015]: E0209 18:24:29.745518 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.745790 kubelet[2015]: W0209 18:24:29.745533 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.745790 kubelet[2015]: E0209 18:24:29.745605 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.745790 kubelet[2015]: E0209 18:24:29.745688 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.745790 kubelet[2015]: W0209 18:24:29.745695 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.745991 kubelet[2015]: E0209 18:24:29.745744 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.745991 kubelet[2015]: E0209 18:24:29.745884 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.746032 kubelet[2015]: W0209 18:24:29.746014 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.746144 kubelet[2015]: E0209 18:24:29.746116 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.746353 kubelet[2015]: E0209 18:24:29.746336 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.746353 kubelet[2015]: W0209 18:24:29.746349 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.746446 kubelet[2015]: E0209 18:24:29.746432 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.746559 kubelet[2015]: E0209 18:24:29.746545 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.746559 kubelet[2015]: W0209 18:24:29.746556 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.746627 kubelet[2015]: E0209 18:24:29.746570 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.746803 kubelet[2015]: E0209 18:24:29.746779 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.746803 kubelet[2015]: W0209 18:24:29.746793 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.746868 kubelet[2015]: E0209 18:24:29.746861 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.746966 kubelet[2015]: E0209 18:24:29.746948 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.746966 kubelet[2015]: W0209 18:24:29.746958 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.747139 kubelet[2015]: E0209 18:24:29.747116 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.747220 kubelet[2015]: E0209 18:24:29.747207 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.747220 kubelet[2015]: W0209 18:24:29.747218 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.747321 kubelet[2015]: E0209 18:24:29.747308 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.747649 kubelet[2015]: E0209 18:24:29.747400 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.747649 kubelet[2015]: W0209 18:24:29.747411 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.747649 kubelet[2015]: E0209 18:24:29.747520 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.747769 kubelet[2015]: E0209 18:24:29.747596 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.747769 kubelet[2015]: W0209 18:24:29.747695 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.747769 kubelet[2015]: E0209 18:24:29.747718 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.747769 kubelet[2015]: E0209 18:24:29.747916 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.747769 kubelet[2015]: W0209 18:24:29.747925 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.747769 kubelet[2015]: E0209 18:24:29.747939 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.747769 kubelet[2015]: E0209 18:24:29.748086 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.747769 kubelet[2015]: W0209 18:24:29.748094 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.748345 kubelet[2015]: E0209 18:24:29.748199 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.748665 kubelet[2015]: E0209 18:24:29.748614 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.748665 kubelet[2015]: W0209 18:24:29.748654 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.748760 kubelet[2015]: E0209 18:24:29.748675 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.751189 kubelet[2015]: E0209 18:24:29.751154 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.751189 kubelet[2015]: W0209 18:24:29.751195 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.751189 kubelet[2015]: E0209 18:24:29.751219 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.751655 kubelet[2015]: E0209 18:24:29.751634 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.751655 kubelet[2015]: W0209 18:24:29.751651 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.751846 kubelet[2015]: E0209 18:24:29.751683 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.764204 kubelet[2015]: E0209 18:24:29.763775 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:29.764204 kubelet[2015]: W0209 18:24:29.763794 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:29.764204 kubelet[2015]: E0209 18:24:29.763811 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:29.771052 env[1146]: time="2024-02-09T18:24:29.770797131Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:29.771052 env[1146]: time="2024-02-09T18:24:29.770840451Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:29.771052 env[1146]: time="2024-02-09T18:24:29.770850811Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:29.771251 env[1146]: time="2024-02-09T18:24:29.771011571Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a4c9f410b2fe0d9def0fbba017683601a1dc46ccb992b8224b78b2e0dc143bb6 pid=2503 runtime=io.containerd.runc.v2 Feb 9 18:24:29.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit: BPF prog-id=124 op=LOAD Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2441 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373832633333343539363631663532356334626131356438656462 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2441 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373832633333343539363631663532356334626131356438656462 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit: BPF prog-id=125 op=LOAD Feb 9 18:24:29.776000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2441 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373832633333343539363631663532356334626131356438656462 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit: BPF prog-id=126 op=LOAD Feb 9 18:24:29.776000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2441 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373832633333343539363631663532356334626131356438656462 Feb 9 18:24:29.776000 audit: BPF prog-id=126 op=UNLOAD Feb 9 18:24:29.776000 audit: BPF prog-id=125 op=UNLOAD Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { perfmon } for pid=2452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit[2452]: AVC avc: denied { bpf } for pid=2452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.776000 audit: BPF prog-id=127 op=LOAD Feb 9 18:24:29.776000 audit[2452]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2441 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566373832633333343539363631663532356334626131356438656462 Feb 9 18:24:29.790224 systemd[1]: Started cri-containerd-a4c9f410b2fe0d9def0fbba017683601a1dc46ccb992b8224b78b2e0dc143bb6.scope. Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit: BPF prog-id=128 op=LOAD Feb 9 18:24:29.818656 env[1146]: time="2024-02-09T18:24:29.818335662Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-d6b846b8b-4hx9p,Uid:148dd0be-d353-4528-bd6f-77917ab39145,Namespace:calico-system,Attempt:0,} returns sandbox id \"ef782c33459661f525c4ba15d8edbf4a12465fa0d8f9131f71e46324615544a5\"" Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000197b38 a2=10 a3=0 items=0 ppid=2503 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134633966343130623266653064396465663066626261303137363833 Feb 9 18:24:29.819398 kubelet[2015]: E0209 18:24:29.819372 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:29.820625 env[1146]: time="2024-02-09T18:24:29.820592858Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001975a0 a2=3c a3=0 items=0 ppid=2503 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134633966343130623266653064396465663066626261303137363833 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.817000 audit: BPF prog-id=129 op=LOAD Feb 9 18:24:29.817000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001978e0 a2=78 a3=0 items=0 ppid=2503 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.817000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134633966343130623266653064396465663066626261303137363833 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit: BPF prog-id=130 op=LOAD Feb 9 18:24:29.818000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000197670 a2=78 a3=0 items=0 ppid=2503 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134633966343130623266653064396465663066626261303137363833 Feb 9 18:24:29.818000 audit: BPF prog-id=130 op=UNLOAD Feb 9 18:24:29.818000 audit: BPF prog-id=129 op=UNLOAD Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:29.818000 audit: BPF prog-id=131 op=LOAD Feb 9 18:24:29.818000 audit[2512]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000197b40 a2=78 a3=0 items=0 ppid=2503 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:29.818000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134633966343130623266653064396465663066626261303137363833 Feb 9 18:24:29.840805 env[1146]: time="2024-02-09T18:24:29.840751749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-vhtn2,Uid:e3d9faea-7abd-4bc6-ae88-a88b2860287d,Namespace:calico-system,Attempt:0,} returns sandbox id \"a4c9f410b2fe0d9def0fbba017683601a1dc46ccb992b8224b78b2e0dc143bb6\"" Feb 9 18:24:29.841561 kubelet[2015]: E0209 18:24:29.841491 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:30.273000 audit[2546]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2546 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:30.273000 audit[2546]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffec60dfa0 a2=0 a3=ffffb3fbf6c0 items=0 ppid=2202 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:30.273000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:30.273000 audit[2546]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2546 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:30.273000 audit[2546]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffec60dfa0 a2=0 a3=ffffb3fbf6c0 items=0 ppid=2202 pid=2546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:30.273000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:31.023720 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3432018781.mount: Deactivated successfully. Feb 9 18:24:31.349385 kubelet[2015]: E0209 18:24:31.349270 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-grv8c" podUID=b639ee65-0665-4723-89db-1a6786b4dbb8 Feb 9 18:24:31.726565 env[1146]: time="2024-02-09T18:24:31.726447921Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:31.729626 env[1146]: time="2024-02-09T18:24:31.729580277Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:31.731107 env[1146]: time="2024-02-09T18:24:31.731064155Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:31.733144 env[1146]: time="2024-02-09T18:24:31.733105912Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:31.733825 env[1146]: time="2024-02-09T18:24:31.733782912Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969\"" Feb 9 18:24:31.735386 env[1146]: time="2024-02-09T18:24:31.735356149Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 9 18:24:31.744949 env[1146]: time="2024-02-09T18:24:31.744848897Z" level=info msg="CreateContainer within sandbox \"ef782c33459661f525c4ba15d8edbf4a12465fa0d8f9131f71e46324615544a5\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 9 18:24:31.765967 env[1146]: time="2024-02-09T18:24:31.765891950Z" level=info msg="CreateContainer within sandbox \"ef782c33459661f525c4ba15d8edbf4a12465fa0d8f9131f71e46324615544a5\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"e38db7ad7ce01de10d259ff79feb6def8d12b90f142c5d5d6077e80372b4892d\"" Feb 9 18:24:31.766618 env[1146]: time="2024-02-09T18:24:31.766581829Z" level=info msg="StartContainer for \"e38db7ad7ce01de10d259ff79feb6def8d12b90f142c5d5d6077e80372b4892d\"" Feb 9 18:24:31.791015 systemd[1]: Started cri-containerd-e38db7ad7ce01de10d259ff79feb6def8d12b90f142c5d5d6077e80372b4892d.scope. Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit: BPF prog-id=132 op=LOAD Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2441 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:31.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533386462376164376365303164653130643235396666373966656236 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2441 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:31.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533386462376164376365303164653130643235396666373966656236 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit: BPF prog-id=133 op=LOAD Feb 9 18:24:31.849000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2441 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:31.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533386462376164376365303164653130643235396666373966656236 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit: BPF prog-id=134 op=LOAD Feb 9 18:24:31.849000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2441 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:31.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533386462376164376365303164653130643235396666373966656236 Feb 9 18:24:31.849000 audit: BPF prog-id=134 op=UNLOAD Feb 9 18:24:31.849000 audit: BPF prog-id=133 op=UNLOAD Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { perfmon } for pid=2557 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit[2557]: AVC avc: denied { bpf } for pid=2557 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:31.849000 audit: BPF prog-id=135 op=LOAD Feb 9 18:24:31.849000 audit[2557]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2441 pid=2557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:31.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533386462376164376365303164653130643235396666373966656236 Feb 9 18:24:31.876007 env[1146]: time="2024-02-09T18:24:31.874598330Z" level=info msg="StartContainer for \"e38db7ad7ce01de10d259ff79feb6def8d12b90f142c5d5d6077e80372b4892d\" returns successfully" Feb 9 18:24:32.404068 kubelet[2015]: E0209 18:24:32.404039 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:32.414323 kubelet[2015]: I0209 18:24:32.413964 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-d6b846b8b-4hx9p" podStartSLOduration=1.499864855 podCreationTimestamp="2024-02-09 18:24:29 +0000 UTC" firstStartedPulling="2024-02-09 18:24:29.820341939 +0000 UTC m=+18.589487263" lastFinishedPulling="2024-02-09 18:24:31.734410511 +0000 UTC m=+20.503555875" observedRunningTime="2024-02-09 18:24:32.413259788 +0000 UTC m=+21.182405152" watchObservedRunningTime="2024-02-09 18:24:32.413933467 +0000 UTC m=+21.183078831" Feb 9 18:24:32.448347 kubelet[2015]: E0209 18:24:32.448312 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.448347 kubelet[2015]: W0209 18:24:32.448342 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.448499 kubelet[2015]: E0209 18:24:32.448361 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.448655 kubelet[2015]: E0209 18:24:32.448627 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.448655 kubelet[2015]: W0209 18:24:32.448644 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.448655 kubelet[2015]: E0209 18:24:32.448657 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.448831 kubelet[2015]: E0209 18:24:32.448819 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.448831 kubelet[2015]: W0209 18:24:32.448831 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.448890 kubelet[2015]: E0209 18:24:32.448843 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.449068 kubelet[2015]: E0209 18:24:32.449056 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.449068 kubelet[2015]: W0209 18:24:32.449068 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.449153 kubelet[2015]: E0209 18:24:32.449080 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.449236 kubelet[2015]: E0209 18:24:32.449226 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.449236 kubelet[2015]: W0209 18:24:32.449235 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.449300 kubelet[2015]: E0209 18:24:32.449252 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.449380 kubelet[2015]: E0209 18:24:32.449371 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.449415 kubelet[2015]: W0209 18:24:32.449380 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.449415 kubelet[2015]: E0209 18:24:32.449391 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.449629 kubelet[2015]: E0209 18:24:32.449618 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.449629 kubelet[2015]: W0209 18:24:32.449629 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.449709 kubelet[2015]: E0209 18:24:32.449640 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.449795 kubelet[2015]: E0209 18:24:32.449785 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.449795 kubelet[2015]: W0209 18:24:32.449794 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.449862 kubelet[2015]: E0209 18:24:32.449804 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.449954 kubelet[2015]: E0209 18:24:32.449943 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.449987 kubelet[2015]: W0209 18:24:32.449955 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.449987 kubelet[2015]: E0209 18:24:32.449965 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.450129 kubelet[2015]: E0209 18:24:32.450110 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.450129 kubelet[2015]: W0209 18:24:32.450129 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.450200 kubelet[2015]: E0209 18:24:32.450140 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.450282 kubelet[2015]: E0209 18:24:32.450273 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.450282 kubelet[2015]: W0209 18:24:32.450282 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.450347 kubelet[2015]: E0209 18:24:32.450293 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.450423 kubelet[2015]: E0209 18:24:32.450414 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.450423 kubelet[2015]: W0209 18:24:32.450423 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.450480 kubelet[2015]: E0209 18:24:32.450432 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.463624 kubelet[2015]: E0209 18:24:32.463599 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.463624 kubelet[2015]: W0209 18:24:32.463615 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.463624 kubelet[2015]: E0209 18:24:32.463631 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.463879 kubelet[2015]: E0209 18:24:32.463865 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.463879 kubelet[2015]: W0209 18:24:32.463876 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.463943 kubelet[2015]: E0209 18:24:32.463904 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.464102 kubelet[2015]: E0209 18:24:32.464091 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.464102 kubelet[2015]: W0209 18:24:32.464101 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.464174 kubelet[2015]: E0209 18:24:32.464133 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.464348 kubelet[2015]: E0209 18:24:32.464321 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.464348 kubelet[2015]: W0209 18:24:32.464334 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.464348 kubelet[2015]: E0209 18:24:32.464350 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.464505 kubelet[2015]: E0209 18:24:32.464493 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.464566 kubelet[2015]: W0209 18:24:32.464511 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.464566 kubelet[2015]: E0209 18:24:32.464539 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.464714 kubelet[2015]: E0209 18:24:32.464703 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.464714 kubelet[2015]: W0209 18:24:32.464714 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.464781 kubelet[2015]: E0209 18:24:32.464729 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.464924 kubelet[2015]: E0209 18:24:32.464911 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.464924 kubelet[2015]: W0209 18:24:32.464923 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.465015 kubelet[2015]: E0209 18:24:32.464984 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.465125 kubelet[2015]: E0209 18:24:32.465106 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.465163 kubelet[2015]: W0209 18:24:32.465124 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.465263 kubelet[2015]: E0209 18:24:32.465224 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.465322 kubelet[2015]: E0209 18:24:32.465310 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.465322 kubelet[2015]: W0209 18:24:32.465321 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.465469 kubelet[2015]: E0209 18:24:32.465340 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.465542 kubelet[2015]: E0209 18:24:32.465513 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.465613 kubelet[2015]: W0209 18:24:32.465566 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.465652 kubelet[2015]: E0209 18:24:32.465625 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.465889 kubelet[2015]: E0209 18:24:32.465839 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.465889 kubelet[2015]: W0209 18:24:32.465850 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.465980 kubelet[2015]: E0209 18:24:32.465944 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.466160 kubelet[2015]: E0209 18:24:32.466146 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.466160 kubelet[2015]: W0209 18:24:32.466157 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.466234 kubelet[2015]: E0209 18:24:32.466174 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.466679 kubelet[2015]: E0209 18:24:32.466555 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.466679 kubelet[2015]: W0209 18:24:32.466572 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.466679 kubelet[2015]: E0209 18:24:32.466593 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.466957 kubelet[2015]: E0209 18:24:32.466858 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.466957 kubelet[2015]: W0209 18:24:32.466870 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.466957 kubelet[2015]: E0209 18:24:32.466909 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.467222 kubelet[2015]: E0209 18:24:32.467125 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.467222 kubelet[2015]: W0209 18:24:32.467138 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.467222 kubelet[2015]: E0209 18:24:32.467169 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.467510 kubelet[2015]: E0209 18:24:32.467375 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.467510 kubelet[2015]: W0209 18:24:32.467387 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.467510 kubelet[2015]: E0209 18:24:32.467407 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.467892 kubelet[2015]: E0209 18:24:32.467691 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.467892 kubelet[2015]: W0209 18:24:32.467703 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.467892 kubelet[2015]: E0209 18:24:32.467715 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:32.468215 kubelet[2015]: E0209 18:24:32.468202 2015 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:24:32.468429 kubelet[2015]: W0209 18:24:32.468294 2015 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:24:32.468521 kubelet[2015]: E0209 18:24:32.468507 2015 plugins.go:729] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:24:33.059742 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2087764166.mount: Deactivated successfully. Feb 9 18:24:33.131568 env[1146]: time="2024-02-09T18:24:33.131507409Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:33.132876 env[1146]: time="2024-02-09T18:24:33.132848167Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:33.134482 env[1146]: time="2024-02-09T18:24:33.134446966Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:33.135895 env[1146]: time="2024-02-09T18:24:33.135862804Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:33.136327 env[1146]: time="2024-02-09T18:24:33.136300963Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57\"" Feb 9 18:24:33.137814 env[1146]: time="2024-02-09T18:24:33.137773202Z" level=info msg="CreateContainer within sandbox \"a4c9f410b2fe0d9def0fbba017683601a1dc46ccb992b8224b78b2e0dc143bb6\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 9 18:24:33.147670 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1075621129.mount: Deactivated successfully. Feb 9 18:24:33.151636 env[1146]: time="2024-02-09T18:24:33.151599266Z" level=info msg="CreateContainer within sandbox \"a4c9f410b2fe0d9def0fbba017683601a1dc46ccb992b8224b78b2e0dc143bb6\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"9b34915f645e11f7eb8480bd3f1d5c53de7fbeb981d4b9316c317e998ab7bd41\"" Feb 9 18:24:33.152316 env[1146]: time="2024-02-09T18:24:33.152281505Z" level=info msg="StartContainer for \"9b34915f645e11f7eb8480bd3f1d5c53de7fbeb981d4b9316c317e998ab7bd41\"" Feb 9 18:24:33.175924 systemd[1]: Started cri-containerd-9b34915f645e11f7eb8480bd3f1d5c53de7fbeb981d4b9316c317e998ab7bd41.scope. Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2503 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:33.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962333439313566363435653131663765623834383062643366316435 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit: BPF prog-id=136 op=LOAD Feb 9 18:24:33.225000 audit[2626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2503 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:33.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962333439313566363435653131663765623834383062643366316435 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit: BPF prog-id=137 op=LOAD Feb 9 18:24:33.225000 audit[2626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2503 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:33.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962333439313566363435653131663765623834383062643366316435 Feb 9 18:24:33.225000 audit: BPF prog-id=137 op=UNLOAD Feb 9 18:24:33.225000 audit: BPF prog-id=136 op=UNLOAD Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { perfmon } for pid=2626 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit[2626]: AVC avc: denied { bpf } for pid=2626 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:33.225000 audit: BPF prog-id=138 op=LOAD Feb 9 18:24:33.225000 audit[2626]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2503 pid=2626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:33.