Feb 9 18:29:32.721199 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Feb 9 18:29:32.721219 kernel: Linux version 5.15.148-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Fri Feb 9 17:24:35 -00 2024 Feb 9 18:29:32.721227 kernel: efi: EFI v2.70 by EDK II Feb 9 18:29:32.721232 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Feb 9 18:29:32.721237 kernel: random: crng init done Feb 9 18:29:32.721242 kernel: ACPI: Early table checksum verification disabled Feb 9 18:29:32.721249 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Feb 9 18:29:32.721255 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Feb 9 18:29:32.721261 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:29:32.721266 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:29:32.721271 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:29:32.721276 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:29:32.721282 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:29:32.721287 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:29:32.721295 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:29:32.721317 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:29:32.721323 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Feb 9 18:29:32.721329 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Feb 9 18:29:32.721335 kernel: NUMA: Failed to initialise from firmware Feb 9 18:29:32.721341 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Feb 9 18:29:32.721346 kernel: NUMA: NODE_DATA [mem 0xdcb0c900-0xdcb11fff] Feb 9 18:29:32.721352 kernel: Zone ranges: Feb 9 18:29:32.721357 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Feb 9 18:29:32.721365 kernel: DMA32 empty Feb 9 18:29:32.721371 kernel: Normal empty Feb 9 18:29:32.721377 kernel: Movable zone start for each node Feb 9 18:29:32.721382 kernel: Early memory node ranges Feb 9 18:29:32.721388 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Feb 9 18:29:32.721393 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Feb 9 18:29:32.721399 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Feb 9 18:29:32.721404 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Feb 9 18:29:32.721410 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Feb 9 18:29:32.721415 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Feb 9 18:29:32.721421 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Feb 9 18:29:32.721426 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Feb 9 18:29:32.721433 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Feb 9 18:29:32.721439 kernel: psci: probing for conduit method from ACPI. Feb 9 18:29:32.721444 kernel: psci: PSCIv1.1 detected in firmware. Feb 9 18:29:32.721450 kernel: psci: Using standard PSCI v0.2 function IDs Feb 9 18:29:32.721456 kernel: psci: Trusted OS migration not required Feb 9 18:29:32.721464 kernel: psci: SMC Calling Convention v1.1 Feb 9 18:29:32.721470 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Feb 9 18:29:32.721477 kernel: ACPI: SRAT not present Feb 9 18:29:32.721483 kernel: percpu: Embedded 29 pages/cpu s79960 r8192 d30632 u118784 Feb 9 18:29:32.721489 kernel: pcpu-alloc: s79960 r8192 d30632 u118784 alloc=29*4096 Feb 9 18:29:32.721496 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Feb 9 18:29:32.721501 kernel: Detected PIPT I-cache on CPU0 Feb 9 18:29:32.721507 kernel: CPU features: detected: GIC system register CPU interface Feb 9 18:29:32.721513 kernel: CPU features: detected: Hardware dirty bit management Feb 9 18:29:32.721519 kernel: CPU features: detected: Spectre-v4 Feb 9 18:29:32.721525 kernel: CPU features: detected: Spectre-BHB Feb 9 18:29:32.721532 kernel: CPU features: kernel page table isolation forced ON by KASLR Feb 9 18:29:32.721539 kernel: CPU features: detected: Kernel page table isolation (KPTI) Feb 9 18:29:32.721544 kernel: CPU features: detected: ARM erratum 1418040 Feb 9 18:29:32.721550 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Feb 9 18:29:32.721557 kernel: Policy zone: DMA Feb 9 18:29:32.721564 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=680ffc8c0dfb23738bd19ec96ea37b5bbadfb5cebf23767d1d52c89a6d5c00b4 Feb 9 18:29:32.721570 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Feb 9 18:29:32.721576 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Feb 9 18:29:32.721582 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Feb 9 18:29:32.721589 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Feb 9 18:29:32.721595 kernel: Memory: 2459156K/2572288K available (9792K kernel code, 2092K rwdata, 7556K rodata, 34688K init, 778K bss, 113132K reserved, 0K cma-reserved) Feb 9 18:29:32.721603 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Feb 9 18:29:32.721609 kernel: trace event string verifier disabled Feb 9 18:29:32.721614 kernel: rcu: Preemptible hierarchical RCU implementation. Feb 9 18:29:32.721621 kernel: rcu: RCU event tracing is enabled. Feb 9 18:29:32.721627 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Feb 9 18:29:32.721633 kernel: Trampoline variant of Tasks RCU enabled. Feb 9 18:29:32.721639 kernel: Tracing variant of Tasks RCU enabled. Feb 9 18:29:32.721645 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Feb 9 18:29:32.721651 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Feb 9 18:29:32.721657 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Feb 9 18:29:32.721663 kernel: GICv3: 256 SPIs implemented Feb 9 18:29:32.721670 kernel: GICv3: 0 Extended SPIs implemented Feb 9 18:29:32.721676 kernel: GICv3: Distributor has no Range Selector support Feb 9 18:29:32.721682 kernel: Root IRQ handler: gic_handle_irq Feb 9 18:29:32.721688 kernel: GICv3: 16 PPIs implemented Feb 9 18:29:32.721694 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Feb 9 18:29:32.721700 kernel: ACPI: SRAT not present Feb 9 18:29:32.721706 kernel: ITS [mem 0x08080000-0x0809ffff] Feb 9 18:29:32.721712 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Feb 9 18:29:32.721718 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Feb 9 18:29:32.721724 kernel: GICv3: using LPI property table @0x00000000400d0000 Feb 9 18:29:32.721730 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Feb 9 18:29:32.721736 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 18:29:32.721743 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Feb 9 18:29:32.721750 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Feb 9 18:29:32.721756 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Feb 9 18:29:32.721762 kernel: arm-pv: using stolen time PV Feb 9 18:29:32.721768 kernel: Console: colour dummy device 80x25 Feb 9 18:29:32.721774 kernel: ACPI: Core revision 20210730 Feb 9 18:29:32.721781 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Feb 9 18:29:32.721787 kernel: pid_max: default: 32768 minimum: 301 Feb 9 18:29:32.721793 kernel: LSM: Security Framework initializing Feb 9 18:29:32.721799 kernel: SELinux: Initializing. Feb 9 18:29:32.721807 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 18:29:32.721813 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Feb 9 18:29:32.721819 kernel: rcu: Hierarchical SRCU implementation. Feb 9 18:29:32.721826 kernel: Platform MSI: ITS@0x8080000 domain created Feb 9 18:29:32.721832 kernel: PCI/MSI: ITS@0x8080000 domain created Feb 9 18:29:32.721838 kernel: Remapping and enabling EFI services. Feb 9 18:29:32.721844 kernel: smp: Bringing up secondary CPUs ... Feb 9 18:29:32.721850 kernel: Detected PIPT I-cache on CPU1 Feb 9 18:29:32.721856 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Feb 9 18:29:32.721864 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Feb 9 18:29:32.721870 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 18:29:32.721877 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Feb 9 18:29:32.721883 kernel: Detected PIPT I-cache on CPU2 Feb 9 18:29:32.721889 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Feb 9 18:29:32.721895 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Feb 9 18:29:32.721901 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 18:29:32.721908 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Feb 9 18:29:32.721914 kernel: Detected PIPT I-cache on CPU3 Feb 9 18:29:32.721920 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Feb 9 18:29:32.721928 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Feb 9 18:29:32.721934 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Feb 9 18:29:32.721940 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Feb 9 18:29:32.721947 kernel: smp: Brought up 1 node, 4 CPUs Feb 9 18:29:32.721957 kernel: SMP: Total of 4 processors activated. Feb 9 18:29:32.721965 kernel: CPU features: detected: 32-bit EL0 Support Feb 9 18:29:32.721972 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Feb 9 18:29:32.721978 kernel: CPU features: detected: Common not Private translations Feb 9 18:29:32.721985 kernel: CPU features: detected: CRC32 instructions Feb 9 18:29:32.721991 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Feb 9 18:29:32.721998 kernel: CPU features: detected: LSE atomic instructions Feb 9 18:29:32.722004 kernel: CPU features: detected: Privileged Access Never Feb 9 18:29:32.722012 kernel: CPU features: detected: RAS Extension Support Feb 9 18:29:32.722019 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Feb 9 18:29:32.722032 kernel: CPU: All CPU(s) started at EL1 Feb 9 18:29:32.722039 kernel: alternatives: patching kernel code Feb 9 18:29:32.722047 kernel: devtmpfs: initialized Feb 9 18:29:32.722053 kernel: KASLR enabled Feb 9 18:29:32.722060 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Feb 9 18:29:32.722067 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Feb 9 18:29:32.722073 kernel: pinctrl core: initialized pinctrl subsystem Feb 9 18:29:32.722080 kernel: SMBIOS 3.0.0 present. Feb 9 18:29:32.722086 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Feb 9 18:29:32.722093 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Feb 9 18:29:32.722099 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Feb 9 18:29:32.722106 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Feb 9 18:29:32.722114 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Feb 9 18:29:32.722120 kernel: audit: initializing netlink subsys (disabled) Feb 9 18:29:32.722127 kernel: audit: type=2000 audit(0.030:1): state=initialized audit_enabled=0 res=1 Feb 9 18:29:32.722133 kernel: thermal_sys: Registered thermal governor 'step_wise' Feb 9 18:29:32.722140 kernel: cpuidle: using governor menu Feb 9 18:29:32.722146 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Feb 9 18:29:32.722153 kernel: ASID allocator initialised with 32768 entries Feb 9 18:29:32.722159 kernel: ACPI: bus type PCI registered Feb 9 18:29:32.722165 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Feb 9 18:29:32.722173 kernel: Serial: AMBA PL011 UART driver Feb 9 18:29:32.722180 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Feb 9 18:29:32.722186 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Feb 9 18:29:32.722193 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Feb 9 18:29:32.722199 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Feb 9 18:29:32.722206 kernel: cryptd: max_cpu_qlen set to 1000 Feb 9 18:29:32.722212 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Feb 9 18:29:32.722219 kernel: ACPI: Added _OSI(Module Device) Feb 9 18:29:32.722226 kernel: ACPI: Added _OSI(Processor Device) Feb 9 18:29:32.722233 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Feb 9 18:29:32.722240 kernel: ACPI: Added _OSI(Processor Aggregator Device) Feb 9 18:29:32.722246 kernel: ACPI: Added _OSI(Linux-Dell-Video) Feb 9 18:29:32.722252 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Feb 9 18:29:32.722259 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Feb 9 18:29:32.722266 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Feb 9 18:29:32.722272 kernel: ACPI: Interpreter enabled Feb 9 18:29:32.722278 kernel: ACPI: Using GIC for interrupt routing Feb 9 18:29:32.722285 kernel: ACPI: MCFG table detected, 1 entries Feb 9 18:29:32.722292 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Feb 9 18:29:32.722304 kernel: printk: console [ttyAMA0] enabled Feb 9 18:29:32.722311 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Feb 9 18:29:32.722433 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Feb 9 18:29:32.722496 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Feb 9 18:29:32.722554 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Feb 9 18:29:32.722610 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Feb 9 18:29:32.722669 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Feb 9 18:29:32.722677 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Feb 9 18:29:32.722684 kernel: PCI host bridge to bus 0000:00 Feb 9 18:29:32.722747 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Feb 9 18:29:32.722800 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Feb 9 18:29:32.722852 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Feb 9 18:29:32.722903 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Feb 9 18:29:32.722974 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Feb 9 18:29:32.723050 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Feb 9 18:29:32.723112 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Feb 9 18:29:32.723172 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Feb 9 18:29:32.723230 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Feb 9 18:29:32.723289 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Feb 9 18:29:32.723358 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Feb 9 18:29:32.723421 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Feb 9 18:29:32.723474 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Feb 9 18:29:32.723527 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Feb 9 18:29:32.723578 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Feb 9 18:29:32.723587 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Feb 9 18:29:32.723594 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Feb 9 18:29:32.723601 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Feb 9 18:29:32.723609 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Feb 9 18:29:32.723616 kernel: iommu: Default domain type: Translated Feb 9 18:29:32.723622 kernel: iommu: DMA domain TLB invalidation policy: strict mode Feb 9 18:29:32.723629 kernel: vgaarb: loaded Feb 9 18:29:32.723635 kernel: pps_core: LinuxPPS API ver. 1 registered Feb 9 18:29:32.723642 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Feb 9 18:29:32.723648 kernel: PTP clock support registered Feb 9 18:29:32.723655 kernel: Registered efivars operations Feb 9 18:29:32.723661 kernel: clocksource: Switched to clocksource arch_sys_counter Feb 9 18:29:32.723668 kernel: VFS: Disk quotas dquot_6.6.0 Feb 9 18:29:32.723675 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Feb 9 18:29:32.723682 kernel: pnp: PnP ACPI init Feb 9 18:29:32.723745 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Feb 9 18:29:32.723754 kernel: pnp: PnP ACPI: found 1 devices Feb 9 18:29:32.723761 kernel: NET: Registered PF_INET protocol family Feb 9 18:29:32.723780 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Feb 9 18:29:32.723787 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Feb 9 18:29:32.723794 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Feb 9 18:29:32.723803 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Feb 9 18:29:32.723809 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Feb 9 18:29:32.723816 kernel: TCP: Hash tables configured (established 32768 bind 32768) Feb 9 18:29:32.723823 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 18:29:32.723829 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Feb 9 18:29:32.723836 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Feb 9 18:29:32.723842 kernel: PCI: CLS 0 bytes, default 64 Feb 9 18:29:32.723849 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Feb 9 18:29:32.723856 kernel: kvm [1]: HYP mode not available Feb 9 18:29:32.723863 kernel: Initialise system trusted keyrings Feb 9 18:29:32.723870 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Feb 9 18:29:32.723876 kernel: Key type asymmetric registered Feb 9 18:29:32.723882 kernel: Asymmetric key parser 'x509' registered Feb 9 18:29:32.723889 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Feb 9 18:29:32.723895 kernel: io scheduler mq-deadline registered Feb 9 18:29:32.723902 kernel: io scheduler kyber registered Feb 9 18:29:32.723908 kernel: io scheduler bfq registered Feb 9 18:29:32.723915 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Feb 9 18:29:32.723922 kernel: ACPI: button: Power Button [PWRB] Feb 9 18:29:32.723929 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Feb 9 18:29:32.723992 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Feb 9 18:29:32.724001 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Feb 9 18:29:32.724007 kernel: thunder_xcv, ver 1.0 Feb 9 18:29:32.724014 kernel: thunder_bgx, ver 1.0 Feb 9 18:29:32.724026 kernel: nicpf, ver 1.0 Feb 9 18:29:32.724033 kernel: nicvf, ver 1.0 Feb 9 18:29:32.724105 kernel: rtc-efi rtc-efi.0: registered as rtc0 Feb 9 18:29:32.724164 kernel: rtc-efi rtc-efi.0: setting system clock to 2024-02-09T18:29:32 UTC (1707503372) Feb 9 18:29:32.724173 kernel: hid: raw HID events driver (C) Jiri Kosina Feb 9 18:29:32.724179 kernel: NET: Registered PF_INET6 protocol family Feb 9 18:29:32.724186 kernel: Segment Routing with IPv6 Feb 9 18:29:32.724192 kernel: In-situ OAM (IOAM) with IPv6 Feb 9 18:29:32.724199 kernel: NET: Registered PF_PACKET protocol family Feb 9 18:29:32.724205 kernel: Key type dns_resolver registered Feb 9 18:29:32.724212 kernel: registered taskstats version 1 Feb 9 18:29:32.724220 kernel: Loading compiled-in X.509 certificates Feb 9 18:29:32.724227 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.148-flatcar: 947a80114e81e2815f6db72a0d388260762488f9' Feb 9 18:29:32.724233 kernel: Key type .fscrypt registered Feb 9 18:29:32.724239 kernel: Key type fscrypt-provisioning registered Feb 9 18:29:32.724246 kernel: ima: No TPM chip found, activating TPM-bypass! Feb 9 18:29:32.724252 kernel: ima: Allocated hash algorithm: sha1 Feb 9 18:29:32.724259 kernel: ima: No architecture policies found Feb 9 18:29:32.724265 kernel: Freeing unused kernel memory: 34688K Feb 9 18:29:32.724272 kernel: Run /init as init process Feb 9 18:29:32.724279 kernel: with arguments: Feb 9 18:29:32.724286 kernel: /init Feb 9 18:29:32.724292 kernel: with environment: Feb 9 18:29:32.724298 kernel: HOME=/ Feb 9 18:29:32.724311 kernel: TERM=linux Feb 9 18:29:32.724317 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Feb 9 18:29:32.724325 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 18:29:32.724334 systemd[1]: Detected virtualization kvm. Feb 9 18:29:32.724344 systemd[1]: Detected architecture arm64. Feb 9 18:29:32.724350 systemd[1]: Running in initrd. Feb 9 18:29:32.724357 systemd[1]: No hostname configured, using default hostname. Feb 9 18:29:32.724364 systemd[1]: Hostname set to . Feb 9 18:29:32.724371 systemd[1]: Initializing machine ID from VM UUID. Feb 9 18:29:32.724378 systemd[1]: Queued start job for default target initrd.target. Feb 9 18:29:32.724385 systemd[1]: Started systemd-ask-password-console.path. Feb 9 18:29:32.724392 systemd[1]: Reached target cryptsetup.target. Feb 9 18:29:32.724399 systemd[1]: Reached target paths.target. Feb 9 18:29:32.724406 systemd[1]: Reached target slices.target. Feb 9 18:29:32.724413 systemd[1]: Reached target swap.target. Feb 9 18:29:32.724420 systemd[1]: Reached target timers.target. Feb 9 18:29:32.724427 systemd[1]: Listening on iscsid.socket. Feb 9 18:29:32.724434 systemd[1]: Listening on iscsiuio.socket. Feb 9 18:29:32.724441 systemd[1]: Listening on systemd-journald-audit.socket. Feb 9 18:29:32.724449 systemd[1]: Listening on systemd-journald-dev-log.socket. Feb 9 18:29:32.724456 systemd[1]: Listening on systemd-journald.socket. Feb 9 18:29:32.724463 systemd[1]: Listening on systemd-networkd.socket. Feb 9 18:29:32.724470 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 18:29:32.724477 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 18:29:32.724484 systemd[1]: Reached target sockets.target. Feb 9 18:29:32.724491 systemd[1]: Starting kmod-static-nodes.service... Feb 9 18:29:32.724498 systemd[1]: Finished network-cleanup.service. Feb 9 18:29:32.724505 systemd[1]: Starting systemd-fsck-usr.service... Feb 9 18:29:32.724513 systemd[1]: Starting systemd-journald.service... Feb 9 18:29:32.724520 systemd[1]: Starting systemd-modules-load.service... Feb 9 18:29:32.724527 systemd[1]: Starting systemd-resolved.service... Feb 9 18:29:32.724535 systemd[1]: Starting systemd-vconsole-setup.service... Feb 9 18:29:32.724541 systemd[1]: Finished kmod-static-nodes.service. Feb 9 18:29:32.724548 systemd[1]: Finished systemd-fsck-usr.service. Feb 9 18:29:32.724555 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 18:29:32.724563 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 18:29:32.724570 kernel: audit: type=1130 audit(1707503372.721:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.724578 systemd[1]: Finished systemd-vconsole-setup.service. Feb 9 18:29:32.724588 systemd-journald[289]: Journal started Feb 9 18:29:32.724625 systemd-journald[289]: Runtime Journal (/run/log/journal/ac190750dbfa4bfb82d19a2b4c76d81d) is 6.0M, max 48.7M, 42.6M free. Feb 9 18:29:32.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.716321 systemd-modules-load[290]: Inserted module 'overlay' Feb 9 18:29:32.727952 kernel: audit: type=1130 audit(1707503372.724:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.727970 systemd[1]: Started systemd-journald.service. Feb 9 18:29:32.