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3962333439313566363435653131663765623834383062643366316435 Feb 9 18:24:33.250472 systemd[1]: cri-containerd-9b34915f645e11f7eb8480bd3f1d5c53de7fbeb981d4b9316c317e998ab7bd41.scope: Deactivated successfully. Feb 9 18:24:33.257366 env[1146]: time="2024-02-09T18:24:33.257312826Z" level=info msg="StartContainer for \"9b34915f645e11f7eb8480bd3f1d5c53de7fbeb981d4b9316c317e998ab7bd41\" returns successfully" Feb 9 18:24:33.256000 audit: BPF prog-id=138 op=UNLOAD Feb 9 18:24:33.296786 env[1146]: time="2024-02-09T18:24:33.296729941Z" level=info msg="shim disconnected" id=9b34915f645e11f7eb8480bd3f1d5c53de7fbeb981d4b9316c317e998ab7bd41 Feb 9 18:24:33.296786 env[1146]: time="2024-02-09T18:24:33.296782221Z" level=warning msg="cleaning up after shim disconnected" id=9b34915f645e11f7eb8480bd3f1d5c53de7fbeb981d4b9316c317e998ab7bd41 namespace=k8s.io Feb 9 18:24:33.296786 env[1146]: time="2024-02-09T18:24:33.296791821Z" level=info msg="cleaning up dead shim" Feb 9 18:24:33.303630 env[1146]: time="2024-02-09T18:24:33.303588534Z" level=warning msg="cleanup warnings time=\"2024-02-09T18:24:33Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2664 runtime=io.containerd.runc.v2\n" Feb 9 18:24:33.347698 kubelet[2015]: E0209 18:24:33.347291 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-grv8c" podUID=b639ee65-0665-4723-89db-1a6786b4dbb8 Feb 9 18:24:33.408032 kubelet[2015]: I0209 18:24:33.406877 2015 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 9 18:24:33.408032 kubelet[2015]: E0209 18:24:33.407126 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:33.408032 kubelet[2015]: E0209 18:24:33.407961 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:33.408409 env[1146]: time="2024-02-09T18:24:33.407779936Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 9 18:24:34.576995 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3706085198.mount: Deactivated successfully. Feb 9 18:24:35.347291 kubelet[2015]: E0209 18:24:35.347202 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-grv8c" podUID=b639ee65-0665-4723-89db-1a6786b4dbb8 Feb 9 18:24:36.812227 env[1146]: time="2024-02-09T18:24:36.812176205Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:36.813946 env[1146]: time="2024-02-09T18:24:36.813902083Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:36.815607 env[1146]: time="2024-02-09T18:24:36.815576402Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:36.816904 env[1146]: time="2024-02-09T18:24:36.816866680Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:36.817455 env[1146]: time="2024-02-09T18:24:36.817419640Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b\"" Feb 9 18:24:36.819518 env[1146]: time="2024-02-09T18:24:36.819354718Z" level=info msg="CreateContainer within sandbox \"a4c9f410b2fe0d9def0fbba017683601a1dc46ccb992b8224b78b2e0dc143bb6\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 9 18:24:36.830893 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1029732234.mount: Deactivated successfully. Feb 9 18:24:36.833560 env[1146]: time="2024-02-09T18:24:36.833514945Z" level=info msg="CreateContainer within sandbox \"a4c9f410b2fe0d9def0fbba017683601a1dc46ccb992b8224b78b2e0dc143bb6\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"3c5bb1626fecd1a739d2c1086e59c1d5e37e0080a8a1add4155750f5858072f2\"" Feb 9 18:24:36.834195 env[1146]: time="2024-02-09T18:24:36.834139144Z" level=info msg="StartContainer for \"3c5bb1626fecd1a739d2c1086e59c1d5e37e0080a8a1add4155750f5858072f2\"" Feb 9 18:24:36.855289 systemd[1]: run-containerd-runc-k8s.io-3c5bb1626fecd1a739d2c1086e59c1d5e37e0080a8a1add4155750f5858072f2-runc.M3tsw4.mount: Deactivated successfully. Feb 9 18:24:36.857823 systemd[1]: Started cri-containerd-3c5bb1626fecd1a739d2c1086e59c1d5e37e0080a8a1add4155750f5858072f2.scope. Feb 9 18:24:36.900000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.902012 kernel: kauditd_printk_skb: 223 callbacks suppressed Feb 9 18:24:36.902135 kernel: audit: type=1400 audit(1707503076.900:1100): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.900000 audit[2690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2503 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:36.906270 kernel: audit: type=1300 audit(1707503076.900:1100): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2503 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:36.906319 kernel: audit: type=1327 audit(1707503076.900:1100): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363356262313632366665636431613733396432633130383665353963 Feb 9 18:24:36.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363356262313632366665636431613733396432633130383665353963 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.910402 kernel: audit: type=1400 audit(1707503076.901:1101): avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.910466 kernel: audit: type=1400 audit(1707503076.901:1101): avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.912066 kernel: audit: type=1400 audit(1707503076.901:1101): avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.915520 kernel: audit: type=1400 audit(1707503076.901:1101): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.916094 kernel: audit: type=1400 audit(1707503076.901:1101): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.917209 kernel: audit: type=1400 audit(1707503076.901:1101): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.918891 kernel: audit: type=1400 audit(1707503076.901:1101): avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit: BPF prog-id=139 op=LOAD Feb 9 18:24:36.901000 audit[2690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2503 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:36.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363356262313632366665636431613733396432633130383665353963 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.901000 audit: BPF prog-id=140 op=LOAD Feb 9 18:24:36.901000 audit[2690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2503 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:36.901000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363356262313632366665636431613733396432633130383665353963 Feb 9 18:24:36.903000 audit: BPF prog-id=140 op=UNLOAD Feb 9 18:24:36.903000 audit: BPF prog-id=139 op=UNLOAD Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { perfmon } for pid=2690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit[2690]: AVC avc: denied { bpf } for pid=2690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:36.903000 audit: BPF prog-id=141 op=LOAD Feb 9 18:24:36.903000 audit[2690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2503 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:36.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363356262313632366665636431613733396432633130383665353963 Feb 9 18:24:36.925468 env[1146]: time="2024-02-09T18:24:36.925428619Z" level=info msg="StartContainer for \"3c5bb1626fecd1a739d2c1086e59c1d5e37e0080a8a1add4155750f5858072f2\" returns successfully" Feb 9 18:24:37.414856 kubelet[2015]: E0209 18:24:37.414829 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:37.427708 kubelet[2015]: E0209 18:24:37.424832 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-grv8c" podUID=b639ee65-0665-4723-89db-1a6786b4dbb8 Feb 9 18:24:37.615836 env[1146]: time="2024-02-09T18:24:37.615778330Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 18:24:37.618194 systemd[1]: cri-containerd-3c5bb1626fecd1a739d2c1086e59c1d5e37e0080a8a1add4155750f5858072f2.scope: Deactivated successfully. Feb 9 18:24:37.623000 audit: BPF prog-id=141 op=UNLOAD Feb 9 18:24:37.671740 kubelet[2015]: I0209 18:24:37.671327 2015 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 9 18:24:37.701180 env[1146]: time="2024-02-09T18:24:37.701125015Z" level=info msg="shim disconnected" id=3c5bb1626fecd1a739d2c1086e59c1d5e37e0080a8a1add4155750f5858072f2 Feb 9 18:24:37.701370 env[1146]: time="2024-02-09T18:24:37.701351215Z" level=warning msg="cleaning up after shim disconnected" id=3c5bb1626fecd1a739d2c1086e59c1d5e37e0080a8a1add4155750f5858072f2 namespace=k8s.io Feb 9 18:24:37.701449 env[1146]: time="2024-02-09T18:24:37.701436695Z" level=info msg="cleaning up dead shim" Feb 9 18:24:37.713553 kubelet[2015]: I0209 18:24:37.712751 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:37.713553 kubelet[2015]: I0209 18:24:37.712974 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:37.713553 kubelet[2015]: I0209 18:24:37.713092 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:24:37.720444 systemd[1]: Created slice kubepods-burstable-pod2488cca6_ad38_44b3_991d_ed98c4e4ff4a.slice. Feb 9 18:24:37.726087 systemd[1]: Created slice kubepods-burstable-pode1869ddb_e84a_49ae_bfb8_551aab74e651.slice. Feb 9 18:24:37.730422 systemd[1]: Created slice kubepods-besteffort-podcc948248_a0bc_42b4_99c9_e8bc41e555b5.slice. Feb 9 18:24:37.734836 env[1146]: time="2024-02-09T18:24:37.734795905Z" level=warning msg="cleanup warnings time=\"2024-02-09T18:24:37Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2737 runtime=io.containerd.runc.v2\n" Feb 9 18:24:37.804120 kubelet[2015]: I0209 18:24:37.804056 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vl4np\" (UniqueName: \"kubernetes.io/projected/e1869ddb-e84a-49ae-bfb8-551aab74e651-kube-api-access-vl4np\") pod \"coredns-5d78c9869d-8dmdt\" (UID: \"e1869ddb-e84a-49ae-bfb8-551aab74e651\") " pod="kube-system/coredns-5d78c9869d-8dmdt" Feb 9 18:24:37.804120 kubelet[2015]: I0209 18:24:37.804111 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/2488cca6-ad38-44b3-991d-ed98c4e4ff4a-config-volume\") pod \"coredns-5d78c9869d-qjkx4\" (UID: \"2488cca6-ad38-44b3-991d-ed98c4e4ff4a\") " pod="kube-system/coredns-5d78c9869d-qjkx4" Feb 9 18:24:37.804310 kubelet[2015]: I0209 18:24:37.804136 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9p75m\" (UniqueName: \"kubernetes.io/projected/2488cca6-ad38-44b3-991d-ed98c4e4ff4a-kube-api-access-9p75m\") pod \"coredns-5d78c9869d-qjkx4\" (UID: \"2488cca6-ad38-44b3-991d-ed98c4e4ff4a\") " pod="kube-system/coredns-5d78c9869d-qjkx4" Feb 9 18:24:37.804310 kubelet[2015]: I0209 18:24:37.804158 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/cc948248-a0bc-42b4-99c9-e8bc41e555b5-tigera-ca-bundle\") pod \"calico-kube-controllers-55ffc46b4c-l7vkh\" (UID: \"cc948248-a0bc-42b4-99c9-e8bc41e555b5\") " pod="calico-system/calico-kube-controllers-55ffc46b4c-l7vkh" Feb 9 18:24:37.804310 kubelet[2015]: I0209 18:24:37.804179 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/e1869ddb-e84a-49ae-bfb8-551aab74e651-config-volume\") pod \"coredns-5d78c9869d-8dmdt\" (UID: \"e1869ddb-e84a-49ae-bfb8-551aab74e651\") " pod="kube-system/coredns-5d78c9869d-8dmdt" Feb 9 18:24:37.804310 kubelet[2015]: I0209 18:24:37.804204 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mpzmg\" (UniqueName: \"kubernetes.io/projected/cc948248-a0bc-42b4-99c9-e8bc41e555b5-kube-api-access-mpzmg\") pod \"calico-kube-controllers-55ffc46b4c-l7vkh\" (UID: \"cc948248-a0bc-42b4-99c9-e8bc41e555b5\") " pod="calico-system/calico-kube-controllers-55ffc46b4c-l7vkh" Feb 9 18:24:37.828429 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3c5bb1626fecd1a739d2c1086e59c1d5e37e0080a8a1add4155750f5858072f2-rootfs.mount: Deactivated successfully. Feb 9 18:24:38.024644 kubelet[2015]: E0209 18:24:38.024609 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:38.025498 env[1146]: time="2024-02-09T18:24:38.025457492Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-qjkx4,Uid:2488cca6-ad38-44b3-991d-ed98c4e4ff4a,Namespace:kube-system,Attempt:0,}" Feb 9 18:24:38.028760 kubelet[2015]: E0209 18:24:38.028736 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:38.029304 env[1146]: time="2024-02-09T18:24:38.029263409Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-8dmdt,Uid:e1869ddb-e84a-49ae-bfb8-551aab74e651,Namespace:kube-system,Attempt:0,}" Feb 9 18:24:38.034163 env[1146]: time="2024-02-09T18:24:38.034122365Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55ffc46b4c-l7vkh,Uid:cc948248-a0bc-42b4-99c9-e8bc41e555b5,Namespace:calico-system,Attempt:0,}" Feb 9 18:24:38.140323 env[1146]: time="2024-02-09T18:24:38.140245158Z" level=error msg="Failed to destroy network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.140662 env[1146]: time="2024-02-09T18:24:38.140627198Z" level=error msg="encountered an error cleaning up failed sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.140722 env[1146]: time="2024-02-09T18:24:38.140678557Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-8dmdt,Uid:e1869ddb-e84a-49ae-bfb8-551aab74e651,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.141149 kubelet[2015]: E0209 18:24:38.141122 2015 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.141326 kubelet[2015]: E0209 18:24:38.141311 2015 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-8dmdt" Feb 9 18:24:38.144917 kubelet[2015]: E0209 18:24:38.144878 2015 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-8dmdt" Feb 9 18:24:38.145025 kubelet[2015]: E0209 18:24:38.144965 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-8dmdt_kube-system(e1869ddb-e84a-49ae-bfb8-551aab74e651)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-8dmdt_kube-system(e1869ddb-e84a-49ae-bfb8-551aab74e651)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-8dmdt" podUID=e1869ddb-e84a-49ae-bfb8-551aab74e651 Feb 9 18:24:38.156050 env[1146]: time="2024-02-09T18:24:38.155991265Z" level=error msg="Failed to destroy network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.156566 env[1146]: time="2024-02-09T18:24:38.156516744Z" level=error msg="encountered an error cleaning up failed sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.156702 env[1146]: time="2024-02-09T18:24:38.156673224Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-qjkx4,Uid:2488cca6-ad38-44b3-991d-ed98c4e4ff4a,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.157061 kubelet[2015]: E0209 18:24:38.157028 2015 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.157160 kubelet[2015]: E0209 18:24:38.157082 2015 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-qjkx4" Feb 9 18:24:38.157160 kubelet[2015]: E0209 18:24:38.157114 2015 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5d78c9869d-qjkx4" Feb 9 18:24:38.157218 kubelet[2015]: E0209 18:24:38.157167 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5d78c9869d-qjkx4_kube-system(2488cca6-ad38-44b3-991d-ed98c4e4ff4a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5d78c9869d-qjkx4_kube-system(2488cca6-ad38-44b3-991d-ed98c4e4ff4a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-qjkx4" podUID=2488cca6-ad38-44b3-991d-ed98c4e4ff4a Feb 9 18:24:38.166165 env[1146]: time="2024-02-09T18:24:38.166113217Z" level=error msg="Failed to destroy network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.166560 env[1146]: time="2024-02-09T18:24:38.166507736Z" level=error msg="encountered an error cleaning up failed sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.166606 env[1146]: time="2024-02-09T18:24:38.166582536Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55ffc46b4c-l7vkh,Uid:cc948248-a0bc-42b4-99c9-e8bc41e555b5,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.166839 kubelet[2015]: E0209 18:24:38.166816 2015 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.166908 kubelet[2015]: E0209 18:24:38.166895 2015 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-55ffc46b4c-l7vkh" Feb 9 18:24:38.166945 kubelet[2015]: E0209 18:24:38.166924 2015 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-55ffc46b4c-l7vkh" Feb 9 18:24:38.167645 kubelet[2015]: E0209 18:24:38.167455 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-55ffc46b4c-l7vkh_calico-system(cc948248-a0bc-42b4-99c9-e8bc41e555b5)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-55ffc46b4c-l7vkh_calico-system(cc948248-a0bc-42b4-99c9-e8bc41e555b5)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-55ffc46b4c-l7vkh" podUID=cc948248-a0bc-42b4-99c9-e8bc41e555b5 Feb 9 18:24:38.418216 kubelet[2015]: I0209 18:24:38.417587 2015 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:24:38.418522 env[1146]: time="2024-02-09T18:24:38.418418609Z" level=info msg="StopPodSandbox for \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\"" Feb 9 18:24:38.421241 kubelet[2015]: I0209 18:24:38.420666 2015 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:24:38.421353 env[1146]: time="2024-02-09T18:24:38.421260527Z" level=info msg="StopPodSandbox for \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\"" Feb 9 18:24:38.425927 kubelet[2015]: E0209 18:24:38.425788 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:38.426864 env[1146]: time="2024-02-09T18:24:38.426833922Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 9 18:24:38.429380 kubelet[2015]: I0209 18:24:38.429349 2015 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:24:38.429539 env[1146]: time="2024-02-09T18:24:38.429500480Z" level=info msg="StopPodSandbox for \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\"" Feb 9 18:24:38.464992 env[1146]: time="2024-02-09T18:24:38.464924091Z" level=error msg="StopPodSandbox for \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\" failed" error="failed to destroy network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.466547 kubelet[2015]: E0209 18:24:38.466497 2015 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:24:38.466643 kubelet[2015]: E0209 18:24:38.466580 2015 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805} Feb 9 18:24:38.466643 kubelet[2015]: E0209 18:24:38.466640 2015 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2488cca6-ad38-44b3-991d-ed98c4e4ff4a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 18:24:38.466723 kubelet[2015]: E0209 18:24:38.466666 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2488cca6-ad38-44b3-991d-ed98c4e4ff4a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-qjkx4" podUID=2488cca6-ad38-44b3-991d-ed98c4e4ff4a Feb 9 18:24:38.476309 env[1146]: time="2024-02-09T18:24:38.475684522Z" level=error msg="StopPodSandbox for \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\" failed" error="failed to destroy network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.476410 kubelet[2015]: E0209 18:24:38.475959 2015 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:24:38.476410 kubelet[2015]: E0209 18:24:38.475995 2015 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c} Feb 9 18:24:38.476410 kubelet[2015]: E0209 18:24:38.476028 2015 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e1869ddb-e84a-49ae-bfb8-551aab74e651\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 18:24:38.476410 kubelet[2015]: E0209 18:24:38.476052 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e1869ddb-e84a-49ae-bfb8-551aab74e651\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5d78c9869d-8dmdt" podUID=e1869ddb-e84a-49ae-bfb8-551aab74e651 Feb 9 18:24:38.486517 env[1146]: time="2024-02-09T18:24:38.486456154Z" level=error msg="StopPodSandbox for \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\" failed" error="failed to destroy network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:38.486738 kubelet[2015]: E0209 18:24:38.486700 2015 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:24:38.486738 kubelet[2015]: E0209 18:24:38.486741 2015 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa} Feb 9 18:24:38.486812 kubelet[2015]: E0209 18:24:38.486774 2015 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cc948248-a0bc-42b4-99c9-e8bc41e555b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 18:24:38.486812 kubelet[2015]: E0209 18:24:38.486798 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cc948248-a0bc-42b4-99c9-e8bc41e555b5\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-55ffc46b4c-l7vkh" podUID=cc948248-a0bc-42b4-99c9-e8bc41e555b5 Feb 9 18:24:38.829065 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805-shm.mount: Deactivated successfully. Feb 9 18:24:39.351588 systemd[1]: Created slice kubepods-besteffort-podb639ee65_0665_4723_89db_1a6786b4dbb8.slice. Feb 9 18:24:39.353551 env[1146]: time="2024-02-09T18:24:39.353501259Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-grv8c,Uid:b639ee65-0665-4723-89db-1a6786b4dbb8,Namespace:calico-system,Attempt:0,}" Feb 9 18:24:39.404400 env[1146]: time="2024-02-09T18:24:39.404345140Z" level=error msg="Failed to destroy network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:39.404866 env[1146]: time="2024-02-09T18:24:39.404832900Z" level=error msg="encountered an error cleaning up failed sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:39.404996 env[1146]: time="2024-02-09T18:24:39.404969580Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-grv8c,Uid:b639ee65-0665-4723-89db-1a6786b4dbb8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:39.406132 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483-shm.mount: Deactivated successfully. Feb 9 18:24:39.406285 kubelet[2015]: E0209 18:24:39.406240 2015 remote_runtime.go:176] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:39.406335 kubelet[2015]: E0209 18:24:39.406308 2015 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-grv8c" Feb 9 18:24:39.406399 kubelet[2015]: E0209 18:24:39.406364 2015 kuberuntime_manager.go:1122] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-grv8c" Feb 9 18:24:39.406428 kubelet[2015]: E0209 18:24:39.406414 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-grv8c_calico-system(b639ee65-0665-4723-89db-1a6786b4dbb8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-grv8c_calico-system(b639ee65-0665-4723-89db-1a6786b4dbb8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-grv8c" podUID=b639ee65-0665-4723-89db-1a6786b4dbb8 Feb 9 18:24:39.431809 kubelet[2015]: I0209 18:24:39.431786 2015 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:24:39.432519 env[1146]: time="2024-02-09T18:24:39.432490679Z" level=info msg="StopPodSandbox for \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\"" Feb 9 18:24:39.455245 env[1146]: time="2024-02-09T18:24:39.455186021Z" level=error msg="StopPodSandbox for \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\" failed" error="failed to destroy network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:24:39.455495 kubelet[2015]: E0209 18:24:39.455462 2015 remote_runtime.go:205] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:24:39.455572 kubelet[2015]: E0209 18:24:39.455515 2015 kuberuntime_manager.go:1312] "Failed to stop sandbox" podSandboxID={Type:containerd ID:076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483} Feb 9 18:24:39.455572 kubelet[2015]: E0209 18:24:39.455562 2015 kuberuntime_manager.go:1038] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b639ee65-0665-4723-89db-1a6786b4dbb8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 18:24:39.455656 kubelet[2015]: E0209 18:24:39.455589 2015 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b639ee65-0665-4723-89db-1a6786b4dbb8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-grv8c" podUID=b639ee65-0665-4723-89db-1a6786b4dbb8 Feb 9 18:24:41.023702 systemd[1]: Started sshd@7-10.0.0.32:22-10.0.0.1:37080.service. Feb 9 18:24:41.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.32:22-10.0.0.1:37080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:41.075000 audit[3003]: USER_ACCT pid=3003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:41.076183 sshd[3003]: Accepted publickey for core from 10.0.0.1 port 37080 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:24:41.076000 audit[3003]: CRED_ACQ pid=3003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:41.076000 audit[3003]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2133c90 a2=3 a3=1 items=0 ppid=1 pid=3003 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:41.076000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:24:41.077518 sshd[3003]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:24:41.080886 systemd-logind[1130]: New session 8 of user core. Feb 9 18:24:41.081755 systemd[1]: Started session-8.scope. Feb 9 18:24:41.084000 audit[3003]: USER_START pid=3003 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:41.086000 audit[3005]: CRED_ACQ pid=3005 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:41.217351 sshd[3003]: pam_unix(sshd:session): session closed for user core Feb 9 18:24:41.217000 audit[3003]: USER_END pid=3003 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:41.217000 audit[3003]: CRED_DISP pid=3003 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:41.219599 systemd[1]: sshd@7-10.0.0.32:22-10.0.0.1:37080.service: Deactivated successfully. Feb 9 18:24:41.220349 systemd[1]: session-8.scope: Deactivated successfully. Feb 9 18:24:41.219000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.32:22-10.0.0.1:37080 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:41.220897 systemd-logind[1130]: Session 8 logged out. Waiting for processes to exit. Feb 9 18:24:41.221634 systemd-logind[1130]: Removed session 8. Feb 9 18:24:43.527046 kubelet[2015]: I0209 18:24:43.526972 2015 prober_manager.go:287] "Failed to trigger a manual run" probe="Readiness" Feb 9 18:24:43.527658 kubelet[2015]: E0209 18:24:43.527634 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:43.565000 audit[3018]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:43.566586 kernel: kauditd_printk_skb: 45 callbacks suppressed Feb 9 18:24:43.566645 kernel: audit: type=1325 audit(1707503083.565:1116): table=filter:95 family=2 entries=15 op=nft_register_rule pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:43.565000 audit[3018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffeb5904e0 a2=0 a3=ffff7f8916c0 items=0 ppid=2202 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:43.570857 kernel: audit: type=1300 audit(1707503083.565:1116): arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffeb5904e0 a2=0 a3=ffff7f8916c0 items=0 ppid=2202 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:43.570923 kernel: audit: type=1327 audit(1707503083.565:1116): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:43.565000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:43.568000 audit[3018]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:43.568000 audit[3018]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6068 a0=3 a1=ffffeb5904e0 a2=0 a3=ffff7f8916c0 items=0 ppid=2202 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:43.577847 kernel: audit: type=1325 audit(1707503083.568:1117): table=nat:96 family=2 entries=19 op=nft_register_chain pid=3018 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:43.577909 kernel: audit: type=1300 audit(1707503083.568:1117): arch=c00000b7 syscall=211 success=yes exit=6068 a0=3 a1=ffffeb5904e0 a2=0 a3=ffff7f8916c0 items=0 ppid=2202 pid=3018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:43.577953 kernel: audit: type=1327 audit(1707503083.568:1117): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:43.568000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:43.760164 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1296198628.mount: Deactivated successfully. Feb 9 18:24:44.101798 env[1146]: time="2024-02-09T18:24:44.101752037Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:44.104031 env[1146]: time="2024-02-09T18:24:44.103999196Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:44.105916 env[1146]: time="2024-02-09T18:24:44.105881555Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:44.107973 env[1146]: time="2024-02-09T18:24:44.107933233Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:44.108512 env[1146]: time="2024-02-09T18:24:44.108477473Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774\"" Feb 9 18:24:44.146392 env[1146]: time="2024-02-09T18:24:44.146331372Z" level=info msg="CreateContainer within sandbox \"a4c9f410b2fe0d9def0fbba017683601a1dc46ccb992b8224b78b2e0dc143bb6\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 9 18:24:44.158353 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount329149587.mount: Deactivated successfully. Feb 9 18:24:44.164811 env[1146]: time="2024-02-09T18:24:44.164760322Z" level=info msg="CreateContainer within sandbox \"a4c9f410b2fe0d9def0fbba017683601a1dc46ccb992b8224b78b2e0dc143bb6\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"50e118f7eb9f6ff01f346ce45c0ae1999df60f848bfe6bf66780634fc55cc46e\"" Feb 9 18:24:44.165634 env[1146]: time="2024-02-09T18:24:44.165598161Z" level=info msg="StartContainer for \"50e118f7eb9f6ff01f346ce45c0ae1999df60f848bfe6bf66780634fc55cc46e\"" Feb 9 18:24:44.190713 systemd[1]: Started cri-containerd-50e118f7eb9f6ff01f346ce45c0ae1999df60f848bfe6bf66780634fc55cc46e.scope. Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2503 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:44.253337 kernel: audit: type=1400 audit(1707503084.248:1118): avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.253437 kernel: audit: type=1300 audit(1707503084.248:1118): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2503 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:44.253461 kernel: audit: type=1327 audit(1707503084.248:1118): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653131386637656239663666663031663334366365343563306165 Feb 9 18:24:44.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653131386637656239663666663031663334366365343563306165 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.257543 kernel: audit: type=1400 audit(1707503084.248:1119): avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.248000 audit: BPF prog-id=142 op=LOAD Feb 9 18:24:44.248000 audit[3030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2503 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:44.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653131386637656239663666663031663334366365343563306165 Feb 9 18:24:44.250000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.250000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.250000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.250000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.250000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.250000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.250000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.250000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.250000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.250000 audit: BPF prog-id=143 op=LOAD Feb 9 18:24:44.250000 audit[3030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2503 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:44.250000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653131386637656239663666663031663334366365343563306165 Feb 9 18:24:44.252000 audit: BPF prog-id=143 op=UNLOAD Feb 9 18:24:44.252000 audit: BPF prog-id=142 op=UNLOAD Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { perfmon } for pid=3030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit[3030]: AVC avc: denied { bpf } for pid=3030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:44.252000 audit: BPF prog-id=144 op=LOAD Feb 9 18:24:44.252000 audit[3030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2503 pid=3030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:44.252000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530653131386637656239663666663031663334366365343563306165 Feb 9 18:24:44.321723 env[1146]: time="2024-02-09T18:24:44.321674914Z" level=info msg="StartContainer for \"50e118f7eb9f6ff01f346ce45c0ae1999df60f848bfe6bf66780634fc55cc46e\" returns successfully" Feb 9 18:24:44.442840 kubelet[2015]: E0209 18:24:44.442750 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:44.444444 kubelet[2015]: E0209 18:24:44.443937 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:44.458296 kubelet[2015]: I0209 18:24:44.458008 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-vhtn2" podStartSLOduration=1.1912036719999999 podCreationTimestamp="2024-02-09 18:24:29 +0000 UTC" firstStartedPulling="2024-02-09 18:24:29.842061867 +0000 UTC m=+18.611207231" lastFinishedPulling="2024-02-09 18:24:44.108831113 +0000 UTC m=+32.877976477" observedRunningTime="2024-02-09 18:24:44.456838679 +0000 UTC m=+33.225984043" watchObservedRunningTime="2024-02-09 18:24:44.457972918 +0000 UTC m=+33.227118242" Feb 9 18:24:44.466150 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 9 18:24:44.466234 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 9 18:24:45.444755 kubelet[2015]: E0209 18:24:45.444672 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:45.459046 systemd[1]: run-containerd-runc-k8s.io-50e118f7eb9f6ff01f346ce45c0ae1999df60f848bfe6bf66780634fc55cc46e-runc.HWrfqf.mount: Deactivated successfully. Feb 9 18:24:45.762000 audit[3220]: AVC avc: denied { write } for pid=3220 comm="tee" name="fd" dev="proc" ino=17301 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:24:45.762000 audit[3220]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe2b8a991 a2=241 a3=1b6 items=1 ppid=3177 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:45.762000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 9 18:24:45.762000 audit: PATH item=0 name="/dev/fd/63" inode=18136 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:24:45.762000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:24:45.773000 audit[3224]: AVC avc: denied { write } for pid=3224 comm="tee" name="fd" dev="proc" ino=19660 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:24:45.773000 audit[3224]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff199498f a2=241 a3=1b6 items=1 ppid=3176 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:45.773000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 9 18:24:45.773000 audit: PATH item=0 name="/dev/fd/63" inode=17297 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:24:45.773000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:24:45.774000 audit[3226]: AVC avc: denied { write } for pid=3226 comm="tee" name="fd" dev="proc" ino=18890 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:24:45.774000 audit[3226]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd356a97f a2=241 a3=1b6 items=1 ppid=3168 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:45.774000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 9 18:24:45.774000 audit: PATH item=0 name="/dev/fd/63" inode=17298 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:24:45.774000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:24:45.776000 audit[3231]: AVC avc: denied { write } for pid=3231 comm="tee" name="fd" dev="proc" ino=18894 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:24:45.776000 audit[3231]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe2dfa98f a2=241 a3=1b6 items=1 ppid=3178 pid=3231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:45.776000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 9 18:24:45.776000 audit: PATH item=0 name="/dev/fd/63" inode=18142 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:24:45.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:24:45.777000 audit[3239]: AVC avc: denied { write } for pid=3239 comm="tee" name="fd" dev="proc" ino=18898 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:24:45.777000 audit[3239]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc95ed980 a2=241 a3=1b6 items=1 ppid=3173 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:45.777000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 9 18:24:45.777000 audit: PATH item=0 name="/dev/fd/63" inode=19662 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:24:45.777000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:24:45.789000 audit[3229]: AVC avc: denied { write } for pid=3229 comm="tee" name="fd" dev="proc" ino=17311 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:24:45.789000 audit[3229]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd336998f a2=241 a3=1b6 items=1 ppid=3170 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:45.789000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 9 18:24:45.789000 audit: PATH item=0 name="/dev/fd/63" inode=18141 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:24:45.789000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:24:45.800000 audit[3250]: AVC avc: denied { write } for pid=3250 comm="tee" name="fd" dev="proc" ino=17317 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:24:45.800000 audit[3250]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdbc53990 a2=241 a3=1b6 items=1 ppid=3207 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:45.800000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 9 18:24:45.800000 audit: PATH item=0 name="/dev/fd/63" inode=19663 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:24:45.800000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit: BPF prog-id=145 op=LOAD Feb 9 18:24:46.006000 audit[3315]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffef6787e8 a2=70 a3=0 items=0 ppid=3179 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.006000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 18:24:46.006000 audit: BPF prog-id=145 op=UNLOAD Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit: BPF prog-id=146 op=LOAD Feb 9 18:24:46.006000 audit[3315]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffef6787e8 a2=70 a3=4a174c items=0 ppid=3179 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.006000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 18:24:46.006000 audit: BPF prog-id=146 op=UNLOAD Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffef678818 a2=70 a3=df4679f items=0 ppid=3179 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.006000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { perfmon } for pid=3315 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit[3315]: AVC avc: denied { bpf } for pid=3315 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.006000 audit: BPF prog-id=147 op=LOAD Feb 9 18:24:46.006000 audit[3315]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffef678768 a2=70 a3=df467b9 items=0 ppid=3179 pid=3315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.006000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 18:24:46.012000 audit[3319]: AVC avc: denied { bpf } for pid=3319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.012000 audit[3319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd5d5bc48 a2=70 a3=0 items=0 ppid=3179 pid=3319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.012000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 18:24:46.012000 audit[3319]: AVC avc: denied { bpf } for pid=3319 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:46.012000 audit[3319]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffd5d5bb28 a2=70 a3=2 items=0 ppid=3179 pid=3319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.012000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 18:24:46.020000 audit: BPF prog-id=147 op=UNLOAD Feb 9 18:24:46.020000 audit[3324]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=7 a0=e a1=aaaaded55fb0 a2=288000 a3=0 items=1 ppid=1037 pid=3324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.020000 audit: CWD cwd="/" Feb 9 18:24:46.020000 audit: PATH item=0 name="devices" inode=4 dev=00:15 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:sysfs_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:24:46.020000 audit: PROCTITLE proctitle="(udev-worker)" Feb 9 18:24:46.064000 audit[3350]: NETFILTER_CFG table=mangle:97 family=2 entries=19 op=nft_register_chain pid=3350 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:24:46.064000 audit[3350]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=ffffeb9d02f0 a2=0 a3=ffff952dbfa8 items=0 ppid=3179 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.064000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:24:46.065000 audit[3346]: NETFILTER_CFG table=nat:98 family=2 entries=16 op=nft_register_chain pid=3346 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:24:46.065000 audit[3346]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=ffffe64a1cb0 a2=0 a3=ffff83f4cfa8 items=0 ppid=3179 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.065000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:24:46.066000 audit[3345]: NETFILTER_CFG table=raw:99 family=2 entries=19 op=nft_register_chain pid=3345 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:24:46.066000 audit[3345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=ffffcb57c700 a2=0 a3=ffffa6d9efa8 items=0 ppid=3179 pid=3345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.066000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:24:46.067000 audit[3347]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=3347 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:24:46.067000 audit[3347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18472 a0=3 a1=fffff872e850 a2=0 a3=ffffbacd6fa8 items=0 ppid=3179 pid=3347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.067000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:24:46.221645 systemd[1]: Started sshd@8-10.0.0.32:22-10.0.0.1:40208.service. Feb 9 18:24:46.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.32:22-10.0.0.1:40208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:46.273000 audit[3354]: USER_ACCT pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:46.274447 sshd[3354]: Accepted publickey for core from 10.0.0.1 port 40208 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:24:46.276000 audit[3354]: CRED_ACQ pid=3354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:46.276000 audit[3354]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdf2a36f0 a2=3 a3=1 items=0 ppid=1 pid=3354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:46.276000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:24:46.277880 sshd[3354]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:24:46.283651 systemd-logind[1130]: New session 9 of user core. Feb 9 18:24:46.284087 systemd[1]: Started session-9.scope. Feb 9 18:24:46.287000 audit[3354]: USER_START pid=3354 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:46.288000 audit[3356]: CRED_ACQ pid=3356 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:46.403322 sshd[3354]: pam_unix(sshd:session): session closed for user core Feb 9 18:24:46.405000 audit[3354]: USER_END pid=3354 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:46.405000 audit[3354]: CRED_DISP pid=3354 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:46.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.32:22-10.0.0.1:40208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:46.407745 systemd[1]: sshd@8-10.0.0.32:22-10.0.0.1:40208.service: Deactivated successfully. Feb 9 18:24:46.408493 systemd[1]: session-9.scope: Deactivated successfully. Feb 9 18:24:46.409158 systemd-logind[1130]: Session 9 logged out. Waiting for processes to exit. Feb 9 18:24:46.409832 systemd-logind[1130]: Removed session 9. Feb 9 18:24:46.446712 kubelet[2015]: E0209 18:24:46.446292 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:46.904012 systemd-networkd[1057]: vxlan.calico: Link UP Feb 9 18:24:46.904020 systemd-networkd[1057]: vxlan.calico: Gained carrier Feb 9 18:24:48.765018 systemd-networkd[1057]: vxlan.calico: Gained IPv6LL Feb 9 18:24:50.348486 env[1146]: time="2024-02-09T18:24:50.348445486Z" level=info msg="StopPodSandbox for \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\"" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.431 [INFO][3414] k8s.go 578: Cleaning up netns ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.433 [INFO][3414] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" iface="eth0" netns="/var/run/netns/cni-771f374f-89ba-d181-622a-1c9aa5433388" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.437 [INFO][3414] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" iface="eth0" netns="/var/run/netns/cni-771f374f-89ba-d181-622a-1c9aa5433388" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.439 [INFO][3414] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" iface="eth0" netns="/var/run/netns/cni-771f374f-89ba-d181-622a-1c9aa5433388" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.439 [INFO][3414] k8s.go 585: Releasing IP address(es) ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.439 [INFO][3414] utils.go 188: Calico CNI releasing IP address ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.544 [INFO][3422] ipam_plugin.go 415: Releasing address using handleID ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" HandleID="k8s-pod-network.076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.544 [INFO][3422] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.544 [INFO][3422] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.555 [WARNING][3422] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" HandleID="k8s-pod-network.076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.556 [INFO][3422] ipam_plugin.go 443: Releasing address using workloadID ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" HandleID="k8s-pod-network.076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.559 [INFO][3422] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:24:50.564282 env[1146]: 2024-02-09 18:24:50.562 [INFO][3414] k8s.go 591: Teardown processing complete. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:24:50.567056 systemd[1]: run-netns-cni\x2d771f374f\x2d89ba\x2dd181\x2d622a\x2d1c9aa5433388.mount: Deactivated successfully. Feb 9 18:24:50.567816 env[1146]: time="2024-02-09T18:24:50.567615445Z" level=info msg="TearDown network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\" successfully" Feb 9 18:24:50.567816 env[1146]: time="2024-02-09T18:24:50.567650805Z" level=info msg="StopPodSandbox for \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\" returns successfully" Feb 9 18:24:50.568312 env[1146]: time="2024-02-09T18:24:50.568280127Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-grv8c,Uid:b639ee65-0665-4723-89db-1a6786b4dbb8,Namespace:calico-system,Attempt:1,}" Feb 9 18:24:50.686580 systemd-networkd[1057]: caliea51fea348b: Link UP Feb 9 18:24:50.688939 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 18:24:50.689012 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliea51fea348b: link becomes ready Feb 9 18:24:50.689206 systemd-networkd[1057]: caliea51fea348b: Gained carrier Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.619 [INFO][3430] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--grv8c-eth0 csi-node-driver- calico-system b639ee65-0665-4723-89db-1a6786b4dbb8 806 0 2024-02-09 18:24:29 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:86b88cf7c9 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-grv8c eth0 default [] [] [kns.calico-system ksa.calico-system.default] caliea51fea348b [] []}} ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Namespace="calico-system" Pod="csi-node-driver-grv8c" WorkloadEndpoint="localhost-k8s-csi--node--driver--grv8c-" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.620 [INFO][3430] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Namespace="calico-system" Pod="csi-node-driver-grv8c" WorkloadEndpoint="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.643 [INFO][3444] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" HandleID="k8s-pod-network.6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.656 [INFO][3444] ipam_plugin.go 268: Auto assigning IP ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" HandleID="k8s-pod-network.6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c380), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-grv8c", "timestamp":"2024-02-09 18:24:50.643961749 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.656 [INFO][3444] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.656 [INFO][3444] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.656 [INFO][3444] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.658 [INFO][3444] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" host="localhost" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.664 [INFO][3444] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.668 [INFO][3444] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.669 [INFO][3444] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.671 [INFO][3444] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.671 [INFO][3444] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" host="localhost" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.673 [INFO][3444] ipam.go 1682: Creating new handle: k8s-pod-network.6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1 Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.676 [INFO][3444] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" host="localhost" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.681 [INFO][3444] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" host="localhost" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.681 [INFO][3444] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" host="localhost" Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.681 [INFO][3444] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:24:50.707628 env[1146]: 2024-02-09 18:24:50.681 [INFO][3444] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" HandleID="k8s-pod-network.6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.708461 env[1146]: 2024-02-09 18:24:50.683 [INFO][3430] k8s.go 385: Populated endpoint ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Namespace="calico-system" Pod="csi-node-driver-grv8c" WorkloadEndpoint="localhost-k8s-csi--node--driver--grv8c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--grv8c-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b639ee65-0665-4723-89db-1a6786b4dbb8", ResourceVersion:"806", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-grv8c", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliea51fea348b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:24:50.708461 env[1146]: 2024-02-09 18:24:50.684 [INFO][3430] k8s.go 386: Calico CNI using IPs: [192.168.88.129/32] ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Namespace="calico-system" Pod="csi-node-driver-grv8c" WorkloadEndpoint="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.708461 env[1146]: 2024-02-09 18:24:50.684 [INFO][3430] dataplane_linux.go 68: Setting the host side veth name to caliea51fea348b ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Namespace="calico-system" Pod="csi-node-driver-grv8c" WorkloadEndpoint="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.708461 env[1146]: 2024-02-09 18:24:50.689 [INFO][3430] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Namespace="calico-system" Pod="csi-node-driver-grv8c" WorkloadEndpoint="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.708461 env[1146]: 2024-02-09 18:24:50.689 [INFO][3430] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Namespace="calico-system" Pod="csi-node-driver-grv8c" WorkloadEndpoint="localhost-k8s-csi--node--driver--grv8c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--grv8c-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b639ee65-0665-4723-89db-1a6786b4dbb8", ResourceVersion:"806", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1", Pod:"csi-node-driver-grv8c", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliea51fea348b", MAC:"5e:e6:82:aa:b9:19", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:24:50.708461 env[1146]: 2024-02-09 18:24:50.704 [INFO][3430] k8s.go 491: Wrote updated endpoint to datastore ContainerID="6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1" Namespace="calico-system" Pod="csi-node-driver-grv8c" WorkloadEndpoint="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:24:50.717559 kernel: kauditd_printk_skb: 150 callbacks suppressed Feb 9 18:24:50.717652 kernel: audit: type=1325 audit(1707503090.713:1153): table=filter:101 family=2 entries=36 op=nft_register_chain pid=3464 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:24:50.717679 kernel: audit: type=1300 audit(1707503090.713:1153): arch=c00000b7 syscall=211 success=yes exit=19908 a0=3 a1=ffffe34ed120 a2=0 a3=ffffb825efa8 items=0 ppid=3179 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:50.713000 audit[3464]: NETFILTER_CFG table=filter:101 family=2 entries=36 op=nft_register_chain pid=3464 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:24:50.713000 audit[3464]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19908 a0=3 a1=ffffe34ed120 a2=0 a3=ffffb825efa8 items=0 ppid=3179 pid=3464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:50.713000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:24:50.721606 kernel: audit: type=1327 audit(1707503090.713:1153): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:24:50.727046 env[1146]: time="2024-02-09T18:24:50.726976796Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:50.727046 env[1146]: time="2024-02-09T18:24:50.727022476Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:50.727046 env[1146]: time="2024-02-09T18:24:50.727032636Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:50.727219 env[1146]: time="2024-02-09T18:24:50.727176597Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1 pid=3477 runtime=io.containerd.runc.v2 Feb 9 18:24:50.742615 systemd[1]: Started cri-containerd-6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1.scope. Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767688 kernel: audit: type=1400 audit(1707503090.762:1154): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767746 kernel: audit: type=1400 audit(1707503090.762:1155): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767771 kernel: audit: type=1400 audit(1707503090.762:1156): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769419 kernel: audit: type=1400 audit(1707503090.762:1157): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.771228 kernel: audit: type=1400 audit(1707503090.762:1158): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.772994 kernel: audit: type=1400 audit(1707503090.762:1159): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.774782 kernel: audit: type=1400 audit(1707503090.762:1160): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.762000 audit: BPF prog-id=148 op=LOAD Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:50.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635353461353261363537643034653430313662633061383032323237 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:50.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635353461353261363537643034653430313662633061383032323237 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.766000 audit: BPF prog-id=149 op=LOAD Feb 9 18:24:50.766000 audit[3488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:50.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635353461353261363537643034653430313662633061383032323237 Feb 9 18:24:50.767000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.767000 audit: BPF prog-id=150 op=LOAD Feb 9 18:24:50.767000 audit[3488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:50.767000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635353461353261363537643034653430313662633061383032323237 Feb 9 18:24:50.769000 audit: BPF prog-id=150 op=UNLOAD Feb 9 18:24:50.769000 audit: BPF prog-id=149 op=UNLOAD Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { perfmon } for pid=3488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit[3488]: AVC avc: denied { bpf } for pid=3488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:50.769000 audit: BPF prog-id=151 op=LOAD Feb 9 18:24:50.769000 audit[3488]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3477 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:50.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635353461353261363537643034653430313662633061383032323237 Feb 9 18:24:50.776674 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:24:50.788847 env[1146]: time="2024-02-09T18:24:50.788791250Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-grv8c,Uid:b639ee65-0665-4723-89db-1a6786b4dbb8,Namespace:calico-system,Attempt:1,} returns sandbox id \"6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1\"" Feb 9 18:24:50.790319 env[1146]: time="2024-02-09T18:24:50.790241735Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 9 18:24:51.348684 env[1146]: time="2024-02-09T18:24:51.348640716Z" level=info msg="StopPodSandbox for \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\"" Feb 9 18:24:51.349163 env[1146]: time="2024-02-09T18:24:51.349135797Z" level=info msg="StopPodSandbox for \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\"" Feb 9 18:24:51.349489 env[1146]: time="2024-02-09T18:24:51.349455278Z" level=info msg="StopPodSandbox for \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\"" Feb 9 18:24:51.408039 systemd[1]: Started sshd@9-10.0.0.32:22-10.0.0.1:40218.service. Feb 9 18:24:51.