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.729401 systemd[1]: Starting dracut-cmdline-ask.service... Feb 9 18:29:32.731583 kernel: audit: type=1130 audit(1707503372.728:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.737507 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Feb 9 18:29:32.738332 kernel: Bridge firewalling registered Feb 9 18:29:32.738285 systemd-modules-load[290]: Inserted module 'br_netfilter' Feb 9 18:29:32.745948 systemd[1]: Finished dracut-cmdline-ask.service. Feb 9 18:29:32.750114 kernel: audit: type=1130 audit(1707503372.746:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.750131 kernel: SCSI subsystem initialized Feb 9 18:29:32.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.747480 systemd[1]: Starting dracut-cmdline.service... Feb 9 18:29:32.749241 systemd-resolved[291]: Positive Trust Anchors: Feb 9 18:29:32.749248 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 18:29:32.749276 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 18:29:32.753358 systemd-resolved[291]: Defaulting to hostname 'linux'. Feb 9 18:29:32.762322 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Feb 9 18:29:32.762339 kernel: device-mapper: uevent: version 1.0.3 Feb 9 18:29:32.762348 kernel: audit: type=1130 audit(1707503372.759:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.762357 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Feb 9 18:29:32.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.754074 systemd[1]: Started systemd-resolved.service. Feb 9 18:29:32.759486 systemd[1]: Reached target nss-lookup.target. Feb 9 18:29:32.764442 dracut-cmdline[307]: dracut-dracut-053 Feb 9 18:29:32.765327 systemd-modules-load[290]: Inserted module 'dm_multipath' Feb 9 18:29:32.766049 systemd[1]: Finished systemd-modules-load.service. Feb 9 18:29:32.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.769165 dracut-cmdline[307]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=680ffc8c0dfb23738bd19ec96ea37b5bbadfb5cebf23767d1d52c89a6d5c00b4 Feb 9 18:29:32.772924 kernel: audit: type=1130 audit(1707503372.766:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.769133 systemd[1]: Starting systemd-sysctl.service... Feb 9 18:29:32.777995 systemd[1]: Finished systemd-sysctl.service. Feb 9 18:29:32.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.781319 kernel: audit: type=1130 audit(1707503372.778:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.825326 kernel: Loading iSCSI transport class v2.0-870. Feb 9 18:29:32.833333 kernel: iscsi: registered transport (tcp) Feb 9 18:29:32.846325 kernel: iscsi: registered transport (qla4xxx) Feb 9 18:29:32.846349 kernel: QLogic iSCSI HBA Driver Feb 9 18:29:32.879136 systemd[1]: Finished dracut-cmdline.service. Feb 9 18:29:32.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.880523 systemd[1]: Starting dracut-pre-udev.service... Feb 9 18:29:32.882799 kernel: audit: type=1130 audit(1707503372.879:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:32.925334 kernel: raid6: neonx8 gen() 13772 MB/s Feb 9 18:29:32.942321 kernel: raid6: neonx8 xor() 10791 MB/s Feb 9 18:29:32.959318 kernel: raid6: neonx4 gen() 13478 MB/s Feb 9 18:29:32.976323 kernel: raid6: neonx4 xor() 11124 MB/s Feb 9 18:29:32.993333 kernel: raid6: neonx2 gen() 12909 MB/s Feb 9 18:29:33.010319 kernel: raid6: neonx2 xor() 10210 MB/s Feb 9 18:29:33.027319 kernel: raid6: neonx1 gen() 10456 MB/s Feb 9 18:29:33.044321 kernel: raid6: neonx1 xor() 8726 MB/s Feb 9 18:29:33.061318 kernel: raid6: int64x8 gen() 6259 MB/s Feb 9 18:29:33.078319 kernel: raid6: int64x8 xor() 3526 MB/s Feb 9 18:29:33.095317 kernel: raid6: int64x4 gen() 7245 MB/s Feb 9 18:29:33.112320 kernel: raid6: int64x4 xor() 3839 MB/s Feb 9 18:29:33.129319 kernel: raid6: int64x2 gen() 6125 MB/s Feb 9 18:29:33.146316 kernel: raid6: int64x2 xor() 3306 MB/s Feb 9 18:29:33.163330 kernel: raid6: int64x1 gen() 5018 MB/s Feb 9 18:29:33.180515 kernel: raid6: int64x1 xor() 2638 MB/s Feb 9 18:29:33.180548 kernel: raid6: using algorithm neonx8 gen() 13772 MB/s Feb 9 18:29:33.180565 kernel: raid6: .... xor() 10791 MB/s, rmw enabled Feb 9 18:29:33.180581 kernel: raid6: using neon recovery algorithm Feb 9 18:29:33.191548 kernel: xor: measuring software checksum speed Feb 9 18:29:33.191564 kernel: 8regs : 17289 MB/sec Feb 9 18:29:33.192383 kernel: 32regs : 20749 MB/sec Feb 9 18:29:33.193523 kernel: arm64_neon : 27959 MB/sec Feb 9 18:29:33.193534 kernel: xor: using function: arm64_neon (27959 MB/sec) Feb 9 18:29:33.248327 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Feb 9 18:29:33.259172 systemd[1]: Finished dracut-pre-udev.service. Feb 9 18:29:33.259000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:33.261000 audit: BPF prog-id=7 op=LOAD Feb 9 18:29:33.261000 audit: BPF prog-id=8 op=LOAD Feb 9 18:29:33.262324 kernel: audit: type=1130 audit(1707503373.259:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:33.262603 systemd[1]: Starting systemd-udevd.service... Feb 9 18:29:33.274873 systemd-udevd[489]: Using default interface naming scheme 'v252'. Feb 9 18:29:33.278196 systemd[1]: Started systemd-udevd.service. Feb 9 18:29:33.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:33.279716 systemd[1]: Starting dracut-pre-trigger.service... Feb 9 18:29:33.291278 dracut-pre-trigger[496]: rd.md=0: removing MD RAID activation Feb 9 18:29:33.318071 systemd[1]: Finished dracut-pre-trigger.service. Feb 9 18:29:33.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:33.319453 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 18:29:33.360257 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 18:29:33.360000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:33.384323 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Feb 9 18:29:33.384511 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Feb 9 18:29:33.385435 kernel: GPT:9289727 != 19775487 Feb 9 18:29:33.385452 kernel: GPT:Alternate GPT header not at the end of the disk. Feb 9 18:29:33.385461 kernel: GPT:9289727 != 19775487 Feb 9 18:29:33.385469 kernel: GPT: Use GNU Parted to correct GPT errors. Feb 9 18:29:33.385477 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 9 18:29:33.403323 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (542) Feb 9 18:29:33.406137 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Feb 9 18:29:33.408736 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Feb 9 18:29:33.409798 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Feb 9 18:29:33.414077 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Feb 9 18:29:33.417551 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 18:29:33.419175 systemd[1]: Starting disk-uuid.service... Feb 9 18:29:33.425094 disk-uuid[564]: Primary Header is updated. Feb 9 18:29:33.425094 disk-uuid[564]: Secondary Entries is updated. Feb 9 18:29:33.425094 disk-uuid[564]: Secondary Header is updated. Feb 9 18:29:33.428329 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 9 18:29:34.440877 disk-uuid[565]: The operation has completed successfully. Feb 9 18:29:34.441987 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Feb 9 18:29:34.462328 systemd[1]: disk-uuid.service: Deactivated successfully. Feb 9 18:29:34.462000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.462416 systemd[1]: Finished disk-uuid.service. Feb 9 18:29:34.466160 systemd[1]: Starting verity-setup.service... Feb 9 18:29:34.480322 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Feb 9 18:29:34.500352 systemd[1]: Found device dev-mapper-usr.device. Feb 9 18:29:34.502239 systemd[1]: Mounting sysusr-usr.mount... Feb 9 18:29:34.504007 systemd[1]: Finished verity-setup.service. Feb 9 18:29:34.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.550326 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Feb 9 18:29:34.550787 systemd[1]: Mounted sysusr-usr.mount. Feb 9 18:29:34.551548 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Feb 9 18:29:34.552207 systemd[1]: Starting ignition-setup.service... Feb 9 18:29:34.554046 systemd[1]: Starting parse-ip-for-networkd.service... Feb 9 18:29:34.561633 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Feb 9 18:29:34.561674 kernel: BTRFS info (device vda6): using free space tree Feb 9 18:29:34.561684 kernel: BTRFS info (device vda6): has skinny extents Feb 9 18:29:34.570118 systemd[1]: mnt-oem.mount: Deactivated successfully. Feb 9 18:29:34.575438 systemd[1]: Finished ignition-setup.service. Feb 9 18:29:34.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.577041 systemd[1]: Starting ignition-fetch-offline.service... Feb 9 18:29:34.631708 systemd[1]: Finished parse-ip-for-networkd.service. Feb 9 18:29:34.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.632000 audit: BPF prog-id=9 op=LOAD Feb 9 18:29:34.633772 systemd[1]: Starting systemd-networkd.service... Feb 9 18:29:34.659031 ignition[651]: Ignition 2.14.0 Feb 9 18:29:34.659869 ignition[651]: Stage: fetch-offline Feb 9 18:29:34.660578 ignition[651]: no configs at "/usr/lib/ignition/base.d" Feb 9 18:29:34.661406 systemd-networkd[741]: lo: Link UP Feb 9 18:29:34.661417 systemd-networkd[741]: lo: Gained carrier Feb 9 18:29:34.662000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.661785 systemd-networkd[741]: Enumeration completed Feb 9 18:29:34.661957 systemd-networkd[741]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 18:29:34.662093 systemd[1]: Started systemd-networkd.service. Feb 9 18:29:34.663082 systemd-networkd[741]: eth0: Link UP Feb 9 18:29:34.663086 systemd-networkd[741]: eth0: Gained carrier Feb 9 18:29:34.663136 systemd[1]: Reached target network.target. Feb 9 18:29:34.665552 systemd[1]: Starting iscsiuio.service... Feb 9 18:29:34.669007 ignition[651]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:29:34.669337 ignition[651]: parsed url from cmdline: "" Feb 9 18:29:34.669341 ignition[651]: no config URL provided Feb 9 18:29:34.669348 ignition[651]: reading system config file "/usr/lib/ignition/user.ign" Feb 9 18:29:34.669358 ignition[651]: no config at "/usr/lib/ignition/user.ign" Feb 9 18:29:34.669379 ignition[651]: op(1): [started] loading QEMU firmware config module Feb 9 18:29:34.669384 ignition[651]: op(1): executing: "modprobe" "qemu_fw_cfg" Feb 9 18:29:34.675080 systemd[1]: Started iscsiuio.service. Feb 9 18:29:34.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.675796 ignition[651]: op(1): [finished] loading QEMU firmware config module Feb 9 18:29:34.676626 systemd[1]: Starting iscsid.service... Feb 9 18:29:34.679909 iscsid[749]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Feb 9 18:29:34.679909 iscsid[749]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Feb 9 18:29:34.679909 iscsid[749]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Feb 9 18:29:34.679909 iscsid[749]: If using hardware iscsi like qla4xxx this message can be ignored. Feb 9 18:29:34.679909 iscsid[749]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Feb 9 18:29:34.679909 iscsid[749]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Feb 9 18:29:34.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.682803 systemd[1]: Started iscsid.service. Feb 9 18:29:34.686846 systemd-networkd[741]: eth0: DHCPv4 address 10.0.0.66/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 9 18:29:34.688198 systemd[1]: Starting dracut-initqueue.service... Feb 9 18:29:34.698246 systemd[1]: Finished dracut-initqueue.service. Feb 9 18:29:34.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.699189 systemd[1]: Reached target remote-fs-pre.target. Feb 9 18:29:34.700145 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 18:29:34.701170 systemd[1]: Reached target remote-fs.target. Feb 9 18:29:34.702769 systemd[1]: Starting dracut-pre-mount.service... Feb 9 18:29:34.710539 systemd[1]: Finished dracut-pre-mount.service. Feb 9 18:29:34.710000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.760628 ignition[651]: parsing config with SHA512: ecdb128880198354cf54bb34a3702b77324a2291c868c1222ddea5206b4f8b65715381469acc6ea2296c39a3ced5638ae3349e6b7876282ed082343e2ff22d1e Feb 9 18:29:34.804254 unknown[651]: fetched base config from "system" Feb 9 18:29:34.804265 unknown[651]: fetched user config from "qemu" Feb 9 18:29:34.804861 ignition[651]: fetch-offline: fetch-offline passed Feb 9 18:29:34.804922 ignition[651]: Ignition finished successfully Feb 9 18:29:34.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.806395 systemd[1]: Finished ignition-fetch-offline.service. Feb 9 18:29:34.807620 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Feb 9 18:29:34.808383 systemd[1]: Starting ignition-kargs.service... Feb 9 18:29:34.817840 ignition[763]: Ignition 2.14.0 Feb 9 18:29:34.817849 ignition[763]: Stage: kargs Feb 9 18:29:34.817936 ignition[763]: no configs at "/usr/lib/ignition/base.d" Feb 9 18:29:34.817945 ignition[763]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:29:34.821511 systemd[1]: Finished ignition-kargs.service. Feb 9 18:29:34.821000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.819032 ignition[763]: kargs: kargs passed Feb 9 18:29:34.819074 ignition[763]: Ignition finished successfully Feb 9 18:29:34.822887 systemd[1]: Starting ignition-disks.service... Feb 9 18:29:34.829336 ignition[769]: Ignition 2.14.0 Feb 9 18:29:34.829347 ignition[769]: Stage: disks Feb 9 18:29:34.829438 ignition[769]: no configs at "/usr/lib/ignition/base.d" Feb 9 18:29:34.829448 ignition[769]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:29:34.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.831374 systemd[1]: Finished ignition-disks.service. Feb 9 18:29:34.830546 ignition[769]: disks: disks passed Feb 9 18:29:34.832051 systemd[1]: Reached target initrd-root-device.target. Feb 9 18:29:34.830590 ignition[769]: Ignition finished successfully Feb 9 18:29:34.833290 systemd[1]: Reached target local-fs-pre.target. Feb 9 18:29:34.834259 systemd[1]: Reached target local-fs.target. Feb 9 18:29:34.835115 systemd[1]: Reached target sysinit.target. Feb 9 18:29:34.836081 systemd[1]: Reached target basic.target. Feb 9 18:29:34.837776 systemd[1]: Starting systemd-fsck-root.service... Feb 9 18:29:34.847819 systemd-fsck[777]: ROOT: clean, 602/553520 files, 56013/553472 blocks Feb 9 18:29:34.851043 systemd[1]: Finished systemd-fsck-root.service. Feb 9 18:29:34.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.852581 systemd[1]: Mounting sysroot.mount... Feb 9 18:29:34.859324 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Feb 9 18:29:34.859481 systemd[1]: Mounted sysroot.mount. Feb 9 18:29:34.860165 systemd[1]: Reached target initrd-root-fs.target. Feb 9 18:29:34.862048 systemd[1]: Mounting sysroot-usr.mount... Feb 9 18:29:34.862777 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Feb 9 18:29:34.862813 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Feb 9 18:29:34.862835 systemd[1]: Reached target ignition-diskful.target. Feb 9 18:29:34.864552 systemd[1]: Mounted sysroot-usr.mount. Feb 9 18:29:34.866150 systemd[1]: Starting initrd-setup-root.service... Feb 9 18:29:34.870412 initrd-setup-root[787]: cut: /sysroot/etc/passwd: No such file or directory Feb 9 18:29:34.874733 initrd-setup-root[795]: cut: /sysroot/etc/group: No such file or directory Feb 9 18:29:34.878101 initrd-setup-root[803]: cut: /sysroot/etc/shadow: No such file or directory Feb 9 18:29:34.881836 initrd-setup-root[811]: cut: /sysroot/etc/gshadow: No such file or directory Feb 9 18:29:34.906494 systemd[1]: Finished initrd-setup-root.service. Feb 9 18:29:34.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.907968 systemd[1]: Starting ignition-mount.service... Feb 9 18:29:34.909103 systemd[1]: Starting sysroot-boot.service... Feb 9 18:29:34.914050 bash[828]: umount: /sysroot/usr/share/oem: not mounted. Feb 9 18:29:34.924224 ignition[830]: INFO : Ignition 2.14.0 Feb 9 18:29:34.924224 ignition[830]: INFO : Stage: mount Feb 9 18:29:34.924224 ignition[830]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 9 18:29:34.924224 ignition[830]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:29:34.926933 ignition[830]: INFO : mount: mount passed Feb 9 18:29:34.926933 ignition[830]: INFO : Ignition finished successfully Feb 9 18:29:34.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:34.926286 systemd[1]: Finished ignition-mount.service. Feb 9 18:29:34.927703 systemd[1]: Finished sysroot-boot.service. Feb 9 18:29:35.510642 systemd[1]: Mounting sysroot-usr-share-oem.mount... Feb 9 18:29:35.516311 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (838) Feb 9 18:29:35.516337 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Feb 9 18:29:35.517412 kernel: BTRFS info (device vda6): using free space tree Feb 9 18:29:35.517424 kernel: BTRFS info (device vda6): has skinny extents Feb 9 18:29:35.520539 systemd[1]: Mounted sysroot-usr-share-oem.mount. Feb 9 18:29:35.522036 systemd[1]: Starting ignition-files.service... Feb 9 18:29:35.535327 ignition[858]: INFO : Ignition 2.14.0 Feb 9 18:29:35.535327 ignition[858]: INFO : Stage: files Feb 9 18:29:35.536459 ignition[858]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 9 18:29:35.536459 ignition[858]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:29:35.538147 ignition[858]: DEBUG : files: compiled without relabeling support, skipping Feb 9 18:29:35.538147 ignition[858]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Feb 9 18:29:35.538147 ignition[858]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Feb 9 18:29:35.540957 ignition[858]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Feb 9 18:29:35.540957 ignition[858]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Feb 9 18:29:35.540957 ignition[858]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Feb 9 18:29:35.539851 unknown[858]: wrote ssh authorized keys file for user: core Feb 9 18:29:35.544576 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 18:29:35.544576 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-arm64-v1.3.0.tgz: attempt #1 Feb 9 18:29:35.855337 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Feb 9 18:29:36.095846 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: b2b7fb74f1b3cb8928f49e5bf9d4bc686e057e837fac3caf1b366d54757921dba80d70cc010399b274d136e8dee9a25b1ad87cdfdc4ffcf42cf88f3e8f99587a Feb 9 18:29:36.097962 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-arm64-v1.3.0.tgz" Feb 9 18:29:36.097962 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 18:29:36.097962 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-arm64.tar.gz: attempt #1 Feb 9 18:29:36.312313 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Feb 9 18:29:36.328523 systemd-networkd[741]: eth0: Gained IPv6LL Feb 9 18:29:36.432924 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: db062e43351a63347871e7094115be2ae3853afcd346d47f7b51141da8c3202c2df58d2e17359322f632abcb37474fd7fdb3b7aadbc5cfd5cf6d3bad040b6251 Feb 9 18:29:36.435696 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-arm64.tar.gz" Feb 9 18:29:36.435696 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 18:29:36.435696 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Feb 9 18:29:36.610906 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Feb 9 18:29:36.670298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Feb 9 18:29:36.671776 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubeadm" Feb 9 18:29:36.673025 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubeadm: attempt #1 Feb 9 18:29:36.718761 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Feb 9 18:29:36.989629 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 5a08b81f9cc82d3cce21130856ca63b8dafca9149d9775dd25b376eb0f18209aa0e4a47c0a6d7e6fb1316aacd5d59dec770f26c09120c866949d70bc415518b3 Feb 9 18:29:36.991737 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubeadm" Feb 9 18:29:36.991737 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubelet" Feb 9 18:29:36.991737 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubelet: attempt #1 Feb 9 18:29:37.013163 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Feb 9 18:29:37.622564 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: 5a898ef543a6482895101ea58e33602e3c0a7682d322aaf08ac3dc8a5a3c8da8f09600d577024549288f8cebb1a86f9c79927796b69a3d8fe989ca8f12b147d6 Feb 9 18:29:37.622564 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubelet" Feb 9 18:29:37.622564 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubectl" Feb 9 18:29:37.622564 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET https://dl.k8s.io/release/v1.28.1/bin/linux/arm64/kubectl: attempt #1 Feb 9 18:29:37.645023 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET result: OK Feb 9 18:29:37.911090 ignition[858]: DEBUG : files: createFilesystemsFiles: createFiles: op(8): file matches expected sum of: 6a5c9c02a29126949f096415bb1761a0c0ad44168e2ab3d0409982701da58f96223bec354828ddf958e945ef1ce63c0ad41e77cbcbcce0756163e71b4fbae432 Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubectl" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/docker/daemon.json" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/docker/daemon.json" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 18:29:37.913298 ignition[858]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/flatcar/update.conf" Feb 9 18:29:37.913298 ignition[858]: INFO : files: op(f): [started] processing unit "prepare-cni-plugins.service" Feb 9 18:29:37.913298 ignition[858]: INFO : files: op(f): op(10): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 18:29:37.913298 ignition[858]: INFO : files: op(f): op(10): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Feb 9 18:29:37.913298 ignition[858]: INFO : files: op(f): [finished] processing unit "prepare-cni-plugins.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(11): [started] processing unit "prepare-critools.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(11): op(12): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(11): op(12): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(11): [finished] processing unit "prepare-critools.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(13): [started] processing unit "prepare-helm.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(13): op(14): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(13): op(14): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(13): [finished] processing unit "prepare-helm.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(15): [started] processing unit "coreos-metadata.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(15): op(16): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(15): op(16): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(15): [finished] processing unit "coreos-metadata.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(17): [started] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(17): [finished] setting preset to enabled for "prepare-cni-plugins.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(18): [started] setting preset to enabled for "prepare-critools.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(18): [finished] setting preset to enabled for "prepare-critools.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Feb 9 18:29:37.935859 ignition[858]: INFO : files: op(1a): [started] setting preset to disabled for "coreos-metadata.service" Feb 9 18:29:37.957511 ignition[858]: INFO : files: op(1a): op(1b): [started] removing enablement symlink(s) for "coreos-metadata.service" Feb 9 18:29:37.972394 ignition[858]: INFO : files: op(1a): op(1b): [finished] removing enablement symlink(s) for "coreos-metadata.service" Feb 9 18:29:37.974516 ignition[858]: INFO : files: op(1a): [finished] setting preset to disabled for "coreos-metadata.service" Feb 9 18:29:37.974516 ignition[858]: INFO : files: createResultFile: createFiles: op(1c): [started] writing file "/sysroot/etc/.ignition-result.json" Feb 9 18:29:37.974516 ignition[858]: INFO : files: createResultFile: createFiles: op(1c): [finished] writing file "/sysroot/etc/.ignition-result.json" Feb 9 18:29:37.974516 ignition[858]: INFO : files: files passed Feb 9 18:29:37.974516 ignition[858]: INFO : Ignition finished successfully Feb 9 18:29:37.983173 kernel: kauditd_printk_skb: 23 callbacks suppressed Feb 9 18:29:37.983194 kernel: audit: type=1130 audit(1707503377.977:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:37.977000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:37.976562 systemd[1]: Finished ignition-files.service. Feb 9 18:29:37.978991 systemd[1]: Starting initrd-setup-root-after-ignition.service... Feb 9 18:29:37.982089 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Feb 9 18:29:37.982981 systemd[1]: Starting ignition-quench.service... Feb 9 18:29:37.991001 kernel: audit: type=1130 audit(1707503377.986:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:37.991024 kernel: audit: type=1131 audit(1707503377.986:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:37.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:37.986000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:37.991111 initrd-setup-root-after-ignition[883]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Feb 9 18:29:37.986149 systemd[1]: ignition-quench.service: Deactivated successfully. Feb 9 18:29:37.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:37.995459 initrd-setup-root-after-ignition[886]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Feb 9 18:29:37.997027 kernel: audit: type=1130 audit(1707503377.992:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:37.986227 systemd[1]: Finished ignition-quench.service. Feb 9 18:29:37.991948 systemd[1]: Finished initrd-setup-root-after-ignition.service. Feb 9 18:29:37.993189 systemd[1]: Reached target ignition-complete.target. Feb 9 18:29:37.996649 systemd[1]: Starting initrd-parse-etc.service... Feb 9 18:29:38.008444 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Feb 9 18:29:38.009000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.009175 systemd[1]: Finished initrd-parse-etc.service. Feb 9 18:29:38.014566 kernel: audit: type=1130 audit(1707503378.009:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.014586 kernel: audit: type=1131 audit(1707503378.009:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.009901 systemd[1]: Reached target initrd-fs.target. Feb 9 18:29:38.013920 systemd[1]: Reached target initrd.target. Feb 9 18:29:38.015034 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Feb 9 18:29:38.015713 systemd[1]: Starting dracut-pre-pivot.service... Feb 9 18:29:38.025536 systemd[1]: Finished dracut-pre-pivot.service. Feb 9 18:29:38.025000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.027099 systemd[1]: Starting initrd-cleanup.service... Feb 9 18:29:38.029782 kernel: audit: type=1130 audit(1707503378.025:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.034588 systemd[1]: Stopped target nss-lookup.target. Feb 9 18:29:38.035566 systemd[1]: Stopped target remote-cryptsetup.target. Feb 9 18:29:38.036880 systemd[1]: Stopped target timers.target. Feb 9 18:29:38.038156 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Feb 9 18:29:38.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.038258 systemd[1]: Stopped dracut-pre-pivot.service. Feb 9 18:29:38.042891 kernel: audit: type=1131 audit(1707503378.039:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.039461 systemd[1]: Stopped target initrd.target. Feb 9 18:29:38.042377 systemd[1]: Stopped target basic.target. Feb 9 18:29:38.043493 systemd[1]: Stopped target ignition-complete.target. Feb 9 18:29:38.044784 systemd[1]: Stopped target ignition-diskful.target. Feb 9 18:29:38.046046 systemd[1]: Stopped target initrd-root-device.target. Feb 9 18:29:38.047413 systemd[1]: Stopped target remote-fs.target. Feb 9 18:29:38.048708 systemd[1]: Stopped target remote-fs-pre.target. Feb 9 18:29:38.050097 systemd[1]: Stopped target sysinit.target. Feb 9 18:29:38.051295 systemd[1]: Stopped target local-fs.target. Feb 9 18:29:38.052604 systemd[1]: Stopped target local-fs-pre.target. Feb 9 18:29:38.053804 systemd[1]: Stopped target swap.target. Feb 9 18:29:38.055000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.054957 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Feb 9 18:29:38.059845 kernel: audit: type=1131 audit(1707503378.055:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.055064 systemd[1]: Stopped dracut-pre-mount.service. Feb 9 18:29:38.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.056313 systemd[1]: Stopped target cryptsetup.target. Feb 9 18:29:38.063928 kernel: audit: type=1131 audit(1707503378.060:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.063000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.059084 systemd[1]: dracut-initqueue.service: Deactivated successfully. Feb 9 18:29:38.059185 systemd[1]: Stopped dracut-initqueue.service. Feb 9 18:29:38.060634 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Feb 9 18:29:38.060728 systemd[1]: Stopped ignition-fetch-offline.service. Feb 9 18:29:38.063640 systemd[1]: Stopped target paths.target. Feb 9 18:29:38.064623 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Feb 9 18:29:38.066353 systemd[1]: Stopped systemd-ask-password-console.path. Feb 9 18:29:38.067812 systemd[1]: Stopped target slices.target. Feb 9 18:29:38.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.069041 systemd[1]: Stopped target sockets.target. Feb 9 18:29:38.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.070155 systemd[1]: iscsid.socket: Deactivated successfully. Feb 9 18:29:38.070227 systemd[1]: Closed iscsid.socket. Feb 9 18:29:38.071386 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Feb 9 18:29:38.071480 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Feb 9 18:29:38.072941 systemd[1]: ignition-files.service: Deactivated successfully. Feb 9 18:29:38.079000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.073045 systemd[1]: Stopped ignition-files.service. Feb 9 18:29:38.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.084721 ignition[899]: INFO : Ignition 2.14.0 Feb 9 18:29:38.084721 ignition[899]: INFO : Stage: umount Feb 9 18:29:38.084721 ignition[899]: INFO : no configs at "/usr/lib/ignition/base.d" Feb 9 18:29:38.084721 ignition[899]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Feb 9 18:29:38.084721 ignition[899]: INFO : umount: umount passed Feb 9 18:29:38.084721 ignition[899]: INFO : Ignition finished successfully Feb 9 18:29:38.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.074825 systemd[1]: Stopping ignition-mount.service... Feb 9 18:29:38.076704 systemd[1]: Stopping iscsiuio.service... Feb 9 18:29:38.078084 systemd[1]: Stopping sysroot-boot.service... Feb 9 18:29:38.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.078921 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Feb 9 18:29:38.095000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.079054 systemd[1]: Stopped systemd-udev-trigger.service. Feb 9 18:29:38.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.079955 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Feb 9 18:29:38.080063 systemd[1]: Stopped dracut-pre-trigger.service. Feb 9 18:29:38.083182 systemd[1]: initrd-cleanup.service: Deactivated successfully. Feb 9 18:29:38.099000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.083262 systemd[1]: Finished initrd-cleanup.service. Feb 9 18:29:38.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.084350 systemd[1]: iscsiuio.service: Deactivated successfully. Feb 9 18:29:38.102000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.084440 systemd[1]: Stopped iscsiuio.service. Feb 9 18:29:38.085489 systemd[1]: Stopped target network.target. Feb 9 18:29:38.086648 systemd[1]: iscsiuio.socket: Deactivated successfully. Feb 9 18:29:38.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.086681 systemd[1]: Closed iscsiuio.socket. Feb 9 18:29:38.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.087884 systemd[1]: Stopping systemd-networkd.service... Feb 9 18:29:38.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.089401 systemd[1]: Stopping systemd-resolved.service... Feb 9 18:29:38.091699 systemd[1]: sysroot-boot.mount: Deactivated successfully. Feb 9 18:29:38.092116 systemd[1]: ignition-mount.service: Deactivated successfully. Feb 9 18:29:38.092206 systemd[1]: Stopped ignition-mount.service. Feb 9 18:29:38.115000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.093373 systemd-networkd[741]: eth0: DHCPv6 lease lost Feb 9 18:29:38.116000 audit: BPF prog-id=9 op=UNLOAD Feb 9 18:29:38.094544 systemd[1]: sysroot-boot.service: Deactivated successfully. Feb 9 18:29:38.094612 systemd[1]: Stopped sysroot-boot.service. Feb 9 18:29:38.118000 audit: BPF prog-id=6 op=UNLOAD Feb 9 18:29:38.095544 systemd[1]: systemd-networkd.service: Deactivated successfully. Feb 9 18:29:38.095617 systemd[1]: Stopped systemd-networkd.service. Feb 9 18:29:38.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.096925 systemd[1]: systemd-networkd.socket: Deactivated successfully. Feb 9 18:29:38.120000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.096953 systemd[1]: Closed systemd-networkd.socket. Feb 9 18:29:38.097703 systemd[1]: ignition-disks.service: Deactivated successfully. Feb 9 18:29:38.124000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.097740 systemd[1]: Stopped ignition-disks.service. Feb 9 18:29:38.125000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.099415 systemd[1]: ignition-kargs.service: Deactivated successfully. Feb 9 18:29:38.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.099453 systemd[1]: Stopped ignition-kargs.service. Feb 9 18:29:38.100563 systemd[1]: ignition-setup.service: Deactivated successfully. Feb 9 18:29:38.129000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.100594 systemd[1]: Stopped ignition-setup.service. Feb 9 18:29:38.101802 systemd[1]: initrd-setup-root.service: Deactivated successfully. Feb 9 18:29:38.131000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.101836 systemd[1]: Stopped initrd-setup-root.service. Feb 9 18:29:38.132000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.103929 systemd[1]: Stopping network-cleanup.service... Feb 9 18:29:38.104820 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Feb 9 18:29:38.137000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.104874 systemd[1]: Stopped parse-ip-for-networkd.service. Feb 9 18:29:38.108215 systemd[1]: systemd-sysctl.service: Deactivated successfully. Feb 9 18:29:38.108272 systemd[1]: Stopped systemd-sysctl.service. Feb 9 18:29:38.109631 systemd[1]: systemd-modules-load.service: Deactivated successfully. Feb 9 18:29:38.109667 systemd[1]: Stopped systemd-modules-load.service. Feb 9 18:29:38.110539 systemd[1]: Stopping systemd-udevd.service... Feb 9 18:29:38.114728 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Feb 9 18:29:38.115151 systemd[1]: systemd-resolved.service: Deactivated successfully. Feb 9 18:29:38.115240 systemd[1]: Stopped systemd-resolved.service. Feb 9 18:29:38.119090 systemd[1]: systemd-udevd.service: Deactivated successfully. Feb 9 18:29:38.119207 systemd[1]: Stopped systemd-udevd.service. Feb 9 18:29:38.120491 systemd[1]: network-cleanup.service: Deactivated successfully. Feb 9 18:29:38.120557 systemd[1]: Stopped network-cleanup.service. Feb 9 18:29:38.121455 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Feb 9 18:29:38.121487 systemd[1]: Closed systemd-udevd-control.socket. Feb 9 18:29:38.122842 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Feb 9 18:29:38.122874 systemd[1]: Closed systemd-udevd-kernel.socket. Feb 9 18:29:38.123630 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Feb 9 18:29:38.123670 systemd[1]: Stopped dracut-pre-udev.service. Feb 9 18:29:38.124730 systemd[1]: dracut-cmdline.service: Deactivated successfully. Feb 9 18:29:38.124767 systemd[1]: Stopped dracut-cmdline.service. Feb 9 18:29:38.126020 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Feb 9 18:29:38.126058 systemd[1]: Stopped dracut-cmdline-ask.service. Feb 9 18:29:38.127841 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Feb 9 18:29:38.129072 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Feb 9 18:29:38.129132 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Feb 9 18:29:38.130394 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Feb 9 18:29:38.130430 systemd[1]: Stopped kmod-static-nodes.service. Feb 9 18:29:38.131737 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Feb 9 18:29:38.131774 systemd[1]: Stopped systemd-vconsole-setup.service. Feb 9 18:29:38.133949 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Feb 9 18:29:38.161647 systemd-journald[289]: Received SIGTERM from PID 1 (n/a). Feb 9 18:29:38.161688 iscsid[749]: iscsid shutting down. Feb 9 18:29:38.134369 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Feb 9 18:29:38.134447 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Feb 9 18:29:38.138243 systemd[1]: Reached target initrd-switch-root.target. Feb 9 18:29:38.140547 systemd[1]: Starting initrd-switch-root.service... Feb 9 18:29:38.146704 systemd[1]: Switching root. Feb 9 18:29:38.165047 systemd-journald[289]: Journal stopped Feb 9 18:29:40.280842 kernel: SELinux: Class mctp_socket not defined in policy. Feb 9 18:29:40.280900 kernel: SELinux: Class anon_inode not defined in policy. Feb 9 18:29:40.280915 kernel: SELinux: the above unknown classes and permissions will be allowed Feb 9 18:29:40.280925 kernel: SELinux: policy capability network_peer_controls=1 Feb 9 18:29:40.280935 kernel: SELinux: policy capability open_perms=1 Feb 9 18:29:40.280945 kernel: SELinux: policy capability extended_socket_class=1 Feb 9 18:29:40.280955 kernel: SELinux: policy capability always_check_network=0 Feb 9 18:29:40.280968 kernel: SELinux: policy capability cgroup_seclabel=1 Feb 9 18:29:40.280980 kernel: SELinux: policy capability nnp_nosuid_transition=1 Feb 9 18:29:40.280990 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Feb 9 18:29:40.281009 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Feb 9 18:29:40.281022 systemd[1]: Successfully loaded SELinux policy in 33ms. Feb 9 18:29:40.281044 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.879ms. Feb 9 18:29:40.281056 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Feb 9 18:29:40.281067 systemd[1]: Detected virtualization kvm. Feb 9 18:29:40.281078 systemd[1]: Detected architecture arm64. Feb 9 18:29:40.281089 systemd[1]: Detected first boot. Feb 9 18:29:40.281104 systemd[1]: Initializing machine ID from VM UUID. Feb 9 18:29:40.281115 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Feb 9 18:29:40.281126 systemd[1]: Populated /etc with preset unit settings. Feb 9 18:29:40.281136 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 18:29:40.281147 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 18:29:40.281159 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 18:29:40.281170 systemd[1]: iscsid.service: Deactivated successfully. Feb 9 18:29:40.281182 systemd[1]: Stopped iscsid.service. Feb 9 18:29:40.281192 systemd[1]: initrd-switch-root.service: Deactivated successfully. Feb 9 18:29:40.281202 systemd[1]: Stopped initrd-switch-root.service. Feb 9 18:29:40.281213 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Feb 9 18:29:40.281223 systemd[1]: Created slice system-addon\x2dconfig.slice. Feb 9 18:29:40.281234 systemd[1]: Created slice system-addon\x2drun.slice. Feb 9 18:29:40.281244 systemd[1]: Created slice system-getty.slice. Feb 9 18:29:40.281255 systemd[1]: Created slice system-modprobe.slice. Feb 9 18:29:40.281266 systemd[1]: Created slice system-serial\x2dgetty.slice. Feb 9 18:29:40.281276 systemd[1]: Created slice system-system\x2dcloudinit.slice. Feb 9 18:29:40.281287 systemd[1]: Created slice system-systemd\x2dfsck.slice. Feb 9 18:29:40.281297 systemd[1]: Created slice user.slice. Feb 9 18:29:40.281336 systemd[1]: Started systemd-ask-password-console.path. Feb 9 18:29:40.281347 systemd[1]: Started systemd-ask-password-wall.path. Feb 9 18:29:40.281358 systemd[1]: Set up automount boot.automount. Feb 9 18:29:40.281368 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Feb 9 18:29:40.281380 systemd[1]: Stopped target initrd-switch-root.target. Feb 9 18:29:40.281391 systemd[1]: Stopped target initrd-fs.target. Feb 9 18:29:40.281401 systemd[1]: Stopped target initrd-root-fs.target. Feb 9 18:29:40.281412 systemd[1]: Reached target integritysetup.target. Feb 9 18:29:40.281422 systemd[1]: Reached target remote-cryptsetup.target. Feb 9 18:29:40.281433 systemd[1]: Reached target remote-fs.target. Feb 9 18:29:40.281444 systemd[1]: Reached target slices.target. Feb 9 18:29:40.281454 systemd[1]: Reached target swap.target. Feb 9 18:29:40.281466 systemd[1]: Reached target torcx.target. Feb 9 18:29:40.281476 systemd[1]: Reached target veritysetup.target. Feb 9 18:29:40.281486 systemd[1]: Listening on systemd-coredump.socket. Feb 9 18:29:40.281496 systemd[1]: Listening on systemd-initctl.socket. Feb 9 18:29:40.281507 systemd[1]: Listening on systemd-networkd.socket. Feb 9 18:29:40.281518 systemd[1]: Listening on systemd-udevd-control.socket. Feb 9 18:29:40.281529 systemd[1]: Listening on systemd-udevd-kernel.socket. Feb 9 18:29:40.281539 systemd[1]: Listening on systemd-userdbd.socket. Feb 9 18:29:40.281550 systemd[1]: Mounting dev-hugepages.mount... Feb 9 18:29:40.281561 systemd[1]: Mounting dev-mqueue.mount... Feb 9 18:29:40.281572 systemd[1]: Mounting media.mount... Feb 9 18:29:40.281583 systemd[1]: Mounting sys-kernel-debug.mount... Feb 9 18:29:40.281592 systemd[1]: Mounting sys-kernel-tracing.mount... Feb 9 18:29:40.281602 systemd[1]: Mounting tmp.mount... Feb 9 18:29:40.281613 systemd[1]: Starting flatcar-tmpfiles.service... Feb 9 18:29:40.281623 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Feb 9 18:29:40.281634 systemd[1]: Starting kmod-static-nodes.service... Feb 9 18:29:40.281644 systemd[1]: Starting modprobe@configfs.service... Feb 9 18:29:40.281654 systemd[1]: Starting modprobe@dm_mod.service... Feb 9 18:29:40.281666 systemd[1]: Starting modprobe@drm.service... Feb 9 18:29:40.281676 systemd[1]: Starting modprobe@efi_pstore.service... Feb 9 18:29:40.281686 systemd[1]: Starting modprobe@fuse.service... Feb 9 18:29:40.281697 systemd[1]: Starting modprobe@loop.service... Feb 9 18:29:40.281707 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Feb 9 18:29:40.281718 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Feb 9 18:29:40.281728 systemd[1]: Stopped systemd-fsck-root.service. Feb 9 18:29:40.281738 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Feb 9 18:29:40.281750 systemd[1]: Stopped systemd-fsck-usr.service. Feb 9 18:29:40.281760 systemd[1]: Stopped systemd-journald.service. Feb 9 18:29:40.281771 systemd[1]: Starting systemd-journald.service... Feb 9 18:29:40.281781 systemd[1]: Starting systemd-modules-load.service... Feb 9 18:29:40.281792 kernel: fuse: init (API version 7.34) Feb 9 18:29:40.281803 systemd[1]: Starting systemd-network-generator.service... Feb 9 18:29:40.281814 systemd[1]: Starting systemd-remount-fs.service... Feb 9 18:29:40.281824 kernel: loop: module loaded Feb 9 18:29:40.281836 systemd[1]: Starting systemd-udev-trigger.service... Feb 9 18:29:40.281848 systemd[1]: verity-setup.service: Deactivated successfully. Feb 9 18:29:40.281858 systemd[1]: Stopped verity-setup.service. Feb 9 18:29:40.281868 systemd[1]: Mounted dev-hugepages.mount. Feb 9 18:29:40.281879 systemd[1]: Mounted dev-mqueue.mount. Feb 9 18:29:40.281889 systemd[1]: Mounted media.mount. Feb 9 18:29:40.281900 systemd[1]: Mounted sys-kernel-debug.mount. Feb 9 18:29:40.281910 systemd[1]: Mounted sys-kernel-tracing.mount. Feb 9 18:29:40.281920 systemd[1]: Mounted tmp.mount. Feb 9 18:29:40.281930 systemd[1]: Finished kmod-static-nodes.service. Feb 9 18:29:40.281944 systemd-journald[991]: Journal started Feb 9 18:29:40.281984 systemd-journald[991]: Runtime Journal (/run/log/journal/ac190750dbfa4bfb82d19a2b4c76d81d) is 6.0M, max 48.7M, 42.6M free. Feb 9 18:29:38.234000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Feb 9 18:29:38.