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.32:22-10.0.0.1:40218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:51.465560 sshd[3598]: Accepted publickey for core from 10.0.0.1 port 40218 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:24:51.463000 audit[3598]: USER_ACCT pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.467406 sshd[3598]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:24:51.465000 audit[3598]: CRED_ACQ pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.465000 audit[3598]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe62fb0a0 a2=3 a3=1 items=0 ppid=1 pid=3598 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.465000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:24:51.471577 systemd-logind[1130]: New session 10 of user core. Feb 9 18:24:51.472463 systemd[1]: Started session-10.scope. Feb 9 18:24:51.476000 audit[3598]: USER_START pid=3598 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.478000 audit[3621]: CRED_ACQ pid=3621 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.428 [INFO][3575] k8s.go 578: Cleaning up netns ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.428 [INFO][3575] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" iface="eth0" netns="/var/run/netns/cni-4cf51205-8130-1721-4863-3ffa4e4d2c71" Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.428 [INFO][3575] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" iface="eth0" netns="/var/run/netns/cni-4cf51205-8130-1721-4863-3ffa4e4d2c71" Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.429 [INFO][3575] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" iface="eth0" netns="/var/run/netns/cni-4cf51205-8130-1721-4863-3ffa4e4d2c71" Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.429 [INFO][3575] k8s.go 585: Releasing IP address(es) ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.429 [INFO][3575] utils.go 188: Calico CNI releasing IP address ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.462 [INFO][3604] ipam_plugin.go 415: Releasing address using handleID ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" HandleID="k8s-pod-network.3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.462 [INFO][3604] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.462 [INFO][3604] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.477 [WARNING][3604] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" HandleID="k8s-pod-network.3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.477 [INFO][3604] ipam_plugin.go 443: Releasing address using workloadID ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" HandleID="k8s-pod-network.3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.479 [INFO][3604] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:24:51.487259 env[1146]: 2024-02-09 18:24:51.482 [INFO][3575] k8s.go 591: Teardown processing complete. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:24:51.487907 env[1146]: time="2024-02-09T18:24:51.487862464Z" level=info msg="TearDown network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\" successfully" Feb 9 18:24:51.488015 env[1146]: time="2024-02-09T18:24:51.487995985Z" level=info msg="StopPodSandbox for \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\" returns successfully" Feb 9 18:24:51.489601 kubelet[2015]: E0209 18:24:51.488744 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:51.489918 env[1146]: time="2024-02-09T18:24:51.489628710Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-qjkx4,Uid:2488cca6-ad38-44b3-991d-ed98c4e4ff4a,Namespace:kube-system,Attempt:1,}" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.400 [INFO][3568] k8s.go 578: Cleaning up netns ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.401 [INFO][3568] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" iface="eth0" netns="/var/run/netns/cni-fd9f8717-69ef-dfe4-4df7-2675c4c13eb1" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.402 [INFO][3568] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" iface="eth0" netns="/var/run/netns/cni-fd9f8717-69ef-dfe4-4df7-2675c4c13eb1" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.402 [INFO][3568] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" iface="eth0" netns="/var/run/netns/cni-fd9f8717-69ef-dfe4-4df7-2675c4c13eb1" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.402 [INFO][3568] k8s.go 585: Releasing IP address(es) ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.402 [INFO][3568] utils.go 188: Calico CNI releasing IP address ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.462 [INFO][3592] ipam_plugin.go 415: Releasing address using handleID ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" HandleID="k8s-pod-network.0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.462 [INFO][3592] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.479 [INFO][3592] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.493 [WARNING][3592] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" HandleID="k8s-pod-network.0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.493 [INFO][3592] ipam_plugin.go 443: Releasing address using workloadID ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" HandleID="k8s-pod-network.0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.497 [INFO][3592] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:24:51.501224 env[1146]: 2024-02-09 18:24:51.499 [INFO][3568] k8s.go 591: Teardown processing complete. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:24:51.501639 env[1146]: time="2024-02-09T18:24:51.501336870Z" level=info msg="TearDown network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\" successfully" Feb 9 18:24:51.501639 env[1146]: time="2024-02-09T18:24:51.501363030Z" level=info msg="StopPodSandbox for \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\" returns successfully" Feb 9 18:24:51.501939 env[1146]: time="2024-02-09T18:24:51.501912112Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55ffc46b4c-l7vkh,Uid:cc948248-a0bc-42b4-99c9-e8bc41e555b5,Namespace:calico-system,Attempt:1,}" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.404 [INFO][3574] k8s.go 578: Cleaning up netns ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.404 [INFO][3574] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" iface="eth0" netns="/var/run/netns/cni-c539d6a7-39ae-61f4-78d2-55c8a203be6e" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.405 [INFO][3574] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" iface="eth0" netns="/var/run/netns/cni-c539d6a7-39ae-61f4-78d2-55c8a203be6e" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.405 [INFO][3574] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" iface="eth0" netns="/var/run/netns/cni-c539d6a7-39ae-61f4-78d2-55c8a203be6e" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.414 [INFO][3574] k8s.go 585: Releasing IP address(es) ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.414 [INFO][3574] utils.go 188: Calico CNI releasing IP address ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.462 [INFO][3599] ipam_plugin.go 415: Releasing address using handleID ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" HandleID="k8s-pod-network.c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.464 [INFO][3599] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.497 [INFO][3599] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.508 [WARNING][3599] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" HandleID="k8s-pod-network.c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.508 [INFO][3599] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" HandleID="k8s-pod-network.c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.509 [INFO][3599] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:24:51.513825 env[1146]: 2024-02-09 18:24:51.511 [INFO][3574] k8s.go 591: Teardown processing complete. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:24:51.514323 env[1146]: time="2024-02-09T18:24:51.513897912Z" level=info msg="TearDown network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\" successfully" Feb 9 18:24:51.514323 env[1146]: time="2024-02-09T18:24:51.513926352Z" level=info msg="StopPodSandbox for \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\" returns successfully" Feb 9 18:24:51.514379 kubelet[2015]: E0209 18:24:51.514290 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:51.520004 env[1146]: time="2024-02-09T18:24:51.519955413Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-8dmdt,Uid:e1869ddb-e84a-49ae-bfb8-551aab74e651,Namespace:kube-system,Attempt:1,}" Feb 9 18:24:51.572514 systemd[1]: run-containerd-runc-k8s.io-6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1-runc.V1gYGX.mount: Deactivated successfully. Feb 9 18:24:51.572624 systemd[1]: run-netns-cni\x2dfd9f8717\x2d69ef\x2ddfe4\x2d4df7\x2d2675c4c13eb1.mount: Deactivated successfully. Feb 9 18:24:51.572674 systemd[1]: run-netns-cni\x2dc539d6a7\x2d39ae\x2d61f4\x2d78d2\x2d55c8a203be6e.mount: Deactivated successfully. Feb 9 18:24:51.572724 systemd[1]: run-netns-cni\x2d4cf51205\x2d8130\x2d1721\x2d4863\x2d3ffa4e4d2c71.mount: Deactivated successfully. Feb 9 18:24:51.613819 sshd[3598]: pam_unix(sshd:session): session closed for user core Feb 9 18:24:51.617000 audit[3598]: USER_END pid=3598 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.617000 audit[3598]: CRED_DISP pid=3598 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.32:22-10.0.0.1:40224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:51.618844 systemd[1]: Started sshd@10-10.0.0.32:22-10.0.0.1:40224.service. Feb 9 18:24:51.621578 systemd[1]: sshd@9-10.0.0.32:22-10.0.0.1:40218.service: Deactivated successfully. Feb 9 18:24:51.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.32:22-10.0.0.1:40218 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:51.622373 systemd[1]: session-10.scope: Deactivated successfully. Feb 9 18:24:51.623183 systemd-logind[1130]: Session 10 logged out. Waiting for processes to exit. Feb 9 18:24:51.624030 systemd-logind[1130]: Removed session 10. Feb 9 18:24:51.659000 audit[3688]: USER_ACCT pid=3688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.661648 sshd[3688]: Accepted publickey for core from 10.0.0.1 port 40224 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:24:51.660000 audit[3688]: CRED_ACQ pid=3688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.661000 audit[3688]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff400d3b0 a2=3 a3=1 items=0 ppid=1 pid=3688 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.661000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:24:51.662837 sshd[3688]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:24:51.667721 systemd-logind[1130]: New session 11 of user core. Feb 9 18:24:51.668550 systemd[1]: Started session-11.scope. Feb 9 18:24:51.672000 audit[3688]: USER_START pid=3688 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.673000 audit[3702]: CRED_ACQ pid=3702 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:51.691425 systemd-networkd[1057]: cali7ae9a4304ac: Link UP Feb 9 18:24:51.693676 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 18:24:51.693755 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7ae9a4304ac: link becomes ready Feb 9 18:24:51.693704 systemd-networkd[1057]: cali7ae9a4304ac: Gained carrier Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.583 [INFO][3625] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5d78c9869d--qjkx4-eth0 coredns-5d78c9869d- kube-system 2488cca6-ad38-44b3-991d-ed98c4e4ff4a 819 0 2024-02-09 18:24:24 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5d78c9869d-qjkx4 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali7ae9a4304ac [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Namespace="kube-system" Pod="coredns-5d78c9869d-qjkx4" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--qjkx4-" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.583 [INFO][3625] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Namespace="kube-system" Pod="coredns-5d78c9869d-qjkx4" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.631 [INFO][3673] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" HandleID="k8s-pod-network.5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.646 [INFO][3673] ipam_plugin.go 268: Auto assigning IP ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" HandleID="k8s-pod-network.5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000691950), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5d78c9869d-qjkx4", "timestamp":"2024-02-09 18:24:51.631815749 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.646 [INFO][3673] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.646 [INFO][3673] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.646 [INFO][3673] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.647 [INFO][3673] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" host="localhost" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.657 [INFO][3673] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.661 [INFO][3673] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.664 [INFO][3673] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.667 [INFO][3673] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.667 [INFO][3673] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" host="localhost" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.671 [INFO][3673] ipam.go 1682: Creating new handle: k8s-pod-network.5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6 Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.678 [INFO][3673] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" host="localhost" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.683 [INFO][3673] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" host="localhost" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.684 [INFO][3673] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" host="localhost" Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.684 [INFO][3673] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:24:51.707398 env[1146]: 2024-02-09 18:24:51.684 [INFO][3673] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" HandleID="k8s-pod-network.5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.708035 env[1146]: 2024-02-09 18:24:51.686 [INFO][3625] k8s.go 385: Populated endpoint ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Namespace="kube-system" Pod="coredns-5d78c9869d-qjkx4" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--qjkx4-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"2488cca6-ad38-44b3-991d-ed98c4e4ff4a", ResourceVersion:"819", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5d78c9869d-qjkx4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7ae9a4304ac", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:24:51.708035 env[1146]: 2024-02-09 18:24:51.686 [INFO][3625] k8s.go 386: Calico CNI using IPs: [192.168.88.130/32] ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Namespace="kube-system" Pod="coredns-5d78c9869d-qjkx4" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.708035 env[1146]: 2024-02-09 18:24:51.686 [INFO][3625] dataplane_linux.go 68: Setting the host side veth name to cali7ae9a4304ac ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Namespace="kube-system" Pod="coredns-5d78c9869d-qjkx4" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.708035 env[1146]: 2024-02-09 18:24:51.694 [INFO][3625] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Namespace="kube-system" Pod="coredns-5d78c9869d-qjkx4" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.708035 env[1146]: 2024-02-09 18:24:51.694 [INFO][3625] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Namespace="kube-system" Pod="coredns-5d78c9869d-qjkx4" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--qjkx4-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"2488cca6-ad38-44b3-991d-ed98c4e4ff4a", ResourceVersion:"819", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6", Pod:"coredns-5d78c9869d-qjkx4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7ae9a4304ac", MAC:"d6:12:5a:d0:ef:3f", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:24:51.708035 env[1146]: 2024-02-09 18:24:51.702 [INFO][3625] k8s.go 491: Wrote updated endpoint to datastore ContainerID="5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6" Namespace="kube-system" Pod="coredns-5d78c9869d-qjkx4" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:24:51.721000 audit[3725]: NETFILTER_CFG table=filter:102 family=2 entries=40 op=nft_register_chain pid=3725 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:24:51.721000 audit[3725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21096 a0=3 a1=ffffd3851270 a2=0 a3=ffffbd837fa8 items=0 ppid=3179 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.721000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:24:51.732140 env[1146]: time="2024-02-09T18:24:51.728172874Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:51.732140 env[1146]: time="2024-02-09T18:24:51.728218674Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:51.732140 env[1146]: time="2024-02-09T18:24:51.728228594Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:51.732140 env[1146]: time="2024-02-09T18:24:51.728407434Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6 pid=3733 runtime=io.containerd.runc.v2 Feb 9 18:24:51.741351 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9f5e19df114: link becomes ready Feb 9 18:24:51.737116 systemd-networkd[1057]: cali9f5e19df114: Link UP Feb 9 18:24:51.737903 systemd-networkd[1057]: cali9f5e19df114: Gained carrier Feb 9 18:24:51.753312 systemd[1]: Started cri-containerd-5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6.scope. Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.587 [INFO][3643] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0 calico-kube-controllers-55ffc46b4c- calico-system cc948248-a0bc-42b4-99c9-e8bc41e555b5 817 0 2024-02-09 18:24:29 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:55ffc46b4c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-55ffc46b4c-l7vkh eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali9f5e19df114 [] []}} ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Namespace="calico-system" Pod="calico-kube-controllers-55ffc46b4c-l7vkh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.587 [INFO][3643] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Namespace="calico-system" Pod="calico-kube-controllers-55ffc46b4c-l7vkh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.646 [INFO][3682] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" HandleID="k8s-pod-network.8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.657 [INFO][3682] ipam_plugin.go 268: Auto assigning IP ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" HandleID="k8s-pod-network.8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000255890), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-55ffc46b4c-l7vkh", "timestamp":"2024-02-09 18:24:51.646336478 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.658 [INFO][3682] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.684 [INFO][3682] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.684 [INFO][3682] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.686 [INFO][3682] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" host="localhost" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.696 [INFO][3682] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.700 [INFO][3682] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.703 [INFO][3682] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.707 [INFO][3682] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.707 [INFO][3682] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" host="localhost" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.708 [INFO][3682] ipam.go 1682: Creating new handle: k8s-pod-network.8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.712 [INFO][3682] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" host="localhost" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.718 [INFO][3682] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" host="localhost" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.718 [INFO][3682] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" host="localhost" Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.718 [INFO][3682] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:24:51.759397 env[1146]: 2024-02-09 18:24:51.718 [INFO][3682] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" HandleID="k8s-pod-network.8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.760967 env[1146]: 2024-02-09 18:24:51.725 [INFO][3643] k8s.go 385: Populated endpoint ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Namespace="calico-system" Pod="calico-kube-controllers-55ffc46b4c-l7vkh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0", GenerateName:"calico-kube-controllers-55ffc46b4c-", Namespace:"calico-system", SelfLink:"", UID:"cc948248-a0bc-42b4-99c9-e8bc41e555b5", ResourceVersion:"817", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55ffc46b4c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-55ffc46b4c-l7vkh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9f5e19df114", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:24:51.760967 env[1146]: 2024-02-09 18:24:51.725 [INFO][3643] k8s.go 386: Calico CNI using IPs: [192.168.88.131/32] ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Namespace="calico-system" Pod="calico-kube-controllers-55ffc46b4c-l7vkh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.760967 env[1146]: 2024-02-09 18:24:51.725 [INFO][3643] dataplane_linux.go 68: Setting the host side veth name to cali9f5e19df114 ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Namespace="calico-system" Pod="calico-kube-controllers-55ffc46b4c-l7vkh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.760967 env[1146]: 2024-02-09 18:24:51.737 [INFO][3643] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Namespace="calico-system" Pod="calico-kube-controllers-55ffc46b4c-l7vkh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.760967 env[1146]: 2024-02-09 18:24:51.741 [INFO][3643] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Namespace="calico-system" Pod="calico-kube-controllers-55ffc46b4c-l7vkh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0", GenerateName:"calico-kube-controllers-55ffc46b4c-", Namespace:"calico-system", SelfLink:"", UID:"cc948248-a0bc-42b4-99c9-e8bc41e555b5", ResourceVersion:"817", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55ffc46b4c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb", Pod:"calico-kube-controllers-55ffc46b4c-l7vkh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9f5e19df114", MAC:"ae:98:f9:5b:be:2c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:24:51.760967 env[1146]: 2024-02-09 18:24:51.754 [INFO][3643] k8s.go 491: Wrote updated endpoint to datastore ContainerID="8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb" Namespace="calico-system" Pod="calico-kube-controllers-55ffc46b4c-l7vkh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:24:51.776000 audit[3775]: NETFILTER_CFG table=filter:103 family=2 entries=38 op=nft_register_chain pid=3775 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:24:51.776000 audit[3775]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19508 a0=3 a1=ffffcf3f1940 a2=0 a3=ffff8c535fa8 items=0 ppid=3179 pid=3775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.776000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.789000 audit: BPF prog-id=152 op=LOAD Feb 9 18:24:51.791774 env[1146]: time="2024-02-09T18:24:51.789202999Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:51.791774 env[1146]: time="2024-02-09T18:24:51.789245279Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:51.791774 env[1146]: time="2024-02-09T18:24:51.789255439Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3733 pid=3743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566613238396235626139626135653031303433613035356430653061 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3733 pid=3743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566613238396235626139626135653031303433613035356430653061 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit: BPF prog-id=153 op=LOAD Feb 9 18:24:51.790000 audit[3743]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3733 pid=3743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566613238396235626139626135653031303433613035356430653061 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit: BPF prog-id=154 op=LOAD Feb 9 18:24:51.790000 audit[3743]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3733 pid=3743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566613238396235626139626135653031303433613035356430653061 Feb 9 18:24:51.790000 audit: BPF prog-id=154 op=UNLOAD Feb 9 18:24:51.790000 audit: BPF prog-id=153 op=UNLOAD Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { perfmon } for pid=3743 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit[3743]: AVC avc: denied { bpf } for pid=3743 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.790000 audit: BPF prog-id=155 op=LOAD Feb 9 18:24:51.790000 audit[3743]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3733 pid=3743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566613238396235626139626135653031303433613035356430653061 Feb 9 18:24:51.793568 env[1146]: time="2024-02-09T18:24:51.792768291Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb pid=3784 runtime=io.containerd.runc.v2 Feb 9 18:24:51.796360 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:24:51.815215 systemd-networkd[1057]: caliac048c2d3cc: Link UP Feb 9 18:24:51.820160 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliac048c2d3cc: link becomes ready Feb 9 18:24:51.820322 systemd-networkd[1057]: caliac048c2d3cc: Gained carrier Feb 9 18:24:51.827449 systemd[1]: Started cri-containerd-8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb.scope. Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.610 [INFO][3659] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5d78c9869d--8dmdt-eth0 coredns-5d78c9869d- kube-system e1869ddb-e84a-49ae-bfb8-551aab74e651 818 0 2024-02-09 18:24:24 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5d78c9869d projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5d78c9869d-8dmdt eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliac048c2d3cc [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Namespace="kube-system" Pod="coredns-5d78c9869d-8dmdt" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--8dmdt-" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.611 [INFO][3659] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Namespace="kube-system" Pod="coredns-5d78c9869d-8dmdt" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.649 [INFO][3690] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" HandleID="k8s-pod-network.a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.675 [INFO][3690] ipam_plugin.go 268: Auto assigning IP ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" HandleID="k8s-pod-network.a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40000bd9d0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5d78c9869d-8dmdt", "timestamp":"2024-02-09 18:24:51.649519729 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.675 [INFO][3690] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.718 [INFO][3690] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.718 [INFO][3690] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.723 [INFO][3690] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" host="localhost" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.754 [INFO][3690] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.763 [INFO][3690] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.765 [INFO][3690] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.774 [INFO][3690] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.774 [INFO][3690] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" host="localhost" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.779 [INFO][3690] ipam.go 1682: Creating new handle: k8s-pod-network.a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436 Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.785 [INFO][3690] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" host="localhost" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.793 [INFO][3690] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" host="localhost" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.793 [INFO][3690] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" host="localhost" Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.794 [INFO][3690] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:24:51.840163 env[1146]: 2024-02-09 18:24:51.794 [INFO][3690] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" HandleID="k8s-pod-network.a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.840698 env[1146]: 2024-02-09 18:24:51.801 [INFO][3659] k8s.go 385: Populated endpoint ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Namespace="kube-system" Pod="coredns-5d78c9869d-8dmdt" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--8dmdt-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"e1869ddb-e84a-49ae-bfb8-551aab74e651", ResourceVersion:"818", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5d78c9869d-8dmdt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliac048c2d3cc", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:24:51.840698 env[1146]: 2024-02-09 18:24:51.801 [INFO][3659] k8s.go 386: Calico CNI using IPs: [192.168.88.132/32] ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Namespace="kube-system" Pod="coredns-5d78c9869d-8dmdt" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.840698 env[1146]: 2024-02-09 18:24:51.801 [INFO][3659] dataplane_linux.go 68: Setting the host side veth name to caliac048c2d3cc ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Namespace="kube-system" Pod="coredns-5d78c9869d-8dmdt" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.840698 env[1146]: 2024-02-09 18:24:51.817 [INFO][3659] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Namespace="kube-system" Pod="coredns-5d78c9869d-8dmdt" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.840698 env[1146]: 2024-02-09 18:24:51.820 [INFO][3659] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Namespace="kube-system" Pod="coredns-5d78c9869d-8dmdt" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--8dmdt-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"e1869ddb-e84a-49ae-bfb8-551aab74e651", ResourceVersion:"818", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436", Pod:"coredns-5d78c9869d-8dmdt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliac048c2d3cc", MAC:"3a:1c:15:29:04:5b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:24:51.840698 env[1146]: 2024-02-09 18:24:51.835 [INFO][3659] k8s.go 491: Wrote updated endpoint to datastore ContainerID="a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436" Namespace="kube-system" Pod="coredns-5d78c9869d-8dmdt" WorkloadEndpoint="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:24:51.848203 env[1146]: time="2024-02-09T18:24:51.848166278Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-qjkx4,Uid:2488cca6-ad38-44b3-991d-ed98c4e4ff4a,Namespace:kube-system,Attempt:1,} returns sandbox id \"5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6\"" Feb 9 18:24:51.848792 kubelet[2015]: E0209 18:24:51.848772 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:51.851685 env[1146]: time="2024-02-09T18:24:51.851638049Z" level=info msg="CreateContainer within sandbox \"5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 18:24:51.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit: BPF prog-id=156 op=LOAD Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3784 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343765636539623761633632356362323463656362386366663330 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3784 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343765636539623761633632356362323463656362386366663330 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit: BPF prog-id=157 op=LOAD Feb 9 18:24:51.855000 audit[3793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3784 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343765636539623761633632356362323463656362386366663330 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit: BPF prog-id=158 op=LOAD Feb 9 18:24:51.855000 audit[3793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3784 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343765636539623761633632356362323463656362386366663330 Feb 9 18:24:51.855000 audit: BPF prog-id=158 op=UNLOAD Feb 9 18:24:51.855000 audit: BPF prog-id=157 op=UNLOAD Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.855000 audit: BPF prog-id=159 op=LOAD Feb 9 18:24:51.855000 audit[3793]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3784 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.855000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3861343765636539623761633632356362323463656362386366663330 Feb 9 18:24:51.857862 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:24:51.860000 audit[3824]: NETFILTER_CFG table=filter:104 family=2 entries=38 op=nft_register_chain pid=3824 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:24:51.860000 audit[3824]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19088 a0=3 a1=fffffc697de0 a2=0 a3=ffffb9854fa8 items=0 ppid=3179 pid=3824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.860000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:24:51.870422 env[1146]: time="2024-02-09T18:24:51.867835864Z" level=info msg="CreateContainer within sandbox \"5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"ba13b1c2b646586e12082f73c119cfc1a6f1d709b96d082cb8ecae3e0607662b\"" Feb 9 18:24:51.870422 env[1146]: time="2024-02-09T18:24:51.869918911Z" level=info msg="StartContainer for \"ba13b1c2b646586e12082f73c119cfc1a6f1d709b96d082cb8ecae3e0607662b\"" Feb 9 18:24:51.875729 env[1146]: time="2024-02-09T18:24:51.875616730Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:24:51.875729 env[1146]: time="2024-02-09T18:24:51.875655050Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:24:51.875729 env[1146]: time="2024-02-09T18:24:51.875664610Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:24:51.877411 env[1146]: time="2024-02-09T18:24:51.875952051Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436 pid=3838 runtime=io.containerd.runc.v2 Feb 9 18:24:51.901714 systemd-networkd[1057]: caliea51fea348b: Gained IPv6LL Feb 9 18:24:51.903212 systemd[1]: Started cri-containerd-ba13b1c2b646586e12082f73c119cfc1a6f1d709b96d082cb8ecae3e0607662b.scope. Feb 9 18:24:51.911703 systemd[1]: Started cri-containerd-a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436.scope. Feb 9 18:24:51.914148 env[1146]: time="2024-02-09T18:24:51.913810619Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-55ffc46b4c-l7vkh,Uid:cc948248-a0bc-42b4-99c9-e8bc41e555b5,Namespace:calico-system,Attempt:1,} returns sandbox id \"8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb\"" Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.924000 audit: BPF prog-id=160 op=LOAD Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3733 pid=3862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313362316332623634363538366531323038326637336331313963 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3733 pid=3862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313362316332623634363538366531323038326637336331313963 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit: BPF prog-id=161 op=LOAD Feb 9 18:24:51.928000 audit[3862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3733 pid=3862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313362316332623634363538366531323038326637336331313963 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit: BPF prog-id=162 op=LOAD Feb 9 18:24:51.928000 audit[3862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3733 pid=3862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313362316332623634363538366531323038326637336331313963 Feb 9 18:24:51.928000 audit: BPF prog-id=162 op=UNLOAD Feb 9 18:24:51.928000 audit: BPF prog-id=161 op=UNLOAD Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { perfmon } for pid=3862 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit[3862]: AVC avc: denied { bpf } for pid=3862 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.928000 audit: BPF prog-id=163 op=LOAD Feb 9 18:24:51.928000 audit[3862]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3733 pid=3862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.928000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261313362316332623634363538366531323038326637336331313963 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.938000 audit: BPF prog-id=164 op=LOAD Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019db38 a2=10 a3=0 items=0 ppid=3838 pid=3855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613262376430643466343739653964373137373264653032333063 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400019d5a0 a2=3c a3=0 items=0 ppid=3838 pid=3855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613262376430643466343739653964373137373264653032333063 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.939000 audit: BPF prog-id=165 op=LOAD Feb 9 18:24:51.939000 audit[3855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019d8e0 a2=78 a3=0 items=0 ppid=3838 pid=3855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613262376430643466343739653964373137373264653032333063 Feb 9 18:24:51.940000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.940000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.940000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.940000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.940000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.940000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.940000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.940000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.940000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.940000 audit: BPF prog-id=166 op=LOAD Feb 9 18:24:51.940000 audit[3855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400019d670 a2=78 a3=0 items=0 ppid=3838 pid=3855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613262376430643466343739653964373137373264653032333063 Feb 9 18:24:51.941000 audit: BPF prog-id=166 op=UNLOAD Feb 9 18:24:51.941000 audit: BPF prog-id=165 op=UNLOAD Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { perfmon } for pid=3855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit[3855]: AVC avc: denied { bpf } for pid=3855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:51.941000 audit: BPF prog-id=167 op=LOAD Feb 9 18:24:51.941000 audit[3855]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019db40 a2=78 a3=0 items=0 ppid=3838 pid=3855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:51.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139613262376430643466343739653964373137373264653032333063 Feb 9 18:24:51.945565 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:24:51.961929 env[1146]: time="2024-02-09T18:24:51.961884221Z" level=info msg="StartContainer for \"ba13b1c2b646586e12082f73c119cfc1a6f1d709b96d082cb8ecae3e0607662b\" returns successfully" Feb 9 18:24:51.973726 env[1146]: time="2024-02-09T18:24:51.973685060Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5d78c9869d-8dmdt,Uid:e1869ddb-e84a-49ae-bfb8-551aab74e651,Namespace:kube-system,Attempt:1,} returns sandbox id \"a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436\"" Feb 9 18:24:51.974853 kubelet[2015]: E0209 18:24:51.974827 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:51.978577 env[1146]: time="2024-02-09T18:24:51.978543237Z" level=info msg="CreateContainer within sandbox \"a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 18:24:51.988305 env[1146]: time="2024-02-09T18:24:51.988264029Z" level=info msg="CreateContainer within sandbox \"a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"6d5e52048791f248b872b42bdf0539f199b785c986a2cde7c35822f7ec5ab528\"" Feb 9 18:24:51.988873 env[1146]: time="2024-02-09T18:24:51.988843911Z" level=info msg="StartContainer for \"6d5e52048791f248b872b42bdf0539f199b785c986a2cde7c35822f7ec5ab528\"" Feb 9 18:24:52.028004 systemd[1]: Started cri-containerd-6d5e52048791f248b872b42bdf0539f199b785c986a2cde7c35822f7ec5ab528.scope. Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit: BPF prog-id=168 op=LOAD Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bfb38 a2=10 a3=0 items=0 ppid=3838 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664356535323034383739316632343862383732623432626466303533 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=3838 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664356535323034383739316632343862383732623432626466303533 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit: BPF prog-id=169 op=LOAD Feb 9 18:24:52.060000 audit[3920]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=3838 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664356535323034383739316632343862383732623432626466303533 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.060000 audit: BPF prog-id=170 op=LOAD Feb 9 18:24:52.060000 audit[3920]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=3838 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.060000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664356535323034383739316632343862383732623432626466303533 Feb 9 18:24:52.060000 audit: BPF prog-id=170 op=UNLOAD Feb 9 18:24:52.060000 audit: BPF prog-id=169 op=UNLOAD Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { perfmon } for pid=3920 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit[3920]: AVC avc: denied { bpf } for pid=3920 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.061000 audit: BPF prog-id=171 op=LOAD Feb 9 18:24:52.061000 audit[3920]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=3838 pid=3920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664356535323034383739316632343862383732623432626466303533 Feb 9 18:24:52.094030 env[1146]: time="2024-02-09T18:24:52.093982537Z" level=info msg="StartContainer for \"6d5e52048791f248b872b42bdf0539f199b785c986a2cde7c35822f7ec5ab528\" returns successfully" Feb 9 18:24:52.094994 env[1146]: time="2024-02-09T18:24:52.094955380Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:52.096271 env[1146]: time="2024-02-09T18:24:52.096222104Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:52.097456 env[1146]: time="2024-02-09T18:24:52.097419988Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:52.098807 env[1146]: time="2024-02-09T18:24:52.098779353Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:52.099452 env[1146]: time="2024-02-09T18:24:52.099418995Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8\"" Feb 9 18:24:52.100666 env[1146]: time="2024-02-09T18:24:52.100634159Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 9 18:24:52.102940 env[1146]: time="2024-02-09T18:24:52.102752526Z" level=info msg="CreateContainer within sandbox \"6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 9 18:24:52.125570 env[1146]: time="2024-02-09T18:24:52.121043786Z" level=info msg="CreateContainer within sandbox \"6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"65a896f77d3a30ffd0c5cee848fbdd75b7c9caafa3dae103e91f0fea2753db75\"" Feb 9 18:24:52.125570 env[1146]: time="2024-02-09T18:24:52.122392710Z" level=info msg="StartContainer for \"65a896f77d3a30ffd0c5cee848fbdd75b7c9caafa3dae103e91f0fea2753db75\"" Feb 9 18:24:52.140817 systemd[1]: Started cri-containerd-65a896f77d3a30ffd0c5cee848fbdd75b7c9caafa3dae103e91f0fea2753db75.scope. Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3477 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635613839366637376433613330666664306335636565383438666264 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit: BPF prog-id=172 op=LOAD Feb 9 18:24:52.162000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3477 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635613839366637376433613330666664306335636565383438666264 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit: BPF prog-id=173 op=LOAD Feb 9 18:24:52.162000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3477 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635613839366637376433613330666664306335636565383438666264 Feb 9 18:24:52.162000 audit: BPF prog-id=173 op=UNLOAD Feb 9 18:24:52.162000 audit: BPF prog-id=172 op=UNLOAD Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:52.162000 audit: BPF prog-id=174 op=LOAD Feb 9 18:24:52.162000 audit[3959]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3477 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.162000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635613839366637376433613330666664306335636565383438666264 Feb 9 18:24:52.179560 env[1146]: time="2024-02-09T18:24:52.179512017Z" level=info msg="StartContainer for \"65a896f77d3a30ffd0c5cee848fbdd75b7c9caafa3dae103e91f0fea2753db75\" returns successfully" Feb 9 18:24:52.469649 kubelet[2015]: E0209 18:24:52.462720 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:52.472611 kubelet[2015]: E0209 18:24:52.472581 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:52.479981 kubelet[2015]: I0209 18:24:52.479421 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-8dmdt" podStartSLOduration=28.479387799 podCreationTimestamp="2024-02-09 18:24:24 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:24:52.478563357 +0000 UTC m=+41.247708721" watchObservedRunningTime="2024-02-09 18:24:52.479387799 +0000 UTC m=+41.248533163" Feb 9 18:24:52.488722 kubelet[2015]: I0209 18:24:52.488688 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5d78c9869d-qjkx4" podStartSLOduration=28.48865483 podCreationTimestamp="2024-02-09 18:24:24 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:24:52.487945467 +0000 UTC m=+41.257090831" watchObservedRunningTime="2024-02-09 18:24:52.48865483 +0000 UTC m=+41.257800154" Feb 9 18:24:52.509000 audit[3991]: NETFILTER_CFG table=filter:105 family=2 entries=14 op=nft_register_rule pid=3991 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:52.509000 audit[3991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe69849c0 a2=0 a3=ffff999276c0 items=0 ppid=2202 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.509000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:52.509000 audit[3991]: NETFILTER_CFG table=nat:106 family=2 entries=14 op=nft_register_rule pid=3991 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:52.509000 audit[3991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3300 a0=3 a1=ffffe69849c0 a2=0 a3=ffff999276c0 items=0 ppid=2202 pid=3991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.509000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:52.519000 audit[3993]: NETFILTER_CFG table=filter:107 family=2 entries=11 op=nft_register_rule pid=3993 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:52.519000 audit[3993]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffe7b6d6f0 a2=0 a3=ffff87e186c0 items=0 ppid=2202 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.519000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:52.524000 audit[3993]: NETFILTER_CFG table=nat:108 family=2 entries=47 op=nft_register_chain pid=3993 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:24:52.524000 audit[3993]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=19452 a0=3 a1=ffffe7b6d6f0 a2=0 a3=ffff87e186c0 items=0 ppid=2202 pid=3993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.524000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:24:52.592245 systemd[1]: Started sshd@11-10.0.0.32:22-10.0.0.1:40228.service. Feb 9 18:24:52.590000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.32:22-10.0.0.1:40228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:52.596174 sshd[3688]: pam_unix(sshd:session): session closed for user core Feb 9 18:24:52.597000 audit[3688]: USER_END pid=3688 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:52.598000 audit[3688]: CRED_DISP pid=3688 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:52.601199 systemd[1]: sshd@10-10.0.0.32:22-10.0.0.1:40224.service: Deactivated successfully. Feb 9 18:24:52.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.32:22-10.0.0.1:40224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:52.601938 systemd[1]: session-11.scope: Deactivated successfully. Feb 9 18:24:52.602688 systemd-logind[1130]: Session 11 logged out. Waiting for processes to exit. Feb 9 18:24:52.603554 systemd-logind[1130]: Removed session 11. Feb 9 18:24:52.639000 audit[3997]: USER_ACCT pid=3997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:52.641026 sshd[3997]: Accepted publickey for core from 10.0.0.1 port 40228 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:24:52.640000 audit[3997]: CRED_ACQ pid=3997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:52.640000 audit[3997]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6c574c0 a2=3 a3=1 items=0 ppid=1 pid=3997 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:52.640000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:24:52.642257 sshd[3997]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:24:52.645646 systemd-logind[1130]: New session 12 of user core. Feb 9 18:24:52.646472 systemd[1]: Started session-12.scope. Feb 9 18:24:52.648000 audit[3997]: USER_START pid=3997 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:52.649000 audit[4000]: CRED_ACQ pid=4000 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:52.764239 sshd[3997]: pam_unix(sshd:session): session closed for user core Feb 9 18:24:52.763000 audit[3997]: USER_END pid=3997 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:52.763000 audit[3997]: CRED_DISP pid=3997 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:52.766402 systemd[1]: session-12.scope: Deactivated successfully. Feb 9 18:24:52.767013 systemd-logind[1130]: Session 12 logged out. Waiting for processes to exit. Feb 9 18:24:52.767130 systemd[1]: sshd@11-10.0.0.32:22-10.0.0.1:40228.service: Deactivated successfully. Feb 9 18:24:52.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.32:22-10.0.0.1:40228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:52.768086 systemd-logind[1130]: Removed session 12. Feb 9 18:24:52.924685 systemd-networkd[1057]: cali9f5e19df114: Gained IPv6LL Feb 9 18:24:52.924953 systemd-networkd[1057]: cali7ae9a4304ac: Gained IPv6LL Feb 9 18:24:52.988667 systemd-networkd[1057]: caliac048c2d3cc: Gained IPv6LL Feb 9 18:24:53.476811 kubelet[2015]: E0209 18:24:53.476779 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:53.477164 kubelet[2015]: E0209 18:24:53.476901 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:54.214077 env[1146]: time="2024-02-09T18:24:54.214009875Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:54.215353 env[1146]: time="2024-02-09T18:24:54.215308159Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:54.216600 env[1146]: time="2024-02-09T18:24:54.216571123Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:54.217926 env[1146]: time="2024-02-09T18:24:54.217894087Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:54.218311 env[1146]: time="2024-02-09T18:24:54.218284568Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8\"" Feb 9 18:24:54.219323 env[1146]: time="2024-02-09T18:24:54.219267851Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 9 18:24:54.229939 env[1146]: time="2024-02-09T18:24:54.229903564Z" level=info msg="CreateContainer within sandbox \"8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 9 18:24:54.244730 env[1146]: time="2024-02-09T18:24:54.244679330Z" level=info msg="CreateContainer within sandbox \"8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"dd10540b64e023c166c0bc65de4f1578e2a5ff2195ff264102e25483c31f7102\"" Feb 9 18:24:54.245299 env[1146]: time="2024-02-09T18:24:54.245267452Z" level=info msg="StartContainer for \"dd10540b64e023c166c0bc65de4f1578e2a5ff2195ff264102e25483c31f7102\"" Feb 9 18:24:54.265349 systemd[1]: Started cri-containerd-dd10540b64e023c166c0bc65de4f1578e2a5ff2195ff264102e25483c31f7102.scope. Feb 9 18:24:54.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit: BPF prog-id=175 op=LOAD Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3784 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:54.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313035343062363465303233633136366330626336356465346631 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3784 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:54.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313035343062363465303233633136366330626336356465346631 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit: BPF prog-id=176 op=LOAD Feb 9 18:24:54.307000 audit[4024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3784 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:54.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313035343062363465303233633136366330626336356465346631 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit: BPF prog-id=177 op=LOAD Feb 9 18:24:54.307000 audit[4024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3784 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:54.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313035343062363465303233633136366330626336356465346631 Feb 9 18:24:54.307000 audit: BPF prog-id=177 op=UNLOAD Feb 9 18:24:54.307000 audit: BPF prog-id=176 op=UNLOAD Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { perfmon } for pid=4024 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit[4024]: AVC avc: denied { bpf } for pid=4024 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:54.307000 audit: BPF prog-id=178 op=LOAD Feb 9 18:24:54.307000 audit[4024]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3784 pid=4024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:54.