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 18:29:38.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Feb 9 18:29:38.406000 audit: BPF prog-id=10 op=LOAD Feb 9 18:29:38.406000 audit: BPF prog-id=10 op=UNLOAD Feb 9 18:29:38.406000 audit: BPF prog-id=11 op=LOAD Feb 9 18:29:38.406000 audit: BPF prog-id=11 op=UNLOAD Feb 9 18:29:38.463000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Feb 9 18:29:38.463000 audit[932]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001bd8d4 a1=400013ede0 a2=40001450c0 a3=32 items=0 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:38.463000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 18:29:38.464000 audit[932]: AVC avc: denied { associate } for pid=932 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Feb 9 18:29:38.464000 audit[932]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001bd9b9 a2=1ed a3=0 items=2 ppid=915 pid=932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:38.464000 audit: CWD cwd="/" Feb 9 18:29:38.464000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:29:38.464000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:29:38.464000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Feb 9 18:29:40.156000 audit: BPF prog-id=12 op=LOAD Feb 9 18:29:40.156000 audit: BPF prog-id=3 op=UNLOAD Feb 9 18:29:40.156000 audit: BPF prog-id=13 op=LOAD Feb 9 18:29:40.156000 audit: BPF prog-id=14 op=LOAD Feb 9 18:29:40.156000 audit: BPF prog-id=4 op=UNLOAD Feb 9 18:29:40.156000 audit: BPF prog-id=5 op=UNLOAD Feb 9 18:29:40.157000 audit: BPF prog-id=15 op=LOAD Feb 9 18:29:40.157000 audit: BPF prog-id=12 op=UNLOAD Feb 9 18:29:40.157000 audit: BPF prog-id=16 op=LOAD Feb 9 18:29:40.157000 audit: BPF prog-id=17 op=LOAD Feb 9 18:29:40.157000 audit: BPF prog-id=13 op=UNLOAD Feb 9 18:29:40.157000 audit: BPF prog-id=14 op=UNLOAD Feb 9 18:29:40.157000 audit: BPF prog-id=18 op=LOAD Feb 9 18:29:40.157000 audit: BPF prog-id=15 op=UNLOAD Feb 9 18:29:40.157000 audit: BPF prog-id=19 op=LOAD Feb 9 18:29:40.157000 audit: BPF prog-id=20 op=LOAD Feb 9 18:29:40.157000 audit: BPF prog-id=16 op=UNLOAD Feb 9 18:29:40.157000 audit: BPF prog-id=17 op=UNLOAD Feb 9 18:29:40.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.167000 audit: BPF prog-id=18 op=UNLOAD Feb 9 18:29:40.242000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.248000 audit: BPF prog-id=21 op=LOAD Feb 9 18:29:40.253000 audit: BPF prog-id=22 op=LOAD Feb 9 18:29:40.253000 audit: BPF prog-id=23 op=LOAD Feb 9 18:29:40.253000 audit: BPF prog-id=19 op=UNLOAD Feb 9 18:29:40.253000 audit: BPF prog-id=20 op=UNLOAD Feb 9 18:29:40.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.279000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Feb 9 18:29:40.279000 audit[991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffeda1d9b0 a2=4000 a3=1 items=0 ppid=1 pid=991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:40.279000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Feb 9 18:29:40.282000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.155030 systemd[1]: Queued start job for default target multi-user.target. Feb 9 18:29:38.462649 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 18:29:40.155042 systemd[1]: Unnecessary job was removed for dev-vda6.device. Feb 9 18:29:38.462883 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 18:29:40.158508 systemd[1]: systemd-journald.service: Deactivated successfully. Feb 9 18:29:38.462901 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 18:29:38.462930 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Feb 9 18:29:38.462940 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="skipped missing lower profile" missing profile=oem Feb 9 18:29:38.462967 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Feb 9 18:29:38.462979 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Feb 9 18:29:38.463171 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Feb 9 18:29:38.463204 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Feb 9 18:29:38.463216 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Feb 9 18:29:38.463617 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Feb 9 18:29:38.463649 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Feb 9 18:29:38.463667 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.2: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.2 Feb 9 18:29:40.284328 systemd[1]: Started systemd-journald.service. Feb 9 18:29:40.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:38.463681 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Feb 9 18:29:38.463697 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.2: no such file or directory" path=/var/lib/torcx/store/3510.3.2 Feb 9 18:29:38.463711 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:38Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Feb 9 18:29:39.915799 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:39Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 18:29:39.916062 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:39Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 18:29:39.916164 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:39Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 18:29:39.916342 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:39Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Feb 9 18:29:39.916403 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:39Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Feb 9 18:29:39.916465 /usr/lib/systemd/system-generators/torcx-generator[932]: time="2024-02-09T18:29:39Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Feb 9 18:29:40.284859 systemd[1]: modprobe@configfs.service: Deactivated successfully. Feb 9 18:29:40.285035 systemd[1]: Finished modprobe@configfs.service. Feb 9 18:29:40.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.286174 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Feb 9 18:29:40.287247 systemd[1]: Finished modprobe@dm_mod.service. Feb 9 18:29:40.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.288391 systemd[1]: modprobe@drm.service: Deactivated successfully. Feb 9 18:29:40.288542 systemd[1]: Finished modprobe@drm.service. Feb 9 18:29:40.289510 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Feb 9 18:29:40.289642 systemd[1]: Finished modprobe@efi_pstore.service. Feb 9 18:29:40.290000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.290000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.290758 systemd[1]: modprobe@fuse.service: Deactivated successfully. Feb 9 18:29:40.290927 systemd[1]: Finished modprobe@fuse.service. Feb 9 18:29:40.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.291982 systemd[1]: modprobe@loop.service: Deactivated successfully. Feb 9 18:29:40.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.292484 systemd[1]: Finished modprobe@loop.service. Feb 9 18:29:40.293397 systemd[1]: Finished systemd-modules-load.service. Feb 9 18:29:40.293000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.294589 systemd[1]: Finished systemd-network-generator.service. Feb 9 18:29:40.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.295720 systemd[1]: Finished systemd-remount-fs.service. Feb 9 18:29:40.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.297023 systemd[1]: Reached target network-pre.target. Feb 9 18:29:40.299139 systemd[1]: Mounting sys-fs-fuse-connections.mount... Feb 9 18:29:40.301116 systemd[1]: Mounting sys-kernel-config.mount... Feb 9 18:29:40.301838 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Feb 9 18:29:40.304793 systemd[1]: Starting systemd-hwdb-update.service... Feb 9 18:29:40.307074 systemd[1]: Starting systemd-journal-flush.service... Feb 9 18:29:40.307926 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Feb 9 18:29:40.316760 systemd[1]: Starting systemd-random-seed.service... Feb 9 18:29:40.317650 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Feb 9 18:29:40.318673 systemd[1]: Starting systemd-sysctl.service... Feb 9 18:29:40.321755 systemd[1]: Finished flatcar-tmpfiles.service. Feb 9 18:29:40.322000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.323000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.322804 systemd[1]: Finished systemd-udev-trigger.service. Feb 9 18:29:40.323771 systemd[1]: Mounted sys-fs-fuse-connections.mount. Feb 9 18:29:40.324766 systemd[1]: Mounted sys-kernel-config.mount. Feb 9 18:29:40.326370 systemd-journald[991]: Time spent on flushing to /var/log/journal/ac190750dbfa4bfb82d19a2b4c76d81d is 14.864ms for 1036 entries. Feb 9 18:29:40.326370 systemd-journald[991]: System Journal (/var/log/journal/ac190750dbfa4bfb82d19a2b4c76d81d) is 8.0M, max 195.6M, 187.6M free. Feb 9 18:29:40.358296 systemd-journald[991]: Received client request to flush runtime journal. Feb 9 18:29:40.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.351000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.326913 systemd[1]: Starting systemd-sysusers.service... Feb 9 18:29:40.328905 systemd[1]: Starting systemd-udev-settle.service... Feb 9 18:29:40.358884 udevadm[1033]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Feb 9 18:29:40.341380 systemd[1]: Finished systemd-random-seed.service. Feb 9 18:29:40.342478 systemd[1]: Reached target first-boot-complete.target. Feb 9 18:29:40.346602 systemd[1]: Finished systemd-sysctl.service. Feb 9 18:29:40.357169 systemd[1]: Finished systemd-sysusers.service. Feb 9 18:29:40.359371 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Feb 9 18:29:40.362219 systemd[1]: Finished systemd-journal-flush.service. Feb 9 18:29:40.362000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.388815 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Feb 9 18:29:40.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.688974 systemd[1]: Finished systemd-hwdb-update.service. Feb 9 18:29:40.689000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.690000 audit: BPF prog-id=24 op=LOAD Feb 9 18:29:40.690000 audit: BPF prog-id=25 op=LOAD Feb 9 18:29:40.690000 audit: BPF prog-id=7 op=UNLOAD Feb 9 18:29:40.690000 audit: BPF prog-id=8 op=UNLOAD Feb 9 18:29:40.691171 systemd[1]: Starting systemd-udevd.service... Feb 9 18:29:40.713223 systemd-udevd[1038]: Using default interface naming scheme 'v252'. Feb 9 18:29:40.723899 systemd[1]: Started systemd-udevd.service. Feb 9 18:29:40.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.727000 audit: BPF prog-id=26 op=LOAD Feb 9 18:29:40.729628 systemd[1]: Starting systemd-networkd.service... Feb 9 18:29:40.732000 audit: BPF prog-id=27 op=LOAD Feb 9 18:29:40.732000 audit: BPF prog-id=28 op=LOAD Feb 9 18:29:40.732000 audit: BPF prog-id=29 op=LOAD Feb 9 18:29:40.733342 systemd[1]: Starting systemd-userdbd.service... Feb 9 18:29:40.748919 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Feb 9 18:29:40.758420 systemd[1]: Started systemd-userdbd.service. Feb 9 18:29:40.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.776490 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Feb 9 18:29:40.807948 systemd-networkd[1054]: lo: Link UP Feb 9 18:29:40.807957 systemd-networkd[1054]: lo: Gained carrier Feb 9 18:29:40.808410 systemd-networkd[1054]: Enumeration completed Feb 9 18:29:40.808510 systemd[1]: Started systemd-networkd.service. Feb 9 18:29:40.808530 systemd-networkd[1054]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Feb 9 18:29:40.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.817696 systemd-networkd[1054]: eth0: Link UP Feb 9 18:29:40.817704 systemd-networkd[1054]: eth0: Gained carrier Feb 9 18:29:40.835626 systemd[1]: Finished systemd-udev-settle.service. Feb 9 18:29:40.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.837373 systemd[1]: Starting lvm2-activation-early.service... Feb 9 18:29:40.838425 systemd-networkd[1054]: eth0: DHCPv4 address 10.0.0.66/16, gateway 10.0.0.1 acquired from 10.0.0.1 Feb 9 18:29:40.847084 lvm[1071]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 18:29:40.876073 systemd[1]: Finished lvm2-activation-early.service. Feb 9 18:29:40.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.877039 systemd[1]: Reached target cryptsetup.target. Feb 9 18:29:40.878600 systemd[1]: Starting lvm2-activation.service... Feb 9 18:29:40.881767 lvm[1072]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Feb 9 18:29:40.911088 systemd[1]: Finished lvm2-activation.service. Feb 9 18:29:40.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.911806 systemd[1]: Reached target local-fs-pre.target. Feb 9 18:29:40.912436 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Feb 9 18:29:40.912462 systemd[1]: Reached target local-fs.target. Feb 9 18:29:40.913006 systemd[1]: Reached target machines.target. Feb 9 18:29:40.914506 systemd[1]: Starting ldconfig.service... Feb 9 18:29:40.915374 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Feb 9 18:29:40.915491 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 18:29:40.916883 systemd[1]: Starting systemd-boot-update.service... Feb 9 18:29:40.918658 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Feb 9 18:29:40.920604 systemd[1]: Starting systemd-machine-id-commit.service... Feb 9 18:29:40.921421 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Feb 9 18:29:40.921491 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Feb 9 18:29:40.925336 systemd[1]: Starting systemd-tmpfiles-setup.service... Feb 9 18:29:40.926445 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1074 (bootctl) Feb 9 18:29:40.927740 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Feb 9 18:29:40.932617 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Feb 9 18:29:40.943000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:40.943534 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Feb 9 18:29:40.947607 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Feb 9 18:29:40.948917 systemd-tmpfiles[1077]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Feb 9 18:29:41.040252 systemd[1]: Finished systemd-machine-id-commit.service. Feb 9 18:29:41.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.049926 systemd-fsck[1084]: fsck.fat 4.2 (2021-01-31) Feb 9 18:29:41.049926 systemd-fsck[1084]: /dev/vda1: 236 files, 113719/258078 clusters Feb 9 18:29:41.052127 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Feb 9 18:29:41.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.122625 ldconfig[1073]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Feb 9 18:29:41.126094 systemd[1]: Finished ldconfig.service. Feb 9 18:29:41.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.273006 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Feb 9 18:29:41.274415 systemd[1]: Mounting boot.mount... Feb 9 18:29:41.281020 systemd[1]: Mounted boot.mount. Feb 9 18:29:41.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.287786 systemd[1]: Finished systemd-boot-update.service. Feb 9 18:29:41.338966 systemd[1]: Finished systemd-tmpfiles-setup.service. Feb 9 18:29:41.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.344488 systemd[1]: Starting audit-rules.service... Feb 9 18:29:41.346089 systemd[1]: Starting clean-ca-certificates.service... Feb 9 18:29:41.348010 systemd[1]: Starting systemd-journal-catalog-update.service... Feb 9 18:29:41.350000 audit: BPF prog-id=30 op=LOAD Feb 9 18:29:41.352007 systemd[1]: Starting systemd-resolved.service... Feb 9 18:29:41.353000 audit: BPF prog-id=31 op=LOAD Feb 9 18:29:41.356265 systemd[1]: Starting systemd-timesyncd.service... Feb 9 18:29:41.358082 systemd[1]: Starting systemd-update-utmp.service... Feb 9 18:29:41.359444 systemd[1]: Finished clean-ca-certificates.service. Feb 9 18:29:41.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.360589 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Feb 9 18:29:41.362000 audit[1098]: SYSTEM_BOOT pid=1098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.364933 systemd[1]: Finished systemd-update-utmp.service. Feb 9 18:29:41.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.365855 systemd[1]: Finished systemd-journal-catalog-update.service. Feb 9 18:29:41.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.367967 systemd[1]: Starting systemd-update-done.service... Feb 9 18:29:41.373586 systemd[1]: Finished systemd-update-done.service. Feb 9 18:29:41.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:41.391000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Feb 9 18:29:41.391000 audit[1109]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe77437d0 a2=420 a3=0 items=0 ppid=1087 pid=1109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:41.391000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Feb 9 18:29:41.392021 augenrules[1109]: No rules Feb 9 18:29:41.392822 systemd[1]: Finished audit-rules.service. Feb 9 18:29:41.417551 systemd-resolved[1091]: Positive Trust Anchors: Feb 9 18:29:41.417564 systemd-resolved[1091]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Feb 9 18:29:41.417590 systemd-resolved[1091]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Feb 9 18:29:41.417798 systemd[1]: Started systemd-timesyncd.service. Feb 9 18:29:41.418485 systemd-timesyncd[1097]: Contacted time server 10.0.0.1:123 (10.0.0.1). Feb 9 18:29:41.418585 systemd-timesyncd[1097]: Initial clock synchronization to Fri 2024-02-09 18:29:41.041653 UTC. Feb 9 18:29:41.418898 systemd[1]: Reached target time-set.target. Feb 9 18:29:41.428198 systemd-resolved[1091]: Defaulting to hostname 'linux'. Feb 9 18:29:41.429582 systemd[1]: Started systemd-resolved.service. Feb 9 18:29:41.430417 systemd[1]: Reached target network.target. Feb 9 18:29:41.431089 systemd[1]: Reached target nss-lookup.target. Feb 9 18:29:41.431881 systemd[1]: Reached target sysinit.target. Feb 9 18:29:41.432659 systemd[1]: Started motdgen.path. Feb 9 18:29:41.433342 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Feb 9 18:29:41.434391 systemd[1]: Started logrotate.timer. Feb 9 18:29:41.435149 systemd[1]: Started mdadm.timer. Feb 9 18:29:41.435785 systemd[1]: Started systemd-tmpfiles-clean.timer. Feb 9 18:29:41.436583 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Feb 9 18:29:41.436615 systemd[1]: Reached target paths.target. Feb 9 18:29:41.437285 systemd[1]: Reached target timers.target. Feb 9 18:29:41.438318 systemd[1]: Listening on dbus.socket. Feb 9 18:29:41.439842 systemd[1]: Starting docker.socket... Feb 9 18:29:41.442611 systemd[1]: Listening on sshd.socket. Feb 9 18:29:41.443389 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 18:29:41.443776 systemd[1]: Listening on docker.socket. Feb 9 18:29:41.444552 systemd[1]: Reached target sockets.target. Feb 9 18:29:41.445237 systemd[1]: Reached target basic.target. Feb 9 18:29:41.445973 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 18:29:41.446010 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Feb 9 18:29:41.446941 systemd[1]: Starting containerd.service... Feb 9 18:29:41.448569 systemd[1]: Starting dbus.service... Feb 9 18:29:41.450089 systemd[1]: Starting enable-oem-cloudinit.service... Feb 9 18:29:41.452034 systemd[1]: Starting extend-filesystems.service... Feb 9 18:29:41.452814 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Feb 9 18:29:41.454063 systemd[1]: Starting motdgen.service... Feb 9 18:29:41.455670 systemd[1]: Starting prepare-cni-plugins.service... Feb 9 18:29:41.457244 jq[1119]: false Feb 9 18:29:41.458664 systemd[1]: Starting prepare-critools.service... Feb 9 18:29:41.460508 systemd[1]: Starting prepare-helm.service... Feb 9 18:29:41.463290 systemd[1]: Starting ssh-key-proc-cmdline.service... Feb 9 18:29:41.464831 systemd[1]: Starting sshd-keygen.service... Feb 9 18:29:41.467283 systemd[1]: Starting systemd-logind.service... Feb 9 18:29:41.467974 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Feb 9 18:29:41.468045 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Feb 9 18:29:41.468417 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Feb 9 18:29:41.469542 systemd[1]: Starting update-engine.service... Feb 9 18:29:41.472848 systemd[1]: Starting update-ssh-keys-after-ignition.service... Feb 9 18:29:41.474987 extend-filesystems[1120]: Found vda Feb 9 18:29:41.475232 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Feb 9 18:29:41.475433 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Feb 9 18:29:41.475693 systemd[1]: motdgen.service: Deactivated successfully. Feb 9 18:29:41.475813 systemd[1]: Finished motdgen.service. Feb 9 18:29:41.476768 extend-filesystems[1120]: Found vda1 Feb 9 18:29:41.476768 extend-filesystems[1120]: Found vda2 Feb 9 18:29:41.476768 extend-filesystems[1120]: Found vda3 Feb 9 18:29:41.476768 extend-filesystems[1120]: Found usr Feb 9 18:29:41.476768 extend-filesystems[1120]: Found vda4 Feb 9 18:29:41.476768 extend-filesystems[1120]: Found vda6 Feb 9 18:29:41.476768 extend-filesystems[1120]: Found vda7 Feb 9 18:29:41.476768 extend-filesystems[1120]: Found vda9 Feb 9 18:29:41.476768 extend-filesystems[1120]: Checking size of /dev/vda9 Feb 9 18:29:41.497923 jq[1139]: true Feb 9 18:29:41.478862 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Feb 9 18:29:41.498083 tar[1143]: ./ Feb 9 18:29:41.498083 tar[1143]: ./loopback Feb 9 18:29:41.479060 systemd[1]: Finished ssh-key-proc-cmdline.service. Feb 9 18:29:41.498448 tar[1144]: crictl Feb 9 18:29:41.498624 tar[1145]: linux-arm64/helm Feb 9 18:29:41.504830 jq[1150]: true Feb 9 18:29:41.528038 extend-filesystems[1120]: Resized partition /dev/vda9 Feb 9 18:29:41.536824 dbus-daemon[1118]: [system] SELinux support is enabled Feb 9 18:29:41.536980 systemd[1]: Started dbus.service. Feb 9 18:29:41.539182 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Feb 9 18:29:41.539212 systemd[1]: Reached target system-config.target. Feb 9 18:29:41.540190 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Feb 9 18:29:41.540209 systemd[1]: Reached target user-config.target. Feb 9 18:29:41.550932 extend-filesystems[1169]: resize2fs 1.46.5 (30-Dec-2021) Feb 9 18:29:41.557471 systemd-logind[1135]: Watching system buttons on /dev/input/event0 (Power Button) Feb 9 18:29:41.562838 systemd-logind[1135]: New seat seat0. Feb 9 18:29:41.565360 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Feb 9 18:29:41.567614 systemd[1]: Started systemd-logind.service. Feb 9 18:29:41.581894 update_engine[1136]: I0209 18:29:41.581621 1136 main.cc:92] Flatcar Update Engine starting Feb 9 18:29:41.592569 update_engine[1136]: I0209 18:29:41.584439 1136 update_check_scheduler.cc:74] Next update check in 10m48s Feb 9 18:29:41.584377 systemd[1]: Started update-engine.service. Feb 9 18:29:41.587138 systemd[1]: Started locksmithd.service. Feb 9 18:29:41.599545 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Feb 9 18:29:41.619504 env[1146]: time="2024-02-09T18:29:41.619297600Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Feb 9 18:29:41.619731 extend-filesystems[1169]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Feb 9 18:29:41.619731 extend-filesystems[1169]: old_desc_blocks = 1, new_desc_blocks = 1 Feb 9 18:29:41.619731 extend-filesystems[1169]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Feb 9 18:29:41.623214 extend-filesystems[1120]: Resized filesystem in /dev/vda9 Feb 9 18:29:41.622744 systemd[1]: extend-filesystems.service: Deactivated successfully. Feb 9 18:29:41.622906 systemd[1]: Finished extend-filesystems.service. Feb 9 18:29:41.625458 tar[1143]: ./bandwidth Feb 9 18:29:41.628359 bash[1174]: Updated "/home/core/.ssh/authorized_keys" Feb 9 18:29:41.629120 systemd[1]: Finished update-ssh-keys-after-ignition.service. Feb 9 18:29:41.644772 env[1146]: time="2024-02-09T18:29:41.644718160Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Feb 9 18:29:41.644917 env[1146]: time="2024-02-09T18:29:41.644875560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Feb 9 18:29:41.646234 env[1146]: time="2024-02-09T18:29:41.646192920Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.148-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Feb 9 18:29:41.646234 env[1146]: time="2024-02-09T18:29:41.646233000Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Feb 9 18:29:41.646476 env[1146]: time="2024-02-09T18:29:41.646451800Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 18:29:41.646514 env[1146]: time="2024-02-09T18:29:41.646476320Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Feb 9 18:29:41.646514 env[1146]: time="2024-02-09T18:29:41.646490120Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Feb 9 18:29:41.646566 env[1146]: time="2024-02-09T18:29:41.646499720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Feb 9 18:29:41.646640 env[1146]: time="2024-02-09T18:29:41.646601280Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Feb 9 18:29:41.646828 env[1146]: time="2024-02-09T18:29:41.646801800Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Feb 9 18:29:41.646961 env[1146]: time="2024-02-09T18:29:41.646932920Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Feb 9 18:29:41.646961 env[1146]: time="2024-02-09T18:29:41.646952360Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Feb 9 18:29:41.647035 env[1146]: time="2024-02-09T18:29:41.647015880Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Feb 9 18:29:41.647035 env[1146]: time="2024-02-09T18:29:41.647033320Z" level=info msg="metadata content store policy set" policy=shared Feb 9 18:29:41.653191 env[1146]: time="2024-02-09T18:29:41.653163240Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Feb 9 18:29:41.653259 env[1146]: time="2024-02-09T18:29:41.653196280Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Feb 9 18:29:41.653259 env[1146]: time="2024-02-09T18:29:41.653210800Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Feb 9 18:29:41.653259 env[1146]: time="2024-02-09T18:29:41.653242000Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Feb 9 18:29:41.653259 env[1146]: time="2024-02-09T18:29:41.653255760Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Feb 9 18:29:41.653372 env[1146]: time="2024-02-09T18:29:41.653269160Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Feb 9 18:29:41.653372 env[1146]: time="2024-02-09T18:29:41.653282440Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Feb 9 18:29:41.653663 env[1146]: time="2024-02-09T18:29:41.653639920Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Feb 9 18:29:41.653691 env[1146]: time="2024-02-09T18:29:41.653666440Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Feb 9 18:29:41.653691 env[1146]: time="2024-02-09T18:29:41.653680520Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Feb 9 18:29:41.653732 env[1146]: time="2024-02-09T18:29:41.653692960Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Feb 9 18:29:41.653732 env[1146]: time="2024-02-09T18:29:41.653705680Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Feb 9 18:29:41.653834 env[1146]: time="2024-02-09T18:29:41.653815000Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Feb 9 18:29:41.653905 env[1146]: time="2024-02-09T18:29:41.653890840Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Feb 9 18:29:41.654218 env[1146]: time="2024-02-09T18:29:41.654198360Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Feb 9 18:29:41.654247 env[1146]: time="2024-02-09T18:29:41.654232760Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654274 env[1146]: time="2024-02-09T18:29:41.654247120Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Feb 9 18:29:41.654372 env[1146]: time="2024-02-09T18:29:41.654357120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654400 env[1146]: time="2024-02-09T18:29:41.654375040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654400 env[1146]: time="2024-02-09T18:29:41.654388040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654437 env[1146]: time="2024-02-09T18:29:41.654399440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654437 env[1146]: time="2024-02-09T18:29:41.654411480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654437 env[1146]: time="2024-02-09T18:29:41.654423200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654437 env[1146]: time="2024-02-09T18:29:41.654434880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654513 env[1146]: time="2024-02-09T18:29:41.654446240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654513 env[1146]: time="2024-02-09T18:29:41.654458640Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Feb 9 18:29:41.654597 env[1146]: time="2024-02-09T18:29:41.654576560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654627 env[1146]: time="2024-02-09T18:29:41.654597920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654627 env[1146]: time="2024-02-09T18:29:41.654611560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654627 env[1146]: time="2024-02-09T18:29:41.654623240Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Feb 9 18:29:41.654681 env[1146]: time="2024-02-09T18:29:41.654637200Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Feb 9 18:29:41.654681 env[1146]: time="2024-02-09T18:29:41.654647600Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Feb 9 18:29:41.654681 env[1146]: time="2024-02-09T18:29:41.654664280Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Feb 9 18:29:41.654781 env[1146]: time="2024-02-09T18:29:41.654695560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Feb 9 18:29:41.654934 env[1146]: time="2024-02-09T18:29:41.654883120Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.654939920Z" level=info msg="Connect containerd service" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.654971960Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.655614840Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.656194720Z" level=info msg="Start subscribing containerd event" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.656234200Z" level=info msg="Start recovering state" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.656285440Z" level=info msg="Start event monitor" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.656320480Z" level=info msg="Start snapshots syncer" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.656330840Z" level=info msg="Start cni network conf syncer for default" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.656338040Z" level=info msg="Start streaming server" Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.656536800Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Feb 9 18:29:41.657373 env[1146]: time="2024-02-09T18:29:41.656574120Z" level=info msg=serving... address=/run/containerd/containerd.sock Feb 9 18:29:41.656751 systemd[1]: Started containerd.service. Feb 9 18:29:41.661465 env[1146]: time="2024-02-09T18:29:41.661433760Z" level=info msg="containerd successfully booted in 0.044152s" Feb 9 18:29:41.691384 tar[1143]: ./ptp Feb 9 18:29:41.726268 tar[1143]: ./vlan Feb 9 18:29:41.760469 tar[1143]: ./host-device Feb 9 18:29:41.793556 tar[1143]: ./tuning Feb 9 18:29:41.823317 tar[1143]: ./vrf Feb 9 18:29:41.853841 tar[1143]: ./sbr Feb 9 18:29:41.883509 tar[1143]: ./tap Feb 9 18:29:41.917822 tar[1143]: ./dhcp Feb 9 18:29:41.946103 tar[1145]: linux-arm64/LICENSE Feb 9 18:29:41.946103 tar[1145]: linux-arm64/README.md Feb 9 18:29:41.949897 systemd[1]: Finished prepare-helm.service. Feb 9 18:29:41.953023 locksmithd[1176]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Feb 9 18:29:41.976928 systemd[1]: Finished prepare-critools.service. Feb 9 18:29:41.996390 tar[1143]: ./static Feb 9 18:29:42.016749 tar[1143]: ./firewall Feb 9 18:29:42.024421 systemd-networkd[1054]: eth0: Gained IPv6LL Feb 9 18:29:42.048062 tar[1143]: ./macvlan Feb 9 18:29:42.075771 tar[1143]: ./dummy Feb 9 18:29:42.102929 tar[1143]: ./bridge Feb 9 18:29:42.132665 tar[1143]: ./ipvlan Feb 9 18:29:42.159990 tar[1143]: ./portmap Feb 9 18:29:42.185928 tar[1143]: ./host-local Feb 9 18:29:42.219754 systemd[1]: Finished prepare-cni-plugins.service. Feb 9 18:29:44.453551 sshd_keygen[1140]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Feb 9 18:29:44.469852 systemd[1]: Finished sshd-keygen.service. Feb 9 18:29:44.471973 systemd[1]: Starting issuegen.service... Feb 9 18:29:44.475994 systemd[1]: issuegen.service: Deactivated successfully. Feb 9 18:29:44.476135 systemd[1]: Finished issuegen.service. Feb 9 18:29:44.478037 systemd[1]: Starting systemd-user-sessions.service... Feb 9 18:29:44.483131 systemd[1]: Finished systemd-user-sessions.service. Feb 9 18:29:44.485134 systemd[1]: Started getty@tty1.service. Feb 9 18:29:44.486908 systemd[1]: Started serial-getty@ttyAMA0.service. Feb 9 18:29:44.487847 systemd[1]: Reached target getty.target. Feb 9 18:29:44.488609 systemd[1]: Reached target multi-user.target. Feb 9 18:29:44.490417 systemd[1]: Starting systemd-update-utmp-runlevel.service... Feb 9 18:29:44.496289 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Feb 9 18:29:44.496434 systemd[1]: Finished systemd-update-utmp-runlevel.service. Feb 9 18:29:44.497405 systemd[1]: Startup finished in 567ms (kernel) + 5.610s (initrd) + 6.309s (userspace) = 12.488s. Feb 9 18:29:44.686433 systemd[1]: Created slice system-sshd.slice. Feb 9 18:29:44.687484 systemd[1]: Started sshd@0-10.0.0.66:22-10.0.0.1:39264.service. Feb 9 18:29:44.731685 sshd[1206]: Accepted publickey for core from 10.0.0.1 port 39264 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:29:44.733801 sshd[1206]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:29:44.742849 systemd[1]: Created slice user-500.slice. Feb 9 18:29:44.743866 systemd[1]: Starting user-runtime-dir@500.service... Feb 9 18:29:44.745448 systemd-logind[1135]: New session 1 of user core. Feb 9 18:29:44.751058 systemd[1]: Finished user-runtime-dir@500.service. Feb 9 18:29:44.752252 systemd[1]: Starting user@500.service... Feb 9 18:29:44.754672 (systemd)[1209]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:29:44.809848 systemd[1209]: Queued start job for default target default.target. Feb 9 18:29:44.810343 systemd[1209]: Reached target paths.target. Feb 9 18:29:44.810363 systemd[1209]: Reached target sockets.target. Feb 9 18:29:44.810373 systemd[1209]: Reached target timers.target. Feb 9 18:29:44.810383 systemd[1209]: Reached target basic.target. Feb 9 18:29:44.810434 systemd[1209]: Reached target default.target. Feb 9 18:29:44.810458 systemd[1209]: Startup finished in 50ms. Feb 9 18:29:44.810638 systemd[1]: Started user@500.service. Feb 9 18:29:44.811545 systemd[1]: Started session-1.scope. Feb 9 18:29:44.860058 systemd[1]: Started sshd@1-10.0.0.66:22-10.0.0.1:39274.service. Feb 9 18:29:44.903165 sshd[1218]: Accepted publickey for core from 10.0.0.1 port 39274 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:29:44.904621 sshd[1218]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:29:44.908008 systemd-logind[1135]: New session 2 of user core. Feb 9 18:29:44.908763 systemd[1]: Started session-2.scope. Feb 9 18:29:44.963373 sshd[1218]: pam_unix(sshd:session): session closed for user core Feb 9 18:29:44.965696 systemd[1]: sshd@1-10.0.0.66:22-10.0.0.1:39274.service: Deactivated successfully. Feb 9 18:29:44.966223 systemd[1]: session-2.scope: Deactivated successfully. Feb 9 18:29:44.966694 systemd-logind[1135]: Session 2 logged out. Waiting for processes to exit. Feb 9 18:29:44.967965 systemd[1]: Started sshd@2-10.0.0.66:22-10.0.0.1:39282.service. Feb 9 18:29:44.968499 systemd-logind[1135]: Removed session 2. Feb 9 18:29:45.005146 sshd[1224]: Accepted publickey for core from 10.0.0.1 port 39282 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:29:45.006428 sshd[1224]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:29:45.009641 systemd-logind[1135]: New session 3 of user core. Feb 9 18:29:45.010427 systemd[1]: Started session-3.scope. Feb 9 18:29:45.056795 sshd[1224]: pam_unix(sshd:session): session closed for user core Feb 9 18:29:45.060486 systemd[1]: sshd@2-10.0.0.66:22-10.0.0.1:39282.service: Deactivated successfully. Feb 9 18:29:45.060979 systemd[1]: session-3.scope: Deactivated successfully. Feb 9 18:29:45.061509 systemd-logind[1135]: Session 3 logged out. Waiting for processes to exit. Feb 9 18:29:45.062473 systemd[1]: Started sshd@3-10.0.0.66:22-10.0.0.1:39284.service. Feb 9 18:29:45.063284 systemd-logind[1135]: Removed session 3. Feb 9 18:29:45.098642 sshd[1230]: Accepted publickey for core from 10.0.0.1 port 39284 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:29:45.099877 sshd[1230]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:29:45.102673 systemd-logind[1135]: New session 4 of user core. Feb 9 18:29:45.103370 systemd[1]: Started session-4.scope. Feb 9 18:29:45.154335 sshd[1230]: pam_unix(sshd:session): session closed for user core Feb 9 18:29:45.157859 systemd[1]: sshd@3-10.0.0.66:22-10.0.0.1:39284.service: Deactivated successfully. Feb 9 18:29:45.158368 systemd[1]: session-4.scope: Deactivated successfully. Feb 9 18:29:45.158849 systemd-logind[1135]: Session 4 logged out. Waiting for processes to exit. Feb 9 18:29:45.159820 systemd[1]: Started sshd@4-10.0.0.66:22-10.0.0.1:39294.service. Feb 9 18:29:45.160450 systemd-logind[1135]: Removed session 4. Feb 9 18:29:45.201486 sshd[1236]: Accepted publickey for core from 10.0.0.1 port 39294 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:29:45.202649 sshd[1236]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:29:45.205865 systemd-logind[1135]: New session 5 of user core. Feb 9 18:29:45.206632 systemd[1]: Started session-5.scope. Feb 9 18:29:45.260908 sudo[1239]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Feb 9 18:29:45.261116 sudo[1239]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 18:29:45.272111 dbus-daemon[1118]: avc: received setenforce notice (enforcing=1) Feb 9 18:29:45.273228 sudo[1239]: pam_unix(sudo:session): session closed for user root Feb 9 18:29:45.275406 sshd[1236]: pam_unix(sshd:session): session closed for user core Feb 9 18:29:45.278044 systemd[1]: sshd@4-10.0.0.66:22-10.0.0.1:39294.service: Deactivated successfully. Feb 9 18:29:45.278643 systemd[1]: session-5.scope: Deactivated successfully. Feb 9 18:29:45.279129 systemd-logind[1135]: Session 5 logged out. Waiting for processes to exit. Feb 9 18:29:45.280142 systemd[1]: Started sshd@5-10.0.0.66:22-10.0.0.1:39302.service. Feb 9 18:29:45.280756 systemd-logind[1135]: Removed session 5. Feb 9 18:29:45.317816 sshd[1243]: Accepted publickey for core from 10.0.0.1 port 39302 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:29:45.318979 sshd[1243]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:29:45.321973 systemd-logind[1135]: New session 6 of user core. Feb 9 18:29:45.322752 systemd[1]: Started session-6.scope. Feb 9 18:29:45.372202 sudo[1247]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Feb 9 18:29:45.372436 sudo[1247]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 18:29:45.374888 sudo[1247]: pam_unix(sudo:session): session closed for user root Feb 9 18:29:45.378560 sudo[1246]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Feb 9 18:29:45.378744 sudo[1246]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 18:29:45.386000 systemd[1]: Stopping audit-rules.service... Feb 9 18:29:45.385000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 18:29:45.387158 auditctl[1250]: No rules Feb 9 18:29:45.387572 kernel: kauditd_printk_skb: 138 callbacks suppressed Feb 9 18:29:45.387614 kernel: audit: type=1305 audit(1707503385.385:171): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Feb 9 18:29:45.387836 systemd[1]: audit-rules.service: Deactivated successfully. Feb 9 18:29:45.387972 systemd[1]: Stopped audit-rules.service. Feb 9 18:29:45.385000 audit[1250]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe3718640 a2=420 a3=0 items=0 ppid=1 pid=1250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:45.389219 systemd[1]: Starting audit-rules.service... Feb 9 18:29:45.391214 kernel: audit: type=1300 audit(1707503385.385:171): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffe3718640 a2=420 a3=0 items=0 ppid=1 pid=1250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:45.391254 kernel: audit: type=1327 audit(1707503385.385:171): proctitle=2F7362696E2F617564697463746C002D44 Feb 9 18:29:45.385000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Feb 9 18:29:45.392374 kernel: audit: type=1131 audit(1707503385.386:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.403556 augenrules[1267]: No rules Feb 9 18:29:45.404334 systemd[1]: Finished audit-rules.service. Feb 9 18:29:45.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.406331 kernel: audit: type=1130 audit(1707503385.404:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.406419 sudo[1246]: pam_unix(sudo:session): session closed for user root Feb 9 18:29:45.405000 audit[1246]: USER_END pid=1246 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.407660 sshd[1243]: pam_unix(sshd:session): session closed for user core Feb 9 18:29:45.409335 kernel: audit: type=1106 audit(1707503385.405:174): pid=1246 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.409378 kernel: audit: type=1104 audit(1707503385.405:175): pid=1246 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.405000 audit[1246]: CRED_DISP pid=1246 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.409000 audit[1243]: USER_END pid=1243 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:29:45.410870 systemd[1]: Started sshd@6-10.0.0.66:22-10.0.0.1:39314.service. Feb 9 18:29:45.411961 systemd[1]: sshd@5-10.0.0.66:22-10.0.0.1:39302.service: Deactivated successfully. Feb 9 18:29:45.412538 systemd[1]: session-6.scope: Deactivated successfully. Feb 9 18:29:45.413631 kernel: audit: type=1106 audit(1707503385.409:176): pid=1243 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:29:45.413657 kernel: audit: type=1104 audit(1707503385.409:177): pid=1243 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:29:45.409000 audit[1243]: CRED_DISP pid=1243 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:29:45.414359 systemd-logind[1135]: Session 6 logged out. Waiting for processes to exit. Feb 9 18:29:45.415063 systemd-logind[1135]: Removed session 6. Feb 9 18:29:45.409000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.66:22-10.0.0.1:39314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.417407 kernel: audit: type=1130 audit(1707503385.409:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.66:22-10.0.0.1:39314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.66:22-10.0.0.1:39302 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.446000 audit[1272]: USER_ACCT pid=1272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:29:45.448275 sshd[1272]: Accepted publickey for core from 10.0.0.1 port 39314 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:29:45.447000 audit[1272]: CRED_ACQ pid=1272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:29:45.447000 audit[1272]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9516660 a2=3 a3=1 items=0 ppid=1 pid=1272 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:45.447000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:29:45.449575 sshd[1272]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:29:45.453082 systemd[1]: Started session-7.scope. Feb 9 18:29:45.453370 systemd-logind[1135]: New session 7 of user core. Feb 9 18:29:45.455000 audit[1272]: USER_START pid=1272 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:29:45.457000 audit[1276]: CRED_ACQ pid=1276 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:29:45.500000 audit[1277]: USER_ACCT pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.502396 sudo[1277]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Feb 9 18:29:45.501000 audit[1277]: CRED_REFR pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:29:45.502589 sudo[1277]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Feb 9 18:29:45.502000 audit[1277]: USER_START pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:29:46.062753 systemd[1]: Starting systemd-networkd-wait-online.service... Feb 9 18:29:46.068511 systemd[1]: Finished systemd-networkd-wait-online.service. Feb 9 18:29:46.