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464313035343062363465303233633136366330626336356465346631 Feb 9 18:24:54.330093 env[1146]: time="2024-02-09T18:24:54.330046034Z" level=info msg="StartContainer for \"dd10540b64e023c166c0bc65de4f1578e2a5ff2195ff264102e25483c31f7102\" returns successfully" Feb 9 18:24:54.481428 kubelet[2015]: E0209 18:24:54.481143 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:54.482095 kubelet[2015]: E0209 18:24:54.482022 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:24:54.585437 kubelet[2015]: I0209 18:24:54.585400 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-55ffc46b4c-l7vkh" podStartSLOduration=23.284171288 podCreationTimestamp="2024-02-09 18:24:29 +0000 UTC" firstStartedPulling="2024-02-09 18:24:51.917385471 +0000 UTC m=+40.686530835" lastFinishedPulling="2024-02-09 18:24:54.218576609 +0000 UTC m=+42.987721973" observedRunningTime="2024-02-09 18:24:54.4930501 +0000 UTC m=+43.262195464" watchObservedRunningTime="2024-02-09 18:24:54.585362426 +0000 UTC m=+43.354507750" Feb 9 18:24:55.504863 env[1146]: time="2024-02-09T18:24:55.504822555Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:55.509052 env[1146]: time="2024-02-09T18:24:55.509013727Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:55.510233 env[1146]: time="2024-02-09T18:24:55.510190251Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:55.511522 env[1146]: time="2024-02-09T18:24:55.511494055Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:24:55.511909 env[1146]: time="2024-02-09T18:24:55.511879256Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43\"" Feb 9 18:24:55.515701 env[1146]: time="2024-02-09T18:24:55.515639347Z" level=info msg="CreateContainer within sandbox \"6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 9 18:24:55.527523 env[1146]: time="2024-02-09T18:24:55.527474463Z" level=info msg="CreateContainer within sandbox \"6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"61237ad3237c0aa5831b5d8b1dc045de15dd988c8c4d5132c10b3b1569e56fd4\"" Feb 9 18:24:55.528772 env[1146]: time="2024-02-09T18:24:55.528745627Z" level=info msg="StartContainer for \"61237ad3237c0aa5831b5d8b1dc045de15dd988c8c4d5132c10b3b1569e56fd4\"" Feb 9 18:24:55.547940 systemd[1]: Started cri-containerd-61237ad3237c0aa5831b5d8b1dc045de15dd988c8c4d5132c10b3b1569e56fd4.scope. Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3477 pid=4088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:55.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631323337616433323337633061613538333162356438623164633034 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.582000 audit: BPF prog-id=179 op=LOAD Feb 9 18:24:55.582000 audit[4088]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3477 pid=4088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:55.582000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631323337616433323337633061613538333162356438623164633034 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit: BPF prog-id=180 op=LOAD Feb 9 18:24:55.583000 audit[4088]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3477 pid=4088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:55.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631323337616433323337633061613538333162356438623164633034 Feb 9 18:24:55.583000 audit: BPF prog-id=180 op=UNLOAD Feb 9 18:24:55.583000 audit: BPF prog-id=179 op=UNLOAD Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { perfmon } for pid=4088 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit[4088]: AVC avc: denied { bpf } for pid=4088 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:24:55.583000 audit: BPF prog-id=181 op=LOAD Feb 9 18:24:55.583000 audit[4088]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3477 pid=4088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:55.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3631323337616433323337633061613538333162356438623164633034 Feb 9 18:24:55.601995 env[1146]: time="2024-02-09T18:24:55.601955448Z" level=info msg="StartContainer for \"61237ad3237c0aa5831b5d8b1dc045de15dd988c8c4d5132c10b3b1569e56fd4\" returns successfully" Feb 9 18:24:56.223701 systemd[1]: run-containerd-runc-k8s.io-61237ad3237c0aa5831b5d8b1dc045de15dd988c8c4d5132c10b3b1569e56fd4-runc.lPskoy.mount: Deactivated successfully. Feb 9 18:24:56.404583 kubelet[2015]: I0209 18:24:56.404553 2015 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 9 18:24:56.404583 kubelet[2015]: I0209 18:24:56.404584 2015 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 9 18:24:56.498191 kubelet[2015]: I0209 18:24:56.498081 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-grv8c" podStartSLOduration=22.775778188 podCreationTimestamp="2024-02-09 18:24:29 +0000 UTC" firstStartedPulling="2024-02-09 18:24:50.789940854 +0000 UTC m=+39.559086218" lastFinishedPulling="2024-02-09 18:24:55.512191337 +0000 UTC m=+44.281336661" observedRunningTime="2024-02-09 18:24:56.496870988 +0000 UTC m=+45.266016352" watchObservedRunningTime="2024-02-09 18:24:56.498028631 +0000 UTC m=+45.267173995" Feb 9 18:24:57.769108 systemd[1]: Started sshd@12-10.0.0.32:22-10.0.0.1:41770.service. Feb 9 18:24:57.770787 kernel: kauditd_printk_skb: 532 callbacks suppressed Feb 9 18:24:57.770826 kernel: audit: type=1130 audit(1707503097.767:1326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.32:22-10.0.0.1:41770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:57.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.32:22-10.0.0.1:41770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:57.813000 audit[4129]: USER_ACCT pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.814963 sshd[4129]: Accepted publickey for core from 10.0.0.1 port 41770 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:24:57.815923 sshd[4129]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:24:57.814000 audit[4129]: CRED_ACQ pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.819867 kernel: audit: type=1101 audit(1707503097.813:1327): pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.819939 kernel: audit: type=1103 audit(1707503097.814:1328): pid=4129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.819967 kernel: audit: type=1006 audit(1707503097.814:1329): pid=4129 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Feb 9 18:24:57.821227 kernel: audit: type=1300 audit(1707503097.814:1329): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3641470 a2=3 a3=1 items=0 ppid=1 pid=4129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:57.814000 audit[4129]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3641470 a2=3 a3=1 items=0 ppid=1 pid=4129 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:24:57.820151 systemd-logind[1130]: New session 13 of user core. Feb 9 18:24:57.820945 systemd[1]: Started session-13.scope. Feb 9 18:24:57.823110 kernel: audit: type=1327 audit(1707503097.814:1329): proctitle=737368643A20636F7265205B707269765D Feb 9 18:24:57.814000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:24:57.823000 audit[4129]: USER_START pid=4129 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.824000 audit[4131]: CRED_ACQ pid=4131 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.829490 kernel: audit: type=1105 audit(1707503097.823:1330): pid=4129 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.829550 kernel: audit: type=1103 audit(1707503097.824:1331): pid=4131 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.937149 sshd[4129]: pam_unix(sshd:session): session closed for user core Feb 9 18:24:57.936000 audit[4129]: USER_END pid=4129 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.939677 systemd[1]: sshd@12-10.0.0.32:22-10.0.0.1:41770.service: Deactivated successfully. Feb 9 18:24:57.940436 systemd[1]: session-13.scope: Deactivated successfully. Feb 9 18:24:57.936000 audit[4129]: CRED_DISP pid=4129 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.942811 kernel: audit: type=1106 audit(1707503097.936:1332): pid=4129 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.942857 kernel: audit: type=1104 audit(1707503097.936:1333): pid=4129 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:24:57.938000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.32:22-10.0.0.1:41770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:24:57.943246 systemd-logind[1130]: Session 13 logged out. Waiting for processes to exit. Feb 9 18:24:57.943876 systemd-logind[1130]: Removed session 13. Feb 9 18:25:02.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.32:22-10.0.0.1:40578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:02.941947 systemd[1]: Started sshd@13-10.0.0.32:22-10.0.0.1:40578.service. Feb 9 18:25:02.942669 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 18:25:02.942721 kernel: audit: type=1130 audit(1707503102.940:1335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.32:22-10.0.0.1:40578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:02.990000 audit[4146]: USER_ACCT pid=4146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:02.992278 sshd[4146]: Accepted publickey for core from 10.0.0.1 port 40578 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:02.995558 kernel: audit: type=1101 audit(1707503102.990:1336): pid=4146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:02.995000 audit[4146]: CRED_ACQ pid=4146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:02.997203 sshd[4146]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:03.000981 kernel: audit: type=1103 audit(1707503102.995:1337): pid=4146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:03.001038 kernel: audit: type=1006 audit(1707503102.995:1338): pid=4146 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Feb 9 18:25:03.001058 kernel: audit: type=1300 audit(1707503102.995:1338): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce9bb9d0 a2=3 a3=1 items=0 ppid=1 pid=4146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:02.995000 audit[4146]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce9bb9d0 a2=3 a3=1 items=0 ppid=1 pid=4146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:03.000702 systemd-logind[1130]: New session 14 of user core. Feb 9 18:25:03.001061 systemd[1]: Started session-14.scope. Feb 9 18:25:02.995000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:03.003557 kernel: audit: type=1327 audit(1707503102.995:1338): proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:03.003000 audit[4146]: USER_START pid=4146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:03.005000 audit[4148]: CRED_ACQ pid=4148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:03.010108 kernel: audit: type=1105 audit(1707503103.003:1339): pid=4146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:03.010144 kernel: audit: type=1103 audit(1707503103.005:1340): pid=4148 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:03.124716 sshd[4146]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:03.124000 audit[4146]: USER_END pid=4146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:03.126995 systemd[1]: session-14.scope: Deactivated successfully. Feb 9 18:25:03.127649 systemd-logind[1130]: Session 14 logged out. Waiting for processes to exit. Feb 9 18:25:03.127760 systemd[1]: sshd@13-10.0.0.32:22-10.0.0.1:40578.service: Deactivated successfully. Feb 9 18:25:03.124000 audit[4146]: CRED_DISP pid=4146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:03.128850 systemd-logind[1130]: Removed session 14. Feb 9 18:25:03.130572 kernel: audit: type=1106 audit(1707503103.124:1341): pid=4146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:03.130628 kernel: audit: type=1104 audit(1707503103.124:1342): pid=4146 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:03.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.32:22-10.0.0.1:40578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:07.855000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6225 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:07.855000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000cbab10 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:25:07.855000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:25:07.855000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:07.855000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400119ae80 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:25:07.855000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:25:08.129496 systemd[1]: Started sshd@14-10.0.0.32:22-10.0.0.1:40594.service. Feb 9 18:25:08.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.32:22-10.0.0.1:40594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:08.132517 kernel: kauditd_printk_skb: 7 callbacks suppressed Feb 9 18:25:08.132585 kernel: audit: type=1130 audit(1707503108.128:1346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.32:22-10.0.0.1:40594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:08.170000 audit[4167]: USER_ACCT pid=4167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:08.171643 sshd[4167]: Accepted publickey for core from 10.0.0.1 port 40594 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:08.173212 sshd[4167]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:08.171000 audit[4167]: CRED_ACQ pid=4167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:08.176102 kernel: audit: type=1101 audit(1707503108.170:1347): pid=4167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:08.176173 kernel: audit: type=1103 audit(1707503108.171:1348): pid=4167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:08.176194 kernel: audit: type=1006 audit(1707503108.171:1349): pid=4167 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Feb 9 18:25:08.171000 audit[4167]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff40a63c0 a2=3 a3=1 items=0 ppid=1 pid=4167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:08.179580 systemd-logind[1130]: New session 15 of user core. Feb 9 18:25:08.179916 kernel: audit: type=1300 audit(1707503108.171:1349): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff40a63c0 a2=3 a3=1 items=0 ppid=1 pid=4167 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:08.179956 kernel: audit: type=1327 audit(1707503108.171:1349): proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:08.171000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:08.181360 systemd[1]: Started session-15.scope. Feb 9 18:25:08.182000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6225 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:08.182000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40138e6150 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:25:08.191149 kernel: audit: type=1400 audit(1707503108.182:1350): avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6225 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:08.191202 kernel: audit: type=1300 audit(1707503108.182:1350): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40138e6150 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:25:08.182000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:25:08.185000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6221 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:08.196434 kernel: audit: type=1327 audit(1707503108.182:1350): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:25:08.196485 kernel: audit: type=1400 audit(1707503108.185:1351): avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=6221 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:08.185000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40092cedb0 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:25:08.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:25:08.185000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:08.185000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=400a97aa00 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:25:08.185000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:25:08.190000 audit[4167]: USER_START pid=4167 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:08.191000 audit[4169]: CRED_ACQ pid=4169 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:08.197000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=6227 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:08.197000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=40092cf050 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:25:08.197000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:25:08.253000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=6225 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:08.253000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4012ea9bc0 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:25:08.253000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:25:08.253000 audit[1907]: AVC avc: denied { watch } for pid=1907 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:08.253000 audit[1907]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=400a773760 a2=fc6 a3=0 items=0 ppid=1737 pid=1907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c207,c764 key=(null) Feb 9 18:25:08.253000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3332002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:25:08.319753 sshd[4167]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:08.319000 audit[4167]: USER_END pid=4167 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:08.319000 audit[4167]: CRED_DISP pid=4167 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:08.323806 systemd[1]: sshd@14-10.0.0.32:22-10.0.0.1:40594.service: Deactivated successfully. Feb 9 18:25:08.322000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.32:22-10.0.0.1:40594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:08.324613 systemd[1]: session-15.scope: Deactivated successfully. Feb 9 18:25:08.325372 systemd-logind[1130]: Session 15 logged out. Waiting for processes to exit. Feb 9 18:25:08.326039 systemd-logind[1130]: Removed session 15. Feb 9 18:25:11.299942 env[1146]: time="2024-02-09T18:25:11.299860921Z" level=info msg="StopPodSandbox for \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\"" Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.355 [WARNING][4195] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--qjkx4-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"2488cca6-ad38-44b3-991d-ed98c4e4ff4a", ResourceVersion:"851", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6", Pod:"coredns-5d78c9869d-qjkx4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7ae9a4304ac", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.355 [INFO][4195] k8s.go 578: Cleaning up netns ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.356 [INFO][4195] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" iface="eth0" netns="" Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.356 [INFO][4195] k8s.go 585: Releasing IP address(es) ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.356 [INFO][4195] utils.go 188: Calico CNI releasing IP address ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.380 [INFO][4203] ipam_plugin.go 415: Releasing address using handleID ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" HandleID="k8s-pod-network.3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.380 [INFO][4203] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.380 [INFO][4203] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.391 [WARNING][4203] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" HandleID="k8s-pod-network.3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.391 [INFO][4203] ipam_plugin.go 443: Releasing address using workloadID ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" HandleID="k8s-pod-network.3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.393 [INFO][4203] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:25:11.397089 env[1146]: 2024-02-09 18:25:11.395 [INFO][4195] k8s.go 591: Teardown processing complete. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:25:11.399177 env[1146]: time="2024-02-09T18:25:11.397137034Z" level=info msg="TearDown network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\" successfully" Feb 9 18:25:11.399177 env[1146]: time="2024-02-09T18:25:11.397167274Z" level=info msg="StopPodSandbox for \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\" returns successfully" Feb 9 18:25:11.399177 env[1146]: time="2024-02-09T18:25:11.397587795Z" level=info msg="RemovePodSandbox for \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\"" Feb 9 18:25:11.399177 env[1146]: time="2024-02-09T18:25:11.397641115Z" level=info msg="Forcibly stopping sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\"" Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.439 [WARNING][4227] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--qjkx4-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"2488cca6-ad38-44b3-991d-ed98c4e4ff4a", ResourceVersion:"851", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5fa289b5ba9ba5e01043a055d0e0ab66d3b7654d2ed25ab61c7f8f52d5ef12f6", Pod:"coredns-5d78c9869d-qjkx4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7ae9a4304ac", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.439 [INFO][4227] k8s.go 578: Cleaning up netns ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.439 [INFO][4227] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" iface="eth0" netns="" Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.439 [INFO][4227] k8s.go 585: Releasing IP address(es) ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.439 [INFO][4227] utils.go 188: Calico CNI releasing IP address ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.457 [INFO][4235] ipam_plugin.go 415: Releasing address using handleID ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" HandleID="k8s-pod-network.3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.457 [INFO][4235] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.457 [INFO][4235] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.466 [WARNING][4235] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" HandleID="k8s-pod-network.3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.466 [INFO][4235] ipam_plugin.go 443: Releasing address using workloadID ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" HandleID="k8s-pod-network.3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Workload="localhost-k8s-coredns--5d78c9869d--qjkx4-eth0" Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.468 [INFO][4235] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:25:11.472435 env[1146]: 2024-02-09 18:25:11.470 [INFO][4227] k8s.go 591: Teardown processing complete. ContainerID="3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805" Feb 9 18:25:11.472863 env[1146]: time="2024-02-09T18:25:11.472454864Z" level=info msg="TearDown network for sandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\" successfully" Feb 9 18:25:11.475233 env[1146]: time="2024-02-09T18:25:11.475197869Z" level=info msg="RemovePodSandbox \"3625a9494c6b2970dbd973b7499936b5dd8767b41325ddd02b51a61108c7e805\" returns successfully" Feb 9 18:25:11.476109 env[1146]: time="2024-02-09T18:25:11.476079031Z" level=info msg="StopPodSandbox for \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\"" Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.527 [WARNING][4257] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0", GenerateName:"calico-kube-controllers-55ffc46b4c-", Namespace:"calico-system", SelfLink:"", UID:"cc948248-a0bc-42b4-99c9-e8bc41e555b5", ResourceVersion:"906", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55ffc46b4c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb", Pod:"calico-kube-controllers-55ffc46b4c-l7vkh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9f5e19df114", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.528 [INFO][4257] k8s.go 578: Cleaning up netns ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.528 [INFO][4257] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" iface="eth0" netns="" Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.528 [INFO][4257] k8s.go 585: Releasing IP address(es) ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.528 [INFO][4257] utils.go 188: Calico CNI releasing IP address ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.545 [INFO][4264] ipam_plugin.go 415: Releasing address using handleID ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" HandleID="k8s-pod-network.0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.545 [INFO][4264] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.545 [INFO][4264] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.559 [WARNING][4264] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" HandleID="k8s-pod-network.0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.559 [INFO][4264] ipam_plugin.go 443: Releasing address using workloadID ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" HandleID="k8s-pod-network.0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.560 [INFO][4264] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:25:11.566291 env[1146]: 2024-02-09 18:25:11.563 [INFO][4257] k8s.go 591: Teardown processing complete. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:25:11.566291 env[1146]: time="2024-02-09T18:25:11.566251210Z" level=info msg="TearDown network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\" successfully" Feb 9 18:25:11.567703 env[1146]: time="2024-02-09T18:25:11.567608173Z" level=info msg="StopPodSandbox for \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\" returns successfully" Feb 9 18:25:11.568350 env[1146]: time="2024-02-09T18:25:11.568321894Z" level=info msg="RemovePodSandbox for \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\"" Feb 9 18:25:11.568413 env[1146]: time="2024-02-09T18:25:11.568357854Z" level=info msg="Forcibly stopping sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\"" Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.600 [WARNING][4287] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0", GenerateName:"calico-kube-controllers-55ffc46b4c-", Namespace:"calico-system", SelfLink:"", UID:"cc948248-a0bc-42b4-99c9-e8bc41e555b5", ResourceVersion:"906", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"55ffc46b4c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8a47ece9b7ac625cb24cecb8cff3003b11c980db23828353f5223e90cc65c2cb", Pod:"calico-kube-controllers-55ffc46b4c-l7vkh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9f5e19df114", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.600 [INFO][4287] k8s.go 578: Cleaning up netns ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.600 [INFO][4287] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" iface="eth0" netns="" Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.600 [INFO][4287] k8s.go 585: Releasing IP address(es) ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.600 [INFO][4287] utils.go 188: Calico CNI releasing IP address ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.619 [INFO][4295] ipam_plugin.go 415: Releasing address using handleID ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" HandleID="k8s-pod-network.0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.619 [INFO][4295] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.619 [INFO][4295] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.629 [WARNING][4295] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" HandleID="k8s-pod-network.0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.629 [INFO][4295] ipam_plugin.go 443: Releasing address using workloadID ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" HandleID="k8s-pod-network.0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Workload="localhost-k8s-calico--kube--controllers--55ffc46b4c--l7vkh-eth0" Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.630 [INFO][4295] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:25:11.634738 env[1146]: 2024-02-09 18:25:11.632 [INFO][4287] k8s.go 591: Teardown processing complete. ContainerID="0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa" Feb 9 18:25:11.635176 env[1146]: time="2024-02-09T18:25:11.634767266Z" level=info msg="TearDown network for sandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\" successfully" Feb 9 18:25:11.640262 env[1146]: time="2024-02-09T18:25:11.640220597Z" level=info msg="RemovePodSandbox \"0ba378d99ed2a53b5bcb615b21bf6fb93028af16236599e3e31760ed0af266fa\" returns successfully" Feb 9 18:25:11.640701 env[1146]: time="2024-02-09T18:25:11.640671558Z" level=info msg="StopPodSandbox for \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\"" Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.674 [WARNING][4317] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--grv8c-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b639ee65-0665-4723-89db-1a6786b4dbb8", ResourceVersion:"921", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1", Pod:"csi-node-driver-grv8c", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliea51fea348b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.675 [INFO][4317] k8s.go 578: Cleaning up netns ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.675 [INFO][4317] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" iface="eth0" netns="" Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.675 [INFO][4317] k8s.go 585: Releasing IP address(es) ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.675 [INFO][4317] utils.go 188: Calico CNI releasing IP address ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.693 [INFO][4324] ipam_plugin.go 415: Releasing address using handleID ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" HandleID="k8s-pod-network.076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.693 [INFO][4324] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.693 [INFO][4324] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.702 [WARNING][4324] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" HandleID="k8s-pod-network.076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.702 [INFO][4324] ipam_plugin.go 443: Releasing address using workloadID ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" HandleID="k8s-pod-network.076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.703 [INFO][4324] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:25:11.707664 env[1146]: 2024-02-09 18:25:11.705 [INFO][4317] k8s.go 591: Teardown processing complete. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:25:11.708118 env[1146]: time="2024-02-09T18:25:11.707698451Z" level=info msg="TearDown network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\" successfully" Feb 9 18:25:11.708118 env[1146]: time="2024-02-09T18:25:11.707728371Z" level=info msg="StopPodSandbox for \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\" returns successfully" Feb 9 18:25:11.708352 env[1146]: time="2024-02-09T18:25:11.708321532Z" level=info msg="RemovePodSandbox for \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\"" Feb 9 18:25:11.708463 env[1146]: time="2024-02-09T18:25:11.708427293Z" level=info msg="Forcibly stopping sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\"" Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.754 [WARNING][4346] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--grv8c-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b639ee65-0665-4723-89db-1a6786b4dbb8", ResourceVersion:"921", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 29, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"86b88cf7c9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6554a52a657d04e4016bc0a802227a0d7022e732e88e0b52c02381f346d4efb1", Pod:"csi-node-driver-grv8c", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"caliea51fea348b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.755 [INFO][4346] k8s.go 578: Cleaning up netns ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.755 [INFO][4346] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" iface="eth0" netns="" Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.755 [INFO][4346] k8s.go 585: Releasing IP address(es) ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.755 [INFO][4346] utils.go 188: Calico CNI releasing IP address ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.777 [INFO][4353] ipam_plugin.go 415: Releasing address using handleID ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" HandleID="k8s-pod-network.076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.777 [INFO][4353] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.777 [INFO][4353] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.787 [WARNING][4353] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" HandleID="k8s-pod-network.076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.787 [INFO][4353] ipam_plugin.go 443: Releasing address using workloadID ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" HandleID="k8s-pod-network.076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Workload="localhost-k8s-csi--node--driver--grv8c-eth0" Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.789 [INFO][4353] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:25:11.795120 env[1146]: 2024-02-09 18:25:11.793 [INFO][4346] k8s.go 591: Teardown processing complete. ContainerID="076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483" Feb 9 18:25:11.795799 env[1146]: time="2024-02-09T18:25:11.795763186Z" level=info msg="TearDown network for sandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\" successfully" Feb 9 18:25:11.807483 env[1146]: time="2024-02-09T18:25:11.807442249Z" level=info msg="RemovePodSandbox \"076d3197bf4c56334bb7148f14a00fc569eb8749b71e23ea164d6a2247968483\" returns successfully" Feb 9 18:25:11.808085 env[1146]: time="2024-02-09T18:25:11.808045571Z" level=info msg="StopPodSandbox for \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\"" Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.839 [WARNING][4375] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--8dmdt-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"e1869ddb-e84a-49ae-bfb8-551aab74e651", ResourceVersion:"855", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436", Pod:"coredns-5d78c9869d-8dmdt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliac048c2d3cc", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.840 [INFO][4375] k8s.go 578: Cleaning up netns ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.840 [INFO][4375] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" iface="eth0" netns="" Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.840 [INFO][4375] k8s.go 585: Releasing IP address(es) ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.840 [INFO][4375] utils.go 188: Calico CNI releasing IP address ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.857 [INFO][4383] ipam_plugin.go 415: Releasing address using handleID ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" HandleID="k8s-pod-network.c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.857 [INFO][4383] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.857 [INFO][4383] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.867 [WARNING][4383] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" HandleID="k8s-pod-network.c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.867 [INFO][4383] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" HandleID="k8s-pod-network.c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.871 [INFO][4383] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:25:11.877513 env[1146]: 2024-02-09 18:25:11.874 [INFO][4375] k8s.go 591: Teardown processing complete. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:25:11.878394 env[1146]: time="2024-02-09T18:25:11.878304350Z" level=info msg="TearDown network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\" successfully" Feb 9 18:25:11.878728 env[1146]: time="2024-02-09T18:25:11.878698031Z" level=info msg="StopPodSandbox for \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\" returns successfully" Feb 9 18:25:11.880025 env[1146]: time="2024-02-09T18:25:11.879982554Z" level=info msg="RemovePodSandbox for \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\"" Feb 9 18:25:11.880112 env[1146]: time="2024-02-09T18:25:11.880019594Z" level=info msg="Forcibly stopping sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\"" Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.913 [WARNING][4409] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5d78c9869d--8dmdt-eth0", GenerateName:"coredns-5d78c9869d-", Namespace:"kube-system", SelfLink:"", UID:"e1869ddb-e84a-49ae-bfb8-551aab74e651", ResourceVersion:"855", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 24, 24, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5d78c9869d", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a9a2b7d0d4f479e9d71772de0230c2dd35f9e7ff838cea32ac44f478eb83e436", Pod:"coredns-5d78c9869d-8dmdt", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliac048c2d3cc", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.913 [INFO][4409] k8s.go 578: Cleaning up netns ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.913 [INFO][4409] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" iface="eth0" netns="" Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.913 [INFO][4409] k8s.go 585: Releasing IP address(es) ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.913 [INFO][4409] utils.go 188: Calico CNI releasing IP address ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.930 [INFO][4416] ipam_plugin.go 415: Releasing address using handleID ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" HandleID="k8s-pod-network.c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.930 [INFO][4416] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.930 [INFO][4416] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.941 [WARNING][4416] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" HandleID="k8s-pod-network.c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.941 [INFO][4416] ipam_plugin.go 443: Releasing address using workloadID ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" HandleID="k8s-pod-network.c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Workload="localhost-k8s-coredns--5d78c9869d--8dmdt-eth0" Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.942 [INFO][4416] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:25:11.946247 env[1146]: 2024-02-09 18:25:11.944 [INFO][4409] k8s.go 591: Teardown processing complete. ContainerID="c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c" Feb 9 18:25:11.946857 env[1146]: time="2024-02-09T18:25:11.946278005Z" level=info msg="TearDown network for sandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\" successfully" Feb 9 18:25:11.949043 env[1146]: time="2024-02-09T18:25:11.949015211Z" level=info msg="RemovePodSandbox \"c1916914a69ef9e06d08ceeb15b555d846bf96429d8e2d01403a24079389f64c\" returns successfully" Feb 9 18:25:13.323216 systemd[1]: Started sshd@15-10.0.0.32:22-10.0.0.1:41292.service. Feb 9 18:25:13.326254 kernel: kauditd_printk_skb: 19 callbacks suppressed Feb 9 18:25:13.326333 kernel: audit: type=1130 audit(1707503113.321:1361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.32:22-10.0.0.1:41292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:13.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.32:22-10.0.0.1:41292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:13.362000 audit[4424]: USER_ACCT pid=4424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.365574 sshd[4424]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:13.365997 sshd[4424]: Accepted publickey for core from 10.0.0.1 port 41292 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:13.363000 audit[4424]: CRED_ACQ pid=4424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.368703 kernel: audit: type=1101 audit(1707503113.362:1362): pid=4424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.368753 kernel: audit: type=1103 audit(1707503113.363:1363): pid=4424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.368785 kernel: audit: type=1006 audit(1707503113.363:1364): pid=4424 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 9 18:25:13.369945 systemd[1]: Started session-16.scope. Feb 9 18:25:13.370074 kernel: audit: type=1300 audit(1707503113.363:1364): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc52a2000 a2=3 a3=1 items=0 ppid=1 pid=4424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:13.363000 audit[4424]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc52a2000 a2=3 a3=1 items=0 ppid=1 pid=4424 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:13.370254 systemd-logind[1130]: New session 16 of user core. Feb 9 18:25:13.372245 kernel: audit: type=1327 audit(1707503113.363:1364): proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:13.363000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:13.372000 audit[4424]: USER_START pid=4424 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.373000 audit[4426]: CRED_ACQ pid=4426 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.378619 kernel: audit: type=1105 audit(1707503113.372:1365): pid=4424 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.378656 kernel: audit: type=1103 audit(1707503113.373:1366): pid=4426 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.481354 sshd[4424]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:13.480000 audit[4424]: USER_END pid=4424 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.480000 audit[4424]: CRED_DISP pid=4424 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.487165 kernel: audit: type=1106 audit(1707503113.480:1367): pid=4424 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.487211 kernel: audit: type=1104 audit(1707503113.480:1368): pid=4424 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.488271 systemd[1]: sshd@15-10.0.0.32:22-10.0.0.1:41292.service: Deactivated successfully. Feb 9 18:25:13.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.32:22-10.0.0.1:41292 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:13.488968 systemd[1]: session-16.scope: Deactivated successfully. Feb 9 18:25:13.489574 systemd-logind[1130]: Session 16 logged out. Waiting for processes to exit. Feb 9 18:25:13.490745 systemd[1]: Started sshd@16-10.0.0.32:22-10.0.0.1:41306.service. Feb 9 18:25:13.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.32:22-10.0.0.1:41306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:13.491480 systemd-logind[1130]: Removed session 16. Feb 9 18:25:13.531000 audit[4437]: USER_ACCT pid=4437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.532802 sshd[4437]: Accepted publickey for core from 10.0.0.1 port 41306 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:13.531000 audit[4437]: CRED_ACQ pid=4437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.532000 audit[4437]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff2ee5480 a2=3 a3=1 items=0 ppid=1 pid=4437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:13.532000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:13.534064 sshd[4437]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:13.537184 systemd-logind[1130]: New session 17 of user core. Feb 9 18:25:13.538039 systemd[1]: Started session-17.scope. Feb 9 18:25:13.539000 audit[4437]: USER_START pid=4437 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.540000 audit[4439]: CRED_ACQ pid=4439 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.747861 sshd[4437]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:13.748000 audit[4437]: USER_END pid=4437 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.748000 audit[4437]: CRED_DISP pid=4437 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.752772 systemd[1]: Started sshd@17-10.0.0.32:22-10.0.0.1:41318.service. Feb 9 18:25:13.753291 systemd[1]: sshd@16-10.0.0.32:22-10.0.0.1:41306.service: Deactivated successfully. Feb 9 18:25:13.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.32:22-10.0.0.1:41318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:13.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.32:22-10.0.0.1:41306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:13.754180 systemd-logind[1130]: Session 17 logged out. Waiting for processes to exit. Feb 9 18:25:13.754228 systemd[1]: session-17.scope: Deactivated successfully. Feb 9 18:25:13.758599 systemd-logind[1130]: Removed session 17. Feb 9 18:25:13.796000 audit[4447]: USER_ACCT pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.798014 sshd[4447]: Accepted publickey for core from 10.0.0.1 port 41318 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:13.797000 audit[4447]: CRED_ACQ pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.797000 audit[4447]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee72b080 a2=3 a3=1 items=0 ppid=1 pid=4447 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:13.797000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:13.799413 sshd[4447]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:13.802363 systemd-logind[1130]: New session 18 of user core. Feb 9 18:25:13.803209 systemd[1]: Started session-18.scope. Feb 9 18:25:13.804000 audit[4447]: USER_START pid=4447 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:13.805000 audit[4450]: CRED_ACQ pid=4450 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:14.582000 audit[4464]: NETFILTER_CFG table=filter:109 family=2 entries=20 op=nft_register_rule pid=4464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:14.582000 audit[4464]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11292 a0=3 a1=ffffdc100cb0 a2=0 a3=ffff94b746c0 items=0 ppid=2202 pid=4464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:14.582000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:14.583000 audit[4464]: NETFILTER_CFG table=nat:110 family=2 entries=20 op=nft_register_rule pid=4464 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:14.583000 audit[4464]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffdc100cb0 a2=0 a3=ffff94b746c0 items=0 ppid=2202 pid=4464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:14.583000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:14.595634 sshd[4447]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:14.597000 audit[4447]: USER_END pid=4447 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:14.597000 audit[4447]: CRED_DISP pid=4447 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:14.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.32:22-10.0.0.1:41332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:14.599125 systemd[1]: Started sshd@18-10.0.0.32:22-10.0.0.1:41332.service. Feb 9 18:25:14.600740 systemd[1]: sshd@17-10.0.0.32:22-10.0.0.1:41318.service: Deactivated successfully. Feb 9 18:25:14.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.32:22-10.0.0.1:41318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:14.601421 systemd[1]: session-18.scope: Deactivated successfully. Feb 9 18:25:14.602020 systemd-logind[1130]: Session 18 logged out. Waiting for processes to exit. Feb 9 18:25:14.602973 systemd-logind[1130]: Removed session 18. Feb 9 18:25:14.602000 audit[4468]: NETFILTER_CFG table=filter:111 family=2 entries=32 op=nft_register_rule pid=4468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:14.602000 audit[4468]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11292 a0=3 a1=ffffd430aed0 a2=0 a3=ffffa139c6c0 items=0 ppid=2202 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:14.602000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:14.602000 audit[4468]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=4468 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:14.602000 audit[4468]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffd430aed0 a2=0 a3=ffffa139c6c0 items=0 ppid=2202 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:14.602000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:14.643000 audit[4467]: USER_ACCT pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:14.644915 sshd[4467]: Accepted publickey for core from 10.0.0.1 port 41332 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:14.644000 audit[4467]: CRED_ACQ pid=4467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:14.644000 audit[4467]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd153310 a2=3 a3=1 items=0 ppid=1 pid=4467 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:14.644000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:14.646479 sshd[4467]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:14.649745 systemd-logind[1130]: New session 19 of user core. Feb 9 18:25:14.650641 systemd[1]: Started session-19.scope. Feb 9 18:25:14.653000 audit[4467]: USER_START pid=4467 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:14.654000 audit[4472]: CRED_ACQ pid=4472 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:14.825496 kubelet[2015]: E0209 18:25:14.825471 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:25:14.976717 systemd[1]: Started sshd@19-10.0.0.32:22-10.0.0.1:41338.service. Feb 9 18:25:14.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.32:22-10.0.0.1:41338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:14.977507 sshd[4467]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:14.977000 audit[4467]: USER_END pid=4467 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:14.977000 audit[4467]: CRED_DISP pid=4467 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:14.981085 systemd[1]: sshd@18-10.0.0.32:22-10.0.0.1:41332.service: Deactivated successfully. Feb 9 18:25:14.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.32:22-10.0.0.1:41332 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:14.981854 systemd[1]: session-19.scope: Deactivated successfully. Feb 9 18:25:14.984002 systemd-logind[1130]: Session 19 logged out. Waiting for processes to exit. Feb 9 18:25:14.985287 systemd-logind[1130]: Removed session 19. Feb 9 18:25:15.023000 audit[4501]: USER_ACCT pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:15.025664 sshd[4501]: Accepted publickey for core from 10.0.0.1 port 41338 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:15.025000 audit[4501]: CRED_ACQ pid=4501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:15.025000 audit[4501]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc10dc4a0 a2=3 a3=1 items=0 ppid=1 pid=4501 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:15.025000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:15.027326 sshd[4501]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:15.033907 systemd-logind[1130]: New session 20 of user core. Feb 9 18:25:15.036168 systemd[1]: Started session-20.scope. Feb 9 18:25:15.040000 audit[4501]: USER_START pid=4501 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:15.042000 audit[4504]: CRED_ACQ pid=4504 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:15.165353 sshd[4501]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:15.165000 audit[4501]: USER_END pid=4501 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:15.165000 audit[4501]: CRED_DISP pid=4501 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:15.168077 systemd-logind[1130]: Session 20 logged out. Waiting for processes to exit. Feb 9 18:25:15.168255 systemd[1]: session-20.scope: Deactivated successfully. Feb 9 18:25:15.169165 systemd-logind[1130]: Removed session 20. Feb 9 18:25:15.169396 systemd[1]: sshd@19-10.0.0.32:22-10.0.0.1:41338.service: Deactivated successfully. Feb 9 18:25:15.168000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.32:22-10.0.0.1:41338 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:19.088748 kubelet[2015]: I0209 18:25:19.088698 2015 topology_manager.go:212] "Topology Admit Handler" Feb 9 18:25:19.093388 systemd[1]: Created slice kubepods-besteffort-pod5618fe1a_d776_4700_be50_bfd1c6b7dfdf.slice. Feb 9 18:25:19.102000 audit[4535]: NETFILTER_CFG table=filter:113 family=2 entries=33 op=nft_register_rule pid=4535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:19.105775 kernel: kauditd_printk_skb: 57 callbacks suppressed Feb 9 18:25:19.105850 kernel: audit: type=1325 audit(1707503119.102:1410): table=filter:113 family=2 entries=33 op=nft_register_rule pid=4535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:19.105891 kernel: audit: type=1300 audit(1707503119.102:1410): arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=fffff99ee420 a2=0 a3=ffffaad846c0 items=0 ppid=2202 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.102000 audit[4535]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=fffff99ee420 a2=0 a3=ffffaad846c0 items=0 ppid=2202 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.102000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:19.109953 kernel: audit: type=1327 audit(1707503119.102:1410): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:19.102000 audit[4535]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:19.102000 audit[4535]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=fffff99ee420 a2=0 a3=ffffaad846c0 items=0 ppid=2202 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.115839 kernel: audit: type=1325 audit(1707503119.102:1411): table=nat:114 family=2 entries=20 op=nft_register_rule pid=4535 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:19.115894 kernel: audit: type=1300 audit(1707503119.102:1411): arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=fffff99ee420 a2=0 a3=ffffaad846c0 items=0 ppid=2202 pid=4535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.115921 kernel: audit: type=1327 audit(1707503119.102:1411): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:19.102000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:19.118000 audit[4537]: NETFILTER_CFG table=filter:115 family=2 entries=34 op=nft_register_rule pid=4537 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:19.118000 audit[4537]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=ffffcba55cf0 a2=0 a3=ffff806c76c0 items=0 ppid=2202 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.124801 kernel: audit: type=1325 audit(1707503119.118:1412): table=filter:115 family=2 entries=34 op=nft_register_rule pid=4537 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:19.124852 kernel: audit: type=1300 audit(1707503119.118:1412): arch=c00000b7 syscall=211 success=yes exit=11996 a0=3 a1=ffffcba55cf0 a2=0 a3=ffff806c76c0 items=0 ppid=2202 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.124879 kernel: audit: type=1327 audit(1707503119.118:1412): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:19.118000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:19.119000 audit[4537]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=4537 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:19.119000 audit[4537]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffcba55cf0 a2=0 a3=ffff806c76c0 items=0 ppid=2202 pid=4537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.119000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:19.138553 kernel: audit: type=1325 audit(1707503119.119:1413): table=nat:116 family=2 entries=20 op=nft_register_rule pid=4537 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:19.234519 kubelet[2015]: I0209 18:25:19.234465 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jh8wf\" (UniqueName: \"kubernetes.io/projected/5618fe1a-d776-4700-be50-bfd1c6b7dfdf-kube-api-access-jh8wf\") pod \"calico-apiserver-64df6fb9d6-28p4s\" (UID: \"5618fe1a-d776-4700-be50-bfd1c6b7dfdf\") " pod="calico-apiserver/calico-apiserver-64df6fb9d6-28p4s" Feb 9 18:25:19.234519 kubelet[2015]: I0209 18:25:19.234532 2015 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5618fe1a-d776-4700-be50-bfd1c6b7dfdf-calico-apiserver-certs\") pod \"calico-apiserver-64df6fb9d6-28p4s\" (UID: \"5618fe1a-d776-4700-be50-bfd1c6b7dfdf\") " pod="calico-apiserver/calico-apiserver-64df6fb9d6-28p4s" Feb 9 18:25:19.396204 env[1146]: time="2024-02-09T18:25:19.396082388Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64df6fb9d6-28p4s,Uid:5618fe1a-d776-4700-be50-bfd1c6b7dfdf,Namespace:calico-apiserver,Attempt:0,}" Feb 9 18:25:19.519763 systemd-networkd[1057]: cali3c6cd42a8c0: Link UP Feb 9 18:25:19.521869 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 18:25:19.521928 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3c6cd42a8c0: link becomes ready Feb 9 18:25:19.521369 systemd-networkd[1057]: cali3c6cd42a8c0: Gained carrier Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.439 [INFO][4540] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0 calico-apiserver-64df6fb9d6- calico-apiserver 5618fe1a-d776-4700-be50-bfd1c6b7dfdf 1083 0 2024-02-09 18:25:19 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:64df6fb9d6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-64df6fb9d6-28p4s eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali3c6cd42a8c0 [] []}} ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Namespace="calico-apiserver" Pod="calico-apiserver-64df6fb9d6-28p4s" WorkloadEndpoint="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.439 [INFO][4540] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Namespace="calico-apiserver" Pod="calico-apiserver-64df6fb9d6-28p4s" WorkloadEndpoint="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.462 [INFO][4555] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" HandleID="k8s-pod-network.b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Workload="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.476 [INFO][4555] ipam_plugin.go 268: Auto assigning IP ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" HandleID="k8s-pod-network.b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Workload="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40004df890), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-64df6fb9d6-28p4s", "timestamp":"2024-02-09 18:25:19.462216056 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.476 [INFO][4555] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.476 [INFO][4555] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.476 [INFO][4555] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.478 [INFO][4555] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" host="localhost" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.491 [INFO][4555] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.499 [INFO][4555] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.501 [INFO][4555] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.504 [INFO][4555] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.504 [INFO][4555] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" host="localhost" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.506 [INFO][4555] ipam.go 1682: Creating new handle: k8s-pod-network.b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6 Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.509 [INFO][4555] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" host="localhost" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.515 [INFO][4555] ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" host="localhost" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.515 [INFO][4555] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" host="localhost" Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.515 [INFO][4555] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:25:19.540471 env[1146]: 2024-02-09 18:25:19.515 [INFO][4555] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" HandleID="k8s-pod-network.b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Workload="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" Feb 9 18:25:19.541041 env[1146]: 2024-02-09 18:25:19.517 [INFO][4540] k8s.go 385: Populated endpoint ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Namespace="calico-apiserver" Pod="calico-apiserver-64df6fb9d6-28p4s" WorkloadEndpoint="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0", GenerateName:"calico-apiserver-64df6fb9d6-", Namespace:"calico-apiserver", SelfLink:"", UID:"5618fe1a-d776-4700-be50-bfd1c6b7dfdf", ResourceVersion:"1083", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 25, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64df6fb9d6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-64df6fb9d6-28p4s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3c6cd42a8c0", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:19.541041 env[1146]: 2024-02-09 18:25:19.517 [INFO][4540] k8s.go 386: Calico CNI using IPs: [192.168.88.133/32] ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Namespace="calico-apiserver" Pod="calico-apiserver-64df6fb9d6-28p4s" WorkloadEndpoint="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" Feb 9 18:25:19.541041 env[1146]: 2024-02-09 18:25:19.517 [INFO][4540] dataplane_linux.go 68: Setting the host side veth name to cali3c6cd42a8c0 ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Namespace="calico-apiserver" Pod="calico-apiserver-64df6fb9d6-28p4s" WorkloadEndpoint="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" Feb 9 18:25:19.541041 env[1146]: 2024-02-09 18:25:19.521 [INFO][4540] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Namespace="calico-apiserver" Pod="calico-apiserver-64df6fb9d6-28p4s" WorkloadEndpoint="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" Feb 9 18:25:19.541041 env[1146]: 2024-02-09 18:25:19.522 [INFO][4540] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Namespace="calico-apiserver" Pod="calico-apiserver-64df6fb9d6-28p4s" WorkloadEndpoint="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0", GenerateName:"calico-apiserver-64df6fb9d6-", Namespace:"calico-apiserver", SelfLink:"", UID:"5618fe1a-d776-4700-be50-bfd1c6b7dfdf", ResourceVersion:"1083", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 25, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"64df6fb9d6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6", Pod:"calico-apiserver-64df6fb9d6-28p4s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali3c6cd42a8c0", MAC:"e6:10:5c:7b:25:03", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:25:19.541041 env[1146]: 2024-02-09 18:25:19.534 [INFO][4540] k8s.go 491: Wrote updated endpoint to datastore ContainerID="b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6" Namespace="calico-apiserver" Pod="calico-apiserver-64df6fb9d6-28p4s" WorkloadEndpoint="localhost-k8s-calico--apiserver--64df6fb9d6--28p4s-eth0" Feb 9 18:25:19.560270 env[1146]: time="2024-02-09T18:25:19.560201177Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:25:19.560816 env[1146]: time="2024-02-09T18:25:19.560279017Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:25:19.560816 env[1146]: time="2024-02-09T18:25:19.560308337Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:25:19.563558 env[1146]: time="2024-02-09T18:25:19.561183338Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6 pid=4589 runtime=io.containerd.runc.v2 Feb 9 18:25:19.568000 audit[4597]: NETFILTER_CFG table=filter:117 family=2 entries=59 op=nft_register_chain pid=4597 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:25:19.568000 audit[4597]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=29292 a0=3 a1=ffffc09aec60 a2=0 a3=ffff9cbfbfa8 items=0 ppid=3179 pid=4597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.568000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:25:19.584907 systemd[1]: Started cri-containerd-b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6.scope. Feb 9 18:25:19.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.600000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.600000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.601000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.601000 audit: BPF prog-id=182 op=LOAD Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4589 pid=4600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613035373536383762336435366430663537633335363439616164 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4589 pid=4600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613035373536383762336435366430663537633335363439616164 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit: BPF prog-id=183 op=LOAD Feb 9 18:25:19.602000 audit[4600]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4589 pid=4600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613035373536383762336435366430663537633335363439616164 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit: BPF prog-id=184 op=LOAD Feb 9 18:25:19.602000 audit[4600]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4589 pid=4600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613035373536383762336435366430663537633335363439616164 Feb 9 18:25:19.602000 audit: BPF prog-id=184 op=UNLOAD Feb 9 18:25:19.602000 audit: BPF prog-id=183 op=UNLOAD Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { perfmon } for pid=4600 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit[4600]: AVC avc: denied { bpf } for pid=4600 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:19.602000 audit: BPF prog-id=185 op=LOAD Feb 9 18:25:19.602000 audit[4600]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4589 pid=4600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:19.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234613035373536383762336435366430663537633335363439616164 Feb 9 18:25:19.605546 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:25:19.621761 env[1146]: time="2024-02-09T18:25:19.621231477Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-64df6fb9d6-28p4s,Uid:5618fe1a-d776-4700-be50-bfd1c6b7dfdf,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6\"" Feb 9 18:25:19.625421 env[1146]: time="2024-02-09T18:25:19.624487842Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 9 18:25:20.144000 audit[4624]: NETFILTER_CFG table=filter:118 family=2 entries=22 op=nft_register_rule pid=4624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:20.144000 audit[4624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffdbdf0e90 a2=0 a3=ffffb4b7d6c0 items=0 ppid=2202 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:20.144000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:20.147000 audit[4624]: NETFILTER_CFG table=nat:119 family=2 entries=104 op=nft_register_chain pid=4624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:20.147000 audit[4624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=47436 a0=3 a1=ffffdbdf0e90 a2=0 a3=ffffb4b7d6c0 items=0 ppid=2202 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:20.147000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:20.170111 systemd[1]: Started sshd@20-10.0.0.32:22-10.0.0.1:41350.service. Feb 9 18:25:20.168000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.32:22-10.0.0.1:41350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:20.210000 audit[4627]: USER_ACCT pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:20.212619 sshd[4627]: Accepted publickey for core from 10.0.0.1 port 41350 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:20.211000 audit[4627]: CRED_ACQ pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:20.211000 audit[4627]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc9e45e0 a2=3 a3=1 items=0 ppid=1 pid=4627 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:20.211000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:20.213777 sshd[4627]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:20.217225 systemd-logind[1130]: New session 21 of user core. Feb 9 18:25:20.218117 systemd[1]: Started session-21.scope. Feb 9 18:25:20.220000 audit[4627]: USER_START pid=4627 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:20.221000 audit[4629]: CRED_ACQ pid=4629 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:20.335212 sshd[4627]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:20.334000 audit[4627]: USER_END pid=4627 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:20.335000 audit[4627]: CRED_DISP pid=4627 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:20.338335 systemd[1]: sshd@20-10.0.0.32:22-10.0.0.1:41350.service: Deactivated successfully. Feb 9 18:25:20.339269 systemd[1]: session-21.scope: Deactivated successfully. Feb 9 18:25:20.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.32:22-10.0.0.1:41350 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:20.339919 systemd-logind[1130]: Session 21 logged out. Waiting for processes to exit. Feb 9 18:25:20.340550 systemd-logind[1130]: Removed session 21. Feb 9 18:25:20.347923 kubelet[2015]: E0209 18:25:20.347887 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:25:20.764692 systemd-networkd[1057]: cali3c6cd42a8c0: Gained IPv6LL Feb 9 18:25:21.915978 env[1146]: time="2024-02-09T18:25:21.915929289Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:25:21.917491 env[1146]: time="2024-02-09T18:25:21.917448651Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:25:21.919006 env[1146]: time="2024-02-09T18:25:21.918976574Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:25:21.921135 env[1146]: time="2024-02-09T18:25:21.921096057Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:5ff0bdc8d0b2e9d7819703b18867f60f9153ed01da81e2bbfa22002abec9dc26,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:25:21.921383 env[1146]: time="2024-02-09T18:25:21.921349777Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\" returns image reference \"sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9\"" Feb 9 18:25:21.925310 env[1146]: time="2024-02-09T18:25:21.925266183Z" level=info msg="CreateContainer within sandbox \"b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Feb 9 18:25:21.934308 env[1146]: time="2024-02-09T18:25:21.934269278Z" level=info msg="CreateContainer within sandbox \"b4a0575687b3d56d0f57c35649aad7df446503dc0534e09d05b310cdeb3bb8b6\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"636ed7207830f1046736b7cfa5aa62f8cc3f22c6f6f43388ca8ff54db8bbf942\"" Feb 9 18:25:21.935493 env[1146]: time="2024-02-09T18:25:21.935438639Z" level=info msg="StartContainer for \"636ed7207830f1046736b7cfa5aa62f8cc3f22c6f6f43388ca8ff54db8bbf942\"" Feb 9 18:25:21.960915 systemd[1]: run-containerd-runc-k8s.io-636ed7207830f1046736b7cfa5aa62f8cc3f22c6f6f43388ca8ff54db8bbf942-runc.cviOlb.mount: Deactivated successfully. Feb 9 18:25:21.963182 systemd[1]: Started cri-containerd-636ed7207830f1046736b7cfa5aa62f8cc3f22c6f6f43388ca8ff54db8bbf942.scope. Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.998000 audit: BPF prog-id=186 op=LOAD Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4589 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:21.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633366564373230373833306631303436373336623763666135616136 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4589 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:21.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633366564373230373833306631303436373336623763666135616136 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:21.999000 audit: BPF prog-id=187 op=LOAD Feb 9 18:25:21.999000 audit[4651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4589 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:21.999000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633366564373230373833306631303436373336623763666135616136 Feb 9 18:25:22.000000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.000000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.000000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.000000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.000000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.000000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.000000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.000000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.000000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.000000 audit: BPF prog-id=188 op=LOAD Feb 9 18:25:22.000000 audit[4651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4589 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:22.000000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633366564373230373833306631303436373336623763666135616136 Feb 9 18:25:22.001000 audit: BPF prog-id=188 op=UNLOAD Feb 9 18:25:22.001000 audit: BPF prog-id=187 op=UNLOAD Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { perfmon } for pid=4651 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit[4651]: AVC avc: denied { bpf } for pid=4651 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:25:22.001000 audit: BPF prog-id=189 op=LOAD Feb 9 18:25:22.001000 audit[4651]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4589 pid=4651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:22.001000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633366564373230373833306631303436373336623763666135616136 Feb 9 18:25:22.021639 env[1146]: time="2024-02-09T18:25:22.021595813Z" level=info msg="StartContainer for \"636ed7207830f1046736b7cfa5aa62f8cc3f22c6f6f43388ca8ff54db8bbf942\" returns successfully" Feb 9 18:25:22.327000 audit[4684]: NETFILTER_CFG table=filter:120 family=2 entries=10 op=nft_register_rule pid=4684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:22.327000 audit[4684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffc0eff310 a2=0 a3=ffffba4036c0 items=0 ppid=2202 pid=4684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:22.327000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:22.328000 audit[4684]: NETFILTER_CFG table=nat:121 family=2 entries=44 op=nft_register_rule pid=4684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:22.328000 audit[4684]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffc0eff310 a2=0 a3=ffffba4036c0 items=0 ppid=2202 pid=4684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:22.328000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:22.563655 kubelet[2015]: I0209 18:25:22.563621 2015 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-64df6fb9d6-28p4s" podStartSLOduration=1.264362902 podCreationTimestamp="2024-02-09 18:25:19 +0000 UTC" firstStartedPulling="2024-02-09 18:25:19.622508719 +0000 UTC m=+68.391654043" lastFinishedPulling="2024-02-09 18:25:21.921729738 +0000 UTC m=+70.690875102" observedRunningTime="2024-02-09 18:25:22.561796919 +0000 UTC m=+71.330942283" watchObservedRunningTime="2024-02-09 18:25:22.563583961 +0000 UTC m=+71.332729325" Feb 9 18:25:22.573000 audit[4686]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=4686 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:22.573000 audit[4686]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffec321dc0 a2=0 a3=ffffaf0996c0 items=0 ppid=2202 pid=4686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:22.573000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:22.575000 audit[4686]: NETFILTER_CFG table=nat:123 family=2 entries=44 op=nft_register_rule pid=4686 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:25:22.575000 audit[4686]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffec321dc0 a2=0 a3=ffffaf0996c0 items=0 ppid=2202 pid=4686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:22.575000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:25:22.731000 audit[4662]: AVC avc: denied { watch } for pid=4662 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_18_25_19.2176922549/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c566,c650 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c566,c650 tclass=file permissive=0 Feb 9 18:25:22.731000 audit[4662]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d13720 a2=fc6 a3=0 items=0 ppid=4589 pid=4662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c566,c650 key=(null) Feb 9 18:25:22.731000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 9 18:25:23.608000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:23.608000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001d30740 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:25:23.608000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:25:23.613000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:23.613000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001d307a0 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:25:23.613000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:25:23.614000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:23.614000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=40021c4ae0 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:25:23.614000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:25:23.616000 audit[1874]: AVC avc: denied { watch } for pid=1874 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=6210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:25:23.616000 audit[1874]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400276c200 a2=fc6 a3=0 items=0 ppid=1734 pid=1874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c204,c470 key=(null) Feb 9 18:25:23.616000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:25:25.338000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.32:22-10.0.0.1:59464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:25.339966 systemd[1]: Started sshd@21-10.0.0.32:22-10.0.0.1:59464.service. Feb 9 18:25:25.340699 kernel: kauditd_printk_skb: 163 callbacks suppressed Feb 9 18:25:25.340745 kernel: audit: type=1130 audit(1707503125.338:1471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.32:22-10.0.0.1:59464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:25.384000 audit[4690]: USER_ACCT pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.386350 sshd[4690]: Accepted publickey for core from 10.0.0.1 port 59464 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:25.385000 audit[4690]: CRED_ACQ pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.388886 sshd[4690]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:25.390830 kernel: audit: type=1101 audit(1707503125.384:1472): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.390901 kernel: audit: type=1103 audit(1707503125.385:1473): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.390930 kernel: audit: type=1006 audit(1707503125.385:1474): pid=4690 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Feb 9 18:25:25.385000 audit[4690]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6a8e8b0 a2=3 a3=1 items=0 ppid=1 pid=4690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:25.394457 kernel: audit: type=1300 audit(1707503125.385:1474): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6a8e8b0 a2=3 a3=1 items=0 ppid=1 pid=4690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:25.394516 kernel: audit: type=1327 audit(1707503125.385:1474): proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:25.385000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:25.394798 systemd-logind[1130]: New session 22 of user core. Feb 9 18:25:25.395575 systemd[1]: Started session-22.scope. Feb 9 18:25:25.397000 audit[4690]: USER_START pid=4690 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.399000 audit[4692]: CRED_ACQ pid=4692 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.404448 kernel: audit: type=1105 audit(1707503125.397:1475): pid=4690 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.404497 kernel: audit: type=1103 audit(1707503125.399:1476): pid=4692 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.511690 sshd[4690]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:25.510000 audit[4690]: USER_END pid=4690 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.513866 systemd[1]: sshd@21-10.0.0.32:22-10.0.0.1:59464.service: Deactivated successfully. Feb 9 18:25:25.514635 systemd[1]: session-22.scope: Deactivated successfully. Feb 9 18:25:25.515141 systemd-logind[1130]: Session 22 logged out. Waiting for processes to exit. Feb 9 18:25:25.511000 audit[4690]: CRED_DISP pid=4690 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.515832 systemd-logind[1130]: Removed session 22. Feb 9 18:25:25.517522 kernel: audit: type=1106 audit(1707503125.510:1477): pid=4690 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.517610 kernel: audit: type=1104 audit(1707503125.511:1478): pid=4690 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:25.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.32:22-10.0.0.1:59464 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:30.347314 kubelet[2015]: E0209 18:25:30.347275 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:25:30.348246 kubelet[2015]: E0209 18:25:30.348225 2015 dns.go:158] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:25:30.517952 systemd[1]: Started sshd@22-10.0.0.32:22-10.0.0.1:59466.service. Feb 9 18:25:30.516000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.32:22-10.0.0.1:59466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:30.519131 kernel: kauditd_printk_skb: 1 callbacks suppressed Feb 9 18:25:30.519191 kernel: audit: type=1130 audit(1707503130.516:1480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.32:22-10.0.0.1:59466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:30.562000 audit[4734]: USER_ACCT pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.564803 sshd[4734]: Accepted publickey for core from 10.0.0.1 port 59466 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:25:30.568561 kernel: audit: type=1101 audit(1707503130.562:1481): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.567000 audit[4734]: CRED_ACQ pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.569349 sshd[4734]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:25:30.574564 kernel: audit: type=1103 audit(1707503130.567:1482): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.574637 kernel: audit: type=1006 audit(1707503130.567:1483): pid=4734 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Feb 9 18:25:30.574658 kernel: audit: type=1300 audit(1707503130.567:1483): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee26cc30 a2=3 a3=1 items=0 ppid=1 pid=4734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:30.567000 audit[4734]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffee26cc30 a2=3 a3=1 items=0 ppid=1 pid=4734 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:25:30.567000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:30.578274 kernel: audit: type=1327 audit(1707503130.567:1483): proctitle=737368643A20636F7265205B707269765D Feb 9 18:25:30.581110 systemd-logind[1130]: New session 23 of user core. Feb 9 18:25:30.581551 systemd[1]: Started session-23.scope. Feb 9 18:25:30.585000 audit[4734]: USER_START pid=4734 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.589000 audit[4736]: CRED_ACQ pid=4736 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.593164 kernel: audit: type=1105 audit(1707503130.585:1484): pid=4734 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.593228 kernel: audit: type=1103 audit(1707503130.589:1485): pid=4736 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.708684 sshd[4734]: pam_unix(sshd:session): session closed for user core Feb 9 18:25:30.709000 audit[4734]: USER_END pid=4734 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.709000 audit[4734]: CRED_DISP pid=4734 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.714603 systemd[1]: sshd@22-10.0.0.32:22-10.0.0.1:59466.service: Deactivated successfully. Feb 9 18:25:30.715518 systemd[1]: session-23.scope: Deactivated successfully. Feb 9 18:25:30.716336 kernel: audit: type=1106 audit(1707503130.709:1486): pid=4734 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.716407 kernel: audit: type=1104 audit(1707503130.709:1487): pid=4734 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:25:30.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.32:22-10.0.0.1:59466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:25:30.716386 systemd-logind[1130]: Session 23 logged out. Waiting for processes to exit. Feb 9 18:25:30.717397 systemd-logind[1130]: Removed session 23.