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:46.069249 systemd[1]: Reached target network-online.target. Feb 9 18:29:46.070860 systemd[1]: Starting docker.service... Feb 9 18:29:46.195394 env[1295]: time="2024-02-09T18:29:46.195336819Z" level=info msg="Starting up" Feb 9 18:29:46.197005 env[1295]: time="2024-02-09T18:29:46.196966007Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 18:29:46.197005 env[1295]: time="2024-02-09T18:29:46.196988411Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 18:29:46.197090 env[1295]: time="2024-02-09T18:29:46.197023183Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 18:29:46.197090 env[1295]: time="2024-02-09T18:29:46.197036797Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 18:29:46.199630 env[1295]: time="2024-02-09T18:29:46.199596916Z" level=info msg="parsed scheme: \"unix\"" module=grpc Feb 9 18:29:46.199630 env[1295]: time="2024-02-09T18:29:46.199619398Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Feb 9 18:29:46.199716 env[1295]: time="2024-02-09T18:29:46.199633167Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Feb 9 18:29:46.199716 env[1295]: time="2024-02-09T18:29:46.199646353Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Feb 9 18:29:46.203566 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3244476793-merged.mount: Deactivated successfully. Feb 9 18:29:46.414647 env[1295]: time="2024-02-09T18:29:46.414468690Z" level=info msg="Loading containers: start." Feb 9 18:29:46.451000 audit[1330]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.451000 audit[1330]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffd2bcb860 a2=0 a3=1 items=0 ppid=1295 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.451000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Feb 9 18:29:46.453000 audit[1332]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.453000 audit[1332]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffebaeb2f0 a2=0 a3=1 items=0 ppid=1295 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.453000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Feb 9 18:29:46.454000 audit[1334]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.454000 audit[1334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe9772ac0 a2=0 a3=1 items=0 ppid=1295 pid=1334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.454000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 18:29:46.456000 audit[1336]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.456000 audit[1336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffc8805770 a2=0 a3=1 items=0 ppid=1295 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.456000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 18:29:46.458000 audit[1338]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1338 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.458000 audit[1338]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff7cbc800 a2=0 a3=1 items=0 ppid=1295 pid=1338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.458000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Feb 9 18:29:46.485000 audit[1343]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.485000 audit[1343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe7f6bdf0 a2=0 a3=1 items=0 ppid=1295 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.485000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Feb 9 18:29:46.491000 audit[1345]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.491000 audit[1345]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffea6aad00 a2=0 a3=1 items=0 ppid=1295 pid=1345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.491000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Feb 9 18:29:46.493000 audit[1347]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.493000 audit[1347]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff6e2bfa0 a2=0 a3=1 items=0 ppid=1295 pid=1347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.493000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Feb 9 18:29:46.494000 audit[1349]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.494000 audit[1349]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffc34946d0 a2=0 a3=1 items=0 ppid=1295 pid=1349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.494000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:29:46.500000 audit[1353]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1353 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.500000 audit[1353]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcb825380 a2=0 a3=1 items=0 ppid=1295 pid=1353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.500000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:29:46.501000 audit[1354]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1354 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.501000 audit[1354]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffde4a2bf0 a2=0 a3=1 items=0 ppid=1295 pid=1354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.501000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:29:46.508333 kernel: Initializing XFRM netlink socket Feb 9 18:29:46.529354 env[1295]: time="2024-02-09T18:29:46.529322213Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Feb 9 18:29:46.544000 audit[1362]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1362 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.544000 audit[1362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffffbabbfb0 a2=0 a3=1 items=0 ppid=1295 pid=1362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.544000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Feb 9 18:29:46.561000 audit[1365]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1365 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.561000 audit[1365]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffc52f9ba0 a2=0 a3=1 items=0 ppid=1295 pid=1365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.561000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Feb 9 18:29:46.563000 audit[1368]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1368 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.563000 audit[1368]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdec3f340 a2=0 a3=1 items=0 ppid=1295 pid=1368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.563000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Feb 9 18:29:46.565000 audit[1370]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1370 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.565000 audit[1370]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffdc1a3270 a2=0 a3=1 items=0 ppid=1295 pid=1370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.565000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Feb 9 18:29:46.567000 audit[1372]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1372 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.567000 audit[1372]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd818fec0 a2=0 a3=1 items=0 ppid=1295 pid=1372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.567000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Feb 9 18:29:46.568000 audit[1374]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1374 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.568000 audit[1374]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffe4d8e0c0 a2=0 a3=1 items=0 ppid=1295 pid=1374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.568000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Feb 9 18:29:46.570000 audit[1376]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1376 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.570000 audit[1376]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc2632310 a2=0 a3=1 items=0 ppid=1295 pid=1376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.570000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Feb 9 18:29:46.579000 audit[1379]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1379 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.579000 audit[1379]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffffebb6a60 a2=0 a3=1 items=0 ppid=1295 pid=1379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.579000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Feb 9 18:29:46.580000 audit[1381]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1381 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.580000 audit[1381]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffedab3190 a2=0 a3=1 items=0 ppid=1295 pid=1381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.580000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Feb 9 18:29:46.582000 audit[1383]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1383 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.582000 audit[1383]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe5b33330 a2=0 a3=1 items=0 ppid=1295 pid=1383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.582000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Feb 9 18:29:46.584000 audit[1385]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1385 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.584000 audit[1385]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc4e20e50 a2=0 a3=1 items=0 ppid=1295 pid=1385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.584000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Feb 9 18:29:46.584719 systemd-networkd[1054]: docker0: Link UP Feb 9 18:29:46.590000 audit[1389]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.590000 audit[1389]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc2be2f30 a2=0 a3=1 items=0 ppid=1295 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.590000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:29:46.591000 audit[1390]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1390 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:29:46.591000 audit[1390]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe609fd60 a2=0 a3=1 items=0 ppid=1295 pid=1390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:29:46.591000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Feb 9 18:29:46.592945 env[1295]: time="2024-02-09T18:29:46.592911698Z" level=info msg="Loading containers: done." Feb 9 18:29:46.609230 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2257418600-merged.mount: Deactivated successfully. Feb 9 18:29:46.614885 env[1295]: time="2024-02-09T18:29:46.614843855Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Feb 9 18:29:46.615021 env[1295]: time="2024-02-09T18:29:46.614999204Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Feb 9 18:29:46.615111 env[1295]: time="2024-02-09T18:29:46.615080769Z" level=info msg="Daemon has completed initialization" Feb 9 18:29:46.627418 systemd[1]: Started docker.service. Feb 9 18:29:46.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:46.633983 env[1295]: time="2024-02-09T18:29:46.633874504Z" level=info msg="API listen on /run/docker.sock" Feb 9 18:29:46.649483 systemd[1]: Reloading. Feb 9 18:29:46.690459 /usr/lib/systemd/system-generators/torcx-generator[1439]: time="2024-02-09T18:29:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 18:29:46.690488 /usr/lib/systemd/system-generators/torcx-generator[1439]: time="2024-02-09T18:29:46Z" level=info msg="torcx already run" Feb 9 18:29:46.744907 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 18:29:46.744926 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 18:29:46.761244 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit: BPF prog-id=37 op=LOAD Feb 9 18:29:46.803000 audit: BPF prog-id=32 op=UNLOAD Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit: BPF prog-id=38 op=LOAD Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit: BPF prog-id=39 op=LOAD Feb 9 18:29:46.803000 audit: BPF prog-id=33 op=UNLOAD Feb 9 18:29:46.803000 audit: BPF prog-id=34 op=UNLOAD Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit: BPF prog-id=40 op=LOAD Feb 9 18:29:46.804000 audit: BPF prog-id=27 op=UNLOAD Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit: BPF prog-id=41 op=LOAD Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.804000 audit: BPF prog-id=42 op=LOAD Feb 9 18:29:46.804000 audit: BPF prog-id=28 op=UNLOAD Feb 9 18:29:46.804000 audit: BPF prog-id=29 op=UNLOAD Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.805000 audit: BPF prog-id=43 op=LOAD Feb 9 18:29:46.805000 audit: BPF prog-id=31 op=UNLOAD Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit: BPF prog-id=44 op=LOAD Feb 9 18:29:46.806000 audit: BPF prog-id=21 op=UNLOAD Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit: BPF prog-id=45 op=LOAD Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit: BPF prog-id=46 op=LOAD Feb 9 18:29:46.806000 audit: BPF prog-id=22 op=UNLOAD Feb 9 18:29:46.806000 audit: BPF prog-id=23 op=UNLOAD Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit: BPF prog-id=47 op=LOAD Feb 9 18:29:46.807000 audit: BPF prog-id=30 op=UNLOAD Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.807000 audit: BPF prog-id=48 op=LOAD Feb 9 18:29:46.807000 audit: BPF prog-id=26 op=UNLOAD Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.808000 audit: BPF prog-id=49 op=LOAD Feb 9 18:29:46.808000 audit: BPF prog-id=35 op=UNLOAD Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit: BPF prog-id=50 op=LOAD Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:29:46.809000 audit: BPF prog-id=51 op=LOAD Feb 9 18:29:46.809000 audit: BPF prog-id=24 op=UNLOAD Feb 9 18:29:46.809000 audit: BPF prog-id=25 op=UNLOAD Feb 9 18:29:46.816524 systemd[1]: Started kubelet.service. Feb 9 18:29:46.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:46.933633 kubelet[1475]: E0209 18:29:46.933558 1475 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 9 18:29:46.935726 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 18:29:46.935847 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 18:29:46.935000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 18:29:47.222599 env[1146]: time="2024-02-09T18:29:47.222544882Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.6\"" Feb 9 18:29:47.884690 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1175808541.mount: Deactivated successfully. Feb 9 18:29:49.627719 env[1146]: time="2024-02-09T18:29:49.627671878Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:49.629047 env[1146]: time="2024-02-09T18:29:49.629006963Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:68142d88471bf00b1317307442bd31edbbc7532061d623e85659df2d417308fb,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:49.630634 env[1146]: time="2024-02-09T18:29:49.630605365Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:49.632876 env[1146]: time="2024-02-09T18:29:49.632839195Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:98a686df810b9f1de8e3b2ae869e79c51a36e7434d33c53f011852618aec0a68,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:49.633621 env[1146]: time="2024-02-09T18:29:49.633592364Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.6\" returns image reference \"sha256:68142d88471bf00b1317307442bd31edbbc7532061d623e85659df2d417308fb\"" Feb 9 18:29:49.642027 env[1146]: time="2024-02-09T18:29:49.642000064Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.6\"" Feb 9 18:29:51.752385 env[1146]: time="2024-02-09T18:29:51.752327522Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:51.753619 env[1146]: time="2024-02-09T18:29:51.753591843Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8dbd4fd1241644100b94eb40a9d284c5cf08fa7f2d15cafdf1ca8cec8443b31f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:51.755148 env[1146]: time="2024-02-09T18:29:51.755122381Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:51.756885 env[1146]: time="2024-02-09T18:29:51.756856120Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:80bdcd72cfe26028bb2fed75732fc2f511c35fa8d1edc03deae11f3490713c9e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:51.757611 env[1146]: time="2024-02-09T18:29:51.757571761Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.6\" returns image reference \"sha256:8dbd4fd1241644100b94eb40a9d284c5cf08fa7f2d15cafdf1ca8cec8443b31f\"" Feb 9 18:29:51.766492 env[1146]: time="2024-02-09T18:29:51.766446418Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.6\"" Feb 9 18:29:53.006269 env[1146]: time="2024-02-09T18:29:53.006221482Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:53.007728 env[1146]: time="2024-02-09T18:29:53.007699247Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:541cddf10a6c9bb71f141eeefea4203714984b67ec3582fb4538058af9e43663,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:53.009503 env[1146]: time="2024-02-09T18:29:53.009470475Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:53.011114 env[1146]: time="2024-02-09T18:29:53.011090243Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:a89db556c34d652d403d909882dbd97336f2e935b1c726b2e2b2c0400186ac39,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:53.011968 env[1146]: time="2024-02-09T18:29:53.011936370Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.6\" returns image reference \"sha256:541cddf10a6c9bb71f141eeefea4203714984b67ec3582fb4538058af9e43663\"" Feb 9 18:29:53.020611 env[1146]: time="2024-02-09T18:29:53.020580277Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.6\"" Feb 9 18:29:54.080443 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3976396930.mount: Deactivated successfully. Feb 9 18:29:54.470051 env[1146]: time="2024-02-09T18:29:54.470002779Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:54.471120 env[1146]: time="2024-02-09T18:29:54.471087313Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2d8b4f784b5f439fa536676861ad1144130a981e5ac011d08829ed921477ec74,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:54.472375 env[1146]: time="2024-02-09T18:29:54.472343206Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:54.473549 env[1146]: time="2024-02-09T18:29:54.473523186Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:3898a1671ae42be1cd3c2e777549bc7b5b306b8da3a224b747365f6679fb902a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:54.474113 env[1146]: time="2024-02-09T18:29:54.474085402Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.6\" returns image reference \"sha256:2d8b4f784b5f439fa536676861ad1144130a981e5ac011d08829ed921477ec74\"" Feb 9 18:29:54.481866 env[1146]: time="2024-02-09T18:29:54.481821953Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Feb 9 18:29:54.946995 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1634635635.mount: Deactivated successfully. Feb 9 18:29:54.951080 env[1146]: time="2024-02-09T18:29:54.951039163Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:54.952236 env[1146]: time="2024-02-09T18:29:54.952198620Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:54.956119 env[1146]: time="2024-02-09T18:29:54.956086508Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:54.957921 env[1146]: time="2024-02-09T18:29:54.957885876Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:54.958601 env[1146]: time="2024-02-09T18:29:54.958571748Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:829e9de338bd5fdd3f16f68f83a9fb288fbc8453e881e5d5cfd0f6f2ff72b43e\"" Feb 9 18:29:54.967801 env[1146]: time="2024-02-09T18:29:54.967769308Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Feb 9 18:29:55.524193 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount755305678.mount: Deactivated successfully. Feb 9 18:29:57.134986 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Feb 9 18:29:57.133000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:57.135161 systemd[1]: Stopped kubelet.service. Feb 9 18:29:57.135731 kernel: kauditd_printk_skb: 259 callbacks suppressed Feb 9 18:29:57.135775 kernel: audit: type=1130 audit(1707503397.133:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:57.139404 kernel: audit: type=1131 audit(1707503397.133:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:57.139489 kernel: audit: type=1130 audit(1707503397.135:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:57.133000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:57.135000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:29:57.136576 systemd[1]: Started kubelet.service. Feb 9 18:29:57.177725 kubelet[1531]: E0209 18:29:57.177681 1531 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Feb 9 18:29:57.180292 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Feb 9 18:29:57.180428 systemd[1]: kubelet.service: Failed with result 'exit-code'. Feb 9 18:29:57.180000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 18:29:57.183338 kernel: audit: type=1131 audit(1707503397.180:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Feb 9 18:29:58.203055 env[1146]: time="2024-02-09T18:29:58.202996134Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:58.207698 env[1146]: time="2024-02-09T18:29:58.207660494Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:58.209811 env[1146]: time="2024-02-09T18:29:58.209784379Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:58.211484 env[1146]: time="2024-02-09T18:29:58.211461004Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:58.212347 env[1146]: time="2024-02-09T18:29:58.212317694Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:9cdd6470f48c8b127530b7ce6ea4b3524137984481e48bcde619735890840ace\"" Feb 9 18:29:58.224309 env[1146]: time="2024-02-09T18:29:58.224062464Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Feb 9 18:29:58.770464 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount243763279.mount: Deactivated successfully. Feb 9 18:29:59.459837 env[1146]: time="2024-02-09T18:29:59.459767613Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:59.461714 env[1146]: time="2024-02-09T18:29:59.461676441Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:59.463087 env[1146]: time="2024-02-09T18:29:59.463062663Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:59.464734 env[1146]: time="2024-02-09T18:29:59.464699063Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:29:59.465371 env[1146]: time="2024-02-09T18:29:59.465345303Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:97e04611ad43405a2e5863ae17c6f1bc9181bdefdaa78627c432ef754a4eb108\"" Feb 9 18:30:04.546721 systemd[1]: Stopped kubelet.service. Feb 9 18:30:04.545000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:04.545000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:04.550477 kernel: audit: type=1130 audit(1707503404.545:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:04.550559 kernel: audit: type=1131 audit(1707503404.545:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:04.560250 systemd[1]: Reloading. Feb 9 18:30:04.617061 /usr/lib/systemd/system-generators/torcx-generator[1645]: time="2024-02-09T18:30:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 18:30:04.617089 /usr/lib/systemd/system-generators/torcx-generator[1645]: time="2024-02-09T18:30:04Z" level=info msg="torcx already run" Feb 9 18:30:04.670252 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 18:30:04.670270 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 18:30:04.686809 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 18:30:04.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.735824 kernel: audit: type=1400 audit(1707503404.731:394): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.735871 kernel: audit: type=1400 audit(1707503404.731:395): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.735892 kernel: audit: type=1400 audit(1707503404.731:396): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737482 kernel: audit: type=1400 audit(1707503404.731:397): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739131 kernel: audit: type=1400 audit(1707503404.731:398): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.740813 kernel: audit: type=1400 audit(1707503404.731:399): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.742487 kernel: audit: type=1400 audit(1707503404.731:400): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744088 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 9 18:30:04.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.732000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.732000 audit: BPF prog-id=52 op=LOAD Feb 9 18:30:04.732000 audit: BPF prog-id=37 op=UNLOAD Feb 9 18:30:04.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.734000 audit: BPF prog-id=53 op=LOAD Feb 9 18:30:04.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.734000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit: BPF prog-id=54 op=LOAD Feb 9 18:30:04.736000 audit: BPF prog-id=38 op=UNLOAD Feb 9 18:30:04.736000 audit: BPF prog-id=39 op=UNLOAD Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.736000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737000 audit: BPF prog-id=55 op=LOAD Feb 9 18:30:04.737000 audit: BPF prog-id=40 op=UNLOAD Feb 9 18:30:04.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.737000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739000 audit: BPF prog-id=56 op=LOAD Feb 9 18:30:04.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.741000 audit: BPF prog-id=57 op=LOAD Feb 9 18:30:04.741000 audit: BPF prog-id=41 op=UNLOAD Feb 9 18:30:04.741000 audit: BPF prog-id=42 op=UNLOAD Feb 9 18:30:04.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.743000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.743000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.743000 audit: BPF prog-id=58 op=LOAD Feb 9 18:30:04.743000 audit: BPF prog-id=43 op=UNLOAD Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit: BPF prog-id=59 op=LOAD Feb 9 18:30:04.744000 audit: BPF prog-id=44 op=UNLOAD Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit: BPF prog-id=60 op=LOAD Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit: BPF prog-id=61 op=LOAD Feb 9 18:30:04.744000 audit: BPF prog-id=45 op=UNLOAD Feb 9 18:30:04.744000 audit: BPF prog-id=46 op=UNLOAD Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.744000 audit: BPF prog-id=62 op=LOAD Feb 9 18:30:04.745000 audit: BPF prog-id=47 op=UNLOAD Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.745000 audit: BPF prog-id=63 op=LOAD Feb 9 18:30:04.745000 audit: BPF prog-id=48 op=UNLOAD Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.746000 audit: BPF prog-id=64 op=LOAD Feb 9 18:30:04.746000 audit: BPF prog-id=49 op=UNLOAD Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit: BPF prog-id=65 op=LOAD Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:04.747000 audit: BPF prog-id=66 op=LOAD Feb 9 18:30:04.747000 audit: BPF prog-id=50 op=UNLOAD Feb 9 18:30:04.747000 audit: BPF prog-id=51 op=UNLOAD Feb 9 18:30:04.758967 systemd[1]: Started kubelet.service. Feb 9 18:30:04.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:04.795524 kubelet[1681]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 18:30:04.795524 kubelet[1681]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 18:30:04.795524 kubelet[1681]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 18:30:04.795829 kubelet[1681]: I0209 18:30:04.795569 1681 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 18:30:05.855770 kubelet[1681]: I0209 18:30:05.855729 1681 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Feb 9 18:30:05.855770 kubelet[1681]: I0209 18:30:05.855761 1681 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 18:30:05.856105 kubelet[1681]: I0209 18:30:05.856008 1681 server.go:895] "Client rotation is on, will bootstrap in background" Feb 9 18:30:05.860778 kubelet[1681]: I0209 18:30:05.860750 1681 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 18:30:05.860910 kubelet[1681]: E0209 18:30:05.860888 1681 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.66:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:05.864979 kubelet[1681]: W0209 18:30:05.864956 1681 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 18:30:05.865747 kubelet[1681]: I0209 18:30:05.865727 1681 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 18:30:05.866031 kubelet[1681]: I0209 18:30:05.866015 1681 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 18:30:05.866253 kubelet[1681]: I0209 18:30:05.866235 1681 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Feb 9 18:30:05.866407 kubelet[1681]: I0209 18:30:05.866393 1681 topology_manager.go:138] "Creating topology manager with none policy" Feb 9 18:30:05.866479 kubelet[1681]: I0209 18:30:05.866469 1681 container_manager_linux.go:301] "Creating device plugin manager" Feb 9 18:30:05.866619 kubelet[1681]: I0209 18:30:05.866606 1681 state_mem.go:36] "Initialized new in-memory state store" Feb 9 18:30:05.866898 kubelet[1681]: I0209 18:30:05.866883 1681 kubelet.go:393] "Attempting to sync node with API server" Feb 9 18:30:05.866967 kubelet[1681]: I0209 18:30:05.866957 1681 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 18:30:05.867060 kubelet[1681]: I0209 18:30:05.867044 1681 kubelet.go:309] "Adding apiserver pod source" Feb 9 18:30:05.867225 kubelet[1681]: I0209 18:30:05.867215 1681 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 18:30:05.867451 kubelet[1681]: W0209 18:30:05.867349 1681 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.66:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:05.867451 kubelet[1681]: E0209 18:30:05.867403 1681 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.66:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:05.867899 kubelet[1681]: W0209 18:30:05.867867 1681 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.66:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:05.867979 kubelet[1681]: E0209 18:30:05.867969 1681 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.66:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:05.868554 kubelet[1681]: I0209 18:30:05.868541 1681 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 18:30:05.869034 kubelet[1681]: W0209 18:30:05.869020 1681 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Feb 9 18:30:05.870162 kubelet[1681]: I0209 18:30:05.870145 1681 server.go:1232] "Started kubelet" Feb 9 18:30:05.870763 kubelet[1681]: E0209 18:30:05.870739 1681 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 18:30:05.870763 kubelet[1681]: E0209 18:30:05.870763 1681 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 18:30:05.870932 kubelet[1681]: E0209 18:30:05.870685 1681 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"localhost.17b2454d07a87a3d", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"localhost", UID:"localhost", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"localhost"}, FirstTimestamp:time.Date(2024, time.February, 9, 18, 30, 5, 870119485, time.Local), LastTimestamp:time.Date(2024, time.February, 9, 18, 30, 5, 870119485, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"localhost"}': 'Post "https://10.0.0.66:6443/api/v1/namespaces/default/events": dial tcp 10.0.0.66:6443: connect: connection refused'(may retry after sleeping) Feb 9 18:30:05.870932 kubelet[1681]: I0209 18:30:05.870931 1681 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 18:30:05.871036 kubelet[1681]: I0209 18:30:05.870953 1681 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 18:30:05.871219 kubelet[1681]: I0209 18:30:05.871188 1681 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Feb 9 18:30:05.870000 audit[1681]: AVC avc: denied { mac_admin } for pid=1681 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:05.870000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:30:05.870000 audit[1681]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e80600 a1=4000d573f8 a2=4000e805d0 a3=25 items=0 ppid=1 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.870000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:30:05.870000 audit[1681]: AVC avc: denied { mac_admin } for pid=1681 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:05.870000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:30:05.870000 audit[1681]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000d7ed40 a1=4000d57410 a2=4000e80690 a3=25 items=0 ppid=1 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.870000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:30:05.872487 kubelet[1681]: I0209 18:30:05.872115 1681 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 18:30:05.872487 kubelet[1681]: I0209 18:30:05.872149 1681 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 18:30:05.872487 kubelet[1681]: I0209 18:30:05.872236 1681 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 18:30:05.874028 kubelet[1681]: I0209 18:30:05.874000 1681 volume_manager.go:291] "Starting Kubelet Volume Manager" Feb 9 18:30:05.874416 kubelet[1681]: I0209 18:30:05.874399 1681 server.go:462] "Adding debug handlers to kubelet server" Feb 9 18:30:05.875216 kubelet[1681]: I0209 18:30:05.875191 1681 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 9 18:30:05.875353 kubelet[1681]: I0209 18:30:05.875342 1681 reconciler_new.go:29] "Reconciler: start to sync state" Feb 9 18:30:05.875403 kubelet[1681]: E0209 18:30:05.875384 1681 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.66:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.66:6443: connect: connection refused" interval="200ms" Feb 9 18:30:05.875602 kubelet[1681]: W0209 18:30:05.875561 1681 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.66:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:05.875635 kubelet[1681]: E0209 18:30:05.875613 1681 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.66:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:05.876000 audit[1693]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1693 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:05.876000 audit[1693]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd3d62bb0 a2=0 a3=1 items=0 ppid=1681 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.876000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 18:30:05.877000 audit[1694]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1694 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:05.877000 audit[1694]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff49f7eb0 a2=0 a3=1 items=0 ppid=1681 pid=1694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.877000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 18:30:05.879000 audit[1696]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1696 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:05.879000 audit[1696]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffffe0672f0 a2=0 a3=1 items=0 ppid=1681 pid=1696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.879000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 18:30:05.881000 audit[1698]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1698 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:05.881000 audit[1698]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffebec3af0 a2=0 a3=1 items=0 ppid=1681 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.881000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 18:30:05.886000 audit[1701]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1701 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:05.886000 audit[1701]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffe63d5de0 a2=0 a3=1 items=0 ppid=1681 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.886000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Feb 9 18:30:05.888497 kubelet[1681]: I0209 18:30:05.888477 1681 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Feb 9 18:30:05.887000 audit[1703]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1703 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:05.887000 audit[1703]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffef0bece0 a2=0 a3=1 items=0 ppid=1681 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.887000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Feb 9 18:30:05.889567 kubelet[1681]: I0209 18:30:05.889551 1681 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Feb 9 18:30:05.889645 kubelet[1681]: I0209 18:30:05.889635 1681 status_manager.go:217] "Starting to sync pod status with apiserver" Feb 9 18:30:05.889704 kubelet[1681]: I0209 18:30:05.889695 1681 kubelet.go:2303] "Starting kubelet main sync loop" Feb 9 18:30:05.889811 kubelet[1681]: E0209 18:30:05.889798 1681 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 18:30:05.889000 audit[1705]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1705 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:05.889000 audit[1705]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffff2b1ca0 a2=0 a3=1 items=0 ppid=1681 pid=1705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 18:30:05.890000 audit[1707]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1707 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:05.890000 audit[1707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffefe5f070 a2=0 a3=1 items=0 ppid=1681 pid=1707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.890000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 18:30:05.891000 audit[1708]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1708 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:05.891000 audit[1708]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc6bfb680 a2=0 a3=1 items=0 ppid=1681 pid=1708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.891000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 18:30:05.891000 audit[1709]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1709 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:05.891000 audit[1709]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff4abb550 a2=0 a3=1 items=0 ppid=1681 pid=1709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.891000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Feb 9 18:30:05.893465 kubelet[1681]: W0209 18:30:05.893413 1681 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://10.0.0.66:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:05.893521 kubelet[1681]: E0209 18:30:05.893467 1681 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.66:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:05.893652 kubelet[1681]: I0209 18:30:05.893632 1681 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 18:30:05.893652 kubelet[1681]: I0209 18:30:05.893646 1681 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 18:30:05.893713 kubelet[1681]: I0209 18:30:05.893663 1681 state_mem.go:36] "Initialized new in-memory state store" Feb 9 18:30:05.892000 audit[1710]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1710 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:05.892000 audit[1710]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe1d9c510 a2=0 a3=1 items=0 ppid=1681 pid=1710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.892000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Feb 9 18:30:05.893000 audit[1713]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1713 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:05.893000 audit[1713]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd5c5a320 a2=0 a3=1 items=0 ppid=1681 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.893000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Feb 9 18:30:05.896109 kubelet[1681]: I0209 18:30:05.896089 1681 policy_none.go:49] "None policy: Start" Feb 9 18:30:05.896698 kubelet[1681]: I0209 18:30:05.896681 1681 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 18:30:05.896755 kubelet[1681]: I0209 18:30:05.896707 1681 state_mem.go:35] "Initializing new in-memory state store" Feb 9 18:30:05.901534 systemd[1]: Created slice kubepods.slice. Feb 9 18:30:05.904861 systemd[1]: Created slice kubepods-burstable.slice. Feb 9 18:30:05.906937 systemd[1]: Created slice kubepods-besteffort.slice. Feb 9 18:30:05.916963 kubelet[1681]: I0209 18:30:05.916941 1681 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 18:30:05.915000 audit[1681]: AVC avc: denied { mac_admin } for pid=1681 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:05.915000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:30:05.915000 audit[1681]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ac47b0 a1=4000d0ecd8 a2=4000ac4780 a3=25 items=0 ppid=1 pid=1681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:05.915000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:30:05.917162 kubelet[1681]: I0209 18:30:05.917001 1681 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 18:30:05.917470 kubelet[1681]: I0209 18:30:05.917292 1681 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 18:30:05.917710 kubelet[1681]: E0209 18:30:05.917694 1681 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Feb 9 18:30:05.976960 kubelet[1681]: I0209 18:30:05.976938 1681 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:30:05.977415 kubelet[1681]: E0209 18:30:05.977393 1681 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.66:6443/api/v1/nodes\": dial tcp 10.0.0.66:6443: connect: connection refused" node="localhost" Feb 9 18:30:05.990506 kubelet[1681]: I0209 18:30:05.990487 1681 topology_manager.go:215] "Topology Admit Handler" podUID="823a3415e6c1c35f06c29b38fe86736a" podNamespace="kube-system" podName="kube-apiserver-localhost" Feb 9 18:30:05.991356 kubelet[1681]: I0209 18:30:05.991336 1681 topology_manager.go:215] "Topology Admit Handler" podUID="212dcc5e2f08bec92c239ac5786b7e2b" podNamespace="kube-system" podName="kube-controller-manager-localhost" Feb 9 18:30:05.992276 kubelet[1681]: I0209 18:30:05.992257 1681 topology_manager.go:215] "Topology Admit Handler" podUID="d0325d16aab19669b5fea4b6623890e6" podNamespace="kube-system" podName="kube-scheduler-localhost" Feb 9 18:30:05.996467 systemd[1]: Created slice kubepods-burstable-pod823a3415e6c1c35f06c29b38fe86736a.slice. Feb 9 18:30:06.008631 systemd[1]: Created slice kubepods-burstable-pod212dcc5e2f08bec92c239ac5786b7e2b.slice. Feb 9 18:30:06.020004 systemd[1]: Created slice kubepods-burstable-podd0325d16aab19669b5fea4b6623890e6.slice. Feb 9 18:30:06.075816 kubelet[1681]: E0209 18:30:06.075792 1681 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.66:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.66:6443: connect: connection refused" interval="400ms" Feb 9 18:30:06.076123 kubelet[1681]: I0209 18:30:06.076108 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:06.076244 kubelet[1681]: I0209 18:30:06.076230 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/823a3415e6c1c35f06c29b38fe86736a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"823a3415e6c1c35f06c29b38fe86736a\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:30:06.076369 kubelet[1681]: I0209 18:30:06.076358 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/823a3415e6c1c35f06c29b38fe86736a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"823a3415e6c1c35f06c29b38fe86736a\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:30:06.076576 kubelet[1681]: I0209 18:30:06.076524 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/823a3415e6c1c35f06c29b38fe86736a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"823a3415e6c1c35f06c29b38fe86736a\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:30:06.076677 kubelet[1681]: I0209 18:30:06.076667 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:06.177150 kubelet[1681]: I0209 18:30:06.177098 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:06.177150 kubelet[1681]: I0209 18:30:06.177143 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:06.177424 kubelet[1681]: I0209 18:30:06.177163 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:06.177424 kubelet[1681]: I0209 18:30:06.177224 1681 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d0325d16aab19669b5fea4b6623890e6-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d0325d16aab19669b5fea4b6623890e6\") " pod="kube-system/kube-scheduler-localhost" Feb 9 18:30:06.179086 kubelet[1681]: I0209 18:30:06.179061 1681 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:30:06.179486 kubelet[1681]: E0209 18:30:06.179464 1681 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.66:6443/api/v1/nodes\": dial tcp 10.0.0.66:6443: connect: connection refused" node="localhost" Feb 9 18:30:06.308016 kubelet[1681]: E0209 18:30:06.307985 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:06.308676 env[1146]: time="2024-02-09T18:30:06.308631483Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:823a3415e6c1c35f06c29b38fe86736a,Namespace:kube-system,Attempt:0,}" Feb 9 18:30:06.319276 kubelet[1681]: E0209 18:30:06.319250 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:06.319807 env[1146]: time="2024-02-09T18:30:06.319766688Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:212dcc5e2f08bec92c239ac5786b7e2b,Namespace:kube-system,Attempt:0,}" Feb 9 18:30:06.321999 kubelet[1681]: E0209 18:30:06.321977 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:06.322451 env[1146]: time="2024-02-09T18:30:06.322405956Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d0325d16aab19669b5fea4b6623890e6,Namespace:kube-system,Attempt:0,}" Feb 9 18:30:06.476758 kubelet[1681]: E0209 18:30:06.476668 1681 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.66:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.66:6443: connect: connection refused" interval="800ms" Feb 9 18:30:06.581175 kubelet[1681]: I0209 18:30:06.581149 1681 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:30:06.581703 kubelet[1681]: E0209 18:30:06.581678 1681 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://10.0.0.66:6443/api/v1/nodes\": dial tcp 10.0.0.66:6443: connect: connection refused" node="localhost" Feb 9 18:30:06.676364 kubelet[1681]: W0209 18:30:06.676290 1681 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://10.0.0.66:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:06.676364 kubelet[1681]: E0209 18:30:06.676367 1681 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.66:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:06.782099 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2550342985.mount: Deactivated successfully. Feb 9 18:30:06.786436 env[1146]: time="2024-02-09T18:30:06.786399090Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.787619 env[1146]: time="2024-02-09T18:30:06.787588374Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.789651 env[1146]: time="2024-02-09T18:30:06.789626512Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.790616 env[1146]: time="2024-02-09T18:30:06.790588631Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.791861 env[1146]: time="2024-02-09T18:30:06.791835564Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.792545 env[1146]: time="2024-02-09T18:30:06.792522888Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.796497 env[1146]: time="2024-02-09T18:30:06.796463545Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.799489 env[1146]: time="2024-02-09T18:30:06.799444718Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.800781 env[1146]: time="2024-02-09T18:30:06.800745388Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.801614 env[1146]: time="2024-02-09T18:30:06.801578953Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.802410 env[1146]: time="2024-02-09T18:30:06.802386926Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.803123 env[1146]: time="2024-02-09T18:30:06.803103474Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:06.828877 env[1146]: time="2024-02-09T18:30:06.828567291Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:06.828877 env[1146]: time="2024-02-09T18:30:06.828598471Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:06.828877 env[1146]: time="2024-02-09T18:30:06.828608293Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:06.828877 env[1146]: time="2024-02-09T18:30:06.828707902Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/742a772c396b68eae7a57cb5446a2a71289e73c5855cae381142742665180ef4 pid=1730 runtime=io.containerd.runc.v2 Feb 9 18:30:06.828877 env[1146]: time="2024-02-09T18:30:06.828458140Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:06.828877 env[1146]: time="2024-02-09T18:30:06.828498143Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:06.828877 env[1146]: time="2024-02-09T18:30:06.828508364Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:06.828877 env[1146]: time="2024-02-09T18:30:06.828668936Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/22f405b7993b353794b2ff5ebea0076a2d9766fd32ad31aaf26469c9422d52f3 pid=1734 runtime=io.containerd.runc.v2 Feb 9 18:30:06.829158 env[1146]: time="2024-02-09T18:30:06.829061904Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:06.829158 env[1146]: time="2024-02-09T18:30:06.829097277Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:06.829158 env[1146]: time="2024-02-09T18:30:06.829115721Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:06.829375 env[1146]: time="2024-02-09T18:30:06.829330909Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/23945a67f5a3a5d52a21e52b4fcee31eee9e21304f46e0aaf5ec60dd13e130df pid=1735 runtime=io.containerd.runc.v2 Feb 9 18:30:06.841026 systemd[1]: Started cri-containerd-22f405b7993b353794b2ff5ebea0076a2d9766fd32ad31aaf26469c9422d52f3.scope. Feb 9 18:30:06.844069 systemd[1]: Started cri-containerd-23945a67f5a3a5d52a21e52b4fcee31eee9e21304f46e0aaf5ec60dd13e130df.scope. Feb 9 18:30:06.844964 systemd[1]: Started cri-containerd-742a772c396b68eae7a57cb5446a2a71289e73c5855cae381142742665180ef4.scope. Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit: BPF prog-id=67 op=LOAD Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1734 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232663430356237393933623335333739346232666635656265613030 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1734 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232663430356237393933623335333739346232666635656265613030 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit: BPF prog-id=68 op=LOAD Feb 9 18:30:06.877000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1734 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232663430356237393933623335333739346232666635656265613030 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.877000 audit: BPF prog-id=69 op=LOAD Feb 9 18:30:06.877000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1734 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.877000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232663430356237393933623335333739346232666635656265613030 Feb 9 18:30:06.878000 audit: BPF prog-id=69 op=UNLOAD Feb 9 18:30:06.878000 audit: BPF prog-id=68 op=UNLOAD Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { perfmon } for pid=1764 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit[1764]: AVC avc: denied { bpf } for pid=1764 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.878000 audit: BPF prog-id=70 op=LOAD Feb 9 18:30:06.878000 audit[1764]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1734 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232663430356237393933623335333739346232666635656265613030 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit: BPF prog-id=71 op=LOAD Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1730 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734326137373263333936623638656165376135376362353434366132 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1730 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734326137373263333936623638656165376135376362353434366132 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit: BPF prog-id=72 op=LOAD Feb 9 18:30:06.881000 audit[1765]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1730 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734326137373263333936623638656165376135376362353434366132 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit: BPF prog-id=73 op=LOAD Feb 9 18:30:06.881000 audit[1765]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1730 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734326137373263333936623638656165376135376362353434366132 Feb 9 18:30:06.881000 audit: BPF prog-id=73 op=UNLOAD Feb 9 18:30:06.881000 audit: BPF prog-id=72 op=UNLOAD Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { perfmon } for pid=1765 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit[1765]: AVC avc: denied { bpf } for pid=1765 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.881000 audit: BPF prog-id=74 op=LOAD Feb 9 18:30:06.881000 audit[1765]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1730 pid=1765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3734326137373263333936623638656165376135376362353434366132 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.883000 audit: BPF prog-id=75 op=LOAD Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1735 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233393435613637663561336135643532613231653532623466636565 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1735 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233393435613637663561336135643532613231653532623466636565 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.884000 audit: BPF prog-id=76 op=LOAD Feb 9 18:30:06.884000 audit[1763]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1735 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233393435613637663561336135643532613231653532623466636565 Feb 9 18:30:06.885000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.885000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.885000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.885000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.885000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.885000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.885000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.885000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.885000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.885000 audit: BPF prog-id=77 op=LOAD Feb 9 18:30:06.885000 audit[1763]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1735 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.885000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233393435613637663561336135643532613231653532623466636565 Feb 9 18:30:06.886000 audit: BPF prog-id=77 op=UNLOAD Feb 9 18:30:06.886000 audit: BPF prog-id=76 op=UNLOAD Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { perfmon } for pid=1763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit[1763]: AVC avc: denied { bpf } for pid=1763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.886000 audit: BPF prog-id=78 op=LOAD Feb 9 18:30:06.886000 audit[1763]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1735 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3233393435613637663561336135643532613231653532623466636565 Feb 9 18:30:06.889841 kubelet[1681]: W0209 18:30:06.889803 1681 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://10.0.0.66:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:06.890086 kubelet[1681]: E0209 18:30:06.889849 1681 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.66:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:06.904406 env[1146]: time="2024-02-09T18:30:06.904366435Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:d0325d16aab19669b5fea4b6623890e6,Namespace:kube-system,Attempt:0,} returns sandbox id \"22f405b7993b353794b2ff5ebea0076a2d9766fd32ad31aaf26469c9422d52f3\"" Feb 9 18:30:06.905687 kubelet[1681]: E0209 18:30:06.905667 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:06.911693 env[1146]: time="2024-02-09T18:30:06.910249853Z" level=info msg="CreateContainer within sandbox \"22f405b7993b353794b2ff5ebea0076a2d9766fd32ad31aaf26469c9422d52f3\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Feb 9 18:30:06.913553 kubelet[1681]: W0209 18:30:06.913498 1681 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://10.0.0.66:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:06.913612 kubelet[1681]: E0209 18:30:06.913562 1681 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.66:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.66:6443: connect: connection refused Feb 9 18:30:06.913792 env[1146]: time="2024-02-09T18:30:06.913746719Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:823a3415e6c1c35f06c29b38fe86736a,Namespace:kube-system,Attempt:0,} returns sandbox id \"23945a67f5a3a5d52a21e52b4fcee31eee9e21304f46e0aaf5ec60dd13e130df\"" Feb 9 18:30:06.914240 kubelet[1681]: E0209 18:30:06.914214 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:06.918913 env[1146]: time="2024-02-09T18:30:06.918868315Z" level=info msg="CreateContainer within sandbox \"23945a67f5a3a5d52a21e52b4fcee31eee9e21304f46e0aaf5ec60dd13e130df\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Feb 9 18:30:06.920288 env[1146]: time="2024-02-09T18:30:06.920243882Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:212dcc5e2f08bec92c239ac5786b7e2b,Namespace:kube-system,Attempt:0,} returns sandbox id \"742a772c396b68eae7a57cb5446a2a71289e73c5855cae381142742665180ef4\"" Feb 9 18:30:06.920909 kubelet[1681]: E0209 18:30:06.920890 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:06.922923 env[1146]: time="2024-02-09T18:30:06.922888459Z" level=info msg="CreateContainer within sandbox \"742a772c396b68eae7a57cb5446a2a71289e73c5855cae381142742665180ef4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Feb 9 18:30:06.932010 env[1146]: time="2024-02-09T18:30:06.931964686Z" level=info msg="CreateContainer within sandbox \"22f405b7993b353794b2ff5ebea0076a2d9766fd32ad31aaf26469c9422d52f3\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"7cecde5667d9517f2e277a43bc78759ad1d58a528638a4b2a8334b49aafb6f0d\"" Feb 9 18:30:06.932693 env[1146]: time="2024-02-09T18:30:06.932622347Z" level=info msg="StartContainer for \"7cecde5667d9517f2e277a43bc78759ad1d58a528638a4b2a8334b49aafb6f0d\"" Feb 9 18:30:06.933539 env[1146]: time="2024-02-09T18:30:06.933509089Z" level=info msg="CreateContainer within sandbox \"23945a67f5a3a5d52a21e52b4fcee31eee9e21304f46e0aaf5ec60dd13e130df\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"685f06c56e7b09d3b7624479f25423daa94d63e5b625fd0aa50504cbf6aff57b\"" Feb 9 18:30:06.933935 env[1146]: time="2024-02-09T18:30:06.933886886Z" level=info msg="StartContainer for \"685f06c56e7b09d3b7624479f25423daa94d63e5b625fd0aa50504cbf6aff57b\"" Feb 9 18:30:06.937907 env[1146]: time="2024-02-09T18:30:06.937873694Z" level=info msg="CreateContainer within sandbox \"742a772c396b68eae7a57cb5446a2a71289e73c5855cae381142742665180ef4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"f99d5f508bbd57edd5c8f07e594334e1815a4af60a019698c19a688f90742b28\"" Feb 9 18:30:06.938414 env[1146]: time="2024-02-09T18:30:06.938379486Z" level=info msg="StartContainer for \"f99d5f508bbd57edd5c8f07e594334e1815a4af60a019698c19a688f90742b28\"" Feb 9 18:30:06.949479 systemd[1]: Started cri-containerd-7cecde5667d9517f2e277a43bc78759ad1d58a528638a4b2a8334b49aafb6f0d.scope. Feb 9 18:30:06.963806 systemd[1]: Started cri-containerd-685f06c56e7b09d3b7624479f25423daa94d63e5b625fd0aa50504cbf6aff57b.scope. Feb 9 18:30:06.965763 systemd[1]: Started cri-containerd-f99d5f508bbd57edd5c8f07e594334e1815a4af60a019698c19a688f90742b28.scope. Feb 9 18:30:06.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.978000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.978000 audit: BPF prog-id=79 op=LOAD Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1734 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763656364653536363764393531376632653237376134336263373837 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1734 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763656364653536363764393531376632653237376134336263373837 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.979000 audit: BPF prog-id=80 op=LOAD Feb 9 18:30:06.979000 audit[1850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1734 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.979000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763656364653536363764393531376632653237376134336263373837 Feb 9 18:30:06.982000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.982000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.982000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.982000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.982000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.982000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.982000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.982000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.982000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.982000 audit: BPF prog-id=81 op=LOAD Feb 9 18:30:06.982000 audit[1850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1734 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763656364653536363764393531376632653237376134336263373837 Feb 9 18:30:06.984000 audit: BPF prog-id=81 op=UNLOAD Feb 9 18:30:06.984000 audit: BPF prog-id=80 op=UNLOAD Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { perfmon } for pid=1850 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit[1850]: AVC avc: denied { bpf } for pid=1850 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.984000 audit: BPF prog-id=82 op=LOAD Feb 9 18:30:06.984000 audit[1850]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1734 pid=1850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.984000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763656364653536363764393531376632653237376134336263373837 Feb 9 18:30:06.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.991000 audit: BPF prog-id=83 op=LOAD Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1735 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638356630366335366537623039643362373632343437396632353432 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1735 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638356630366335366537623039643362373632343437396632353432 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit: BPF prog-id=84 op=LOAD Feb 9 18:30:06.993000 audit[1865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1735 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638356630366335366537623039643362373632343437396632353432 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit: BPF prog-id=85 op=LOAD Feb 9 18:30:06.993000 audit[1865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1735 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638356630366335366537623039643362373632343437396632353432 Feb 9 18:30:06.993000 audit: BPF prog-id=85 op=UNLOAD Feb 9 18:30:06.993000 audit: BPF prog-id=84 op=UNLOAD Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { perfmon } for pid=1865 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit[1865]: AVC avc: denied { bpf } for pid=1865 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.993000 audit: BPF prog-id=86 op=LOAD Feb 9 18:30:06.993000 audit[1865]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1735 pid=1865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638356630366335366537623039643362373632343437396632353432 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.997000 audit: BPF prog-id=87 op=LOAD Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1730 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639396435663530386262643537656464356338663037653539343333 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1730 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639396435663530386262643537656464356338663037653539343333 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit: BPF prog-id=88 op=LOAD Feb 9 18:30:06.998000 audit[1869]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1730 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639396435663530386262643537656464356338663037653539343333 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit: BPF prog-id=89 op=LOAD Feb 9 18:30:06.998000 audit[1869]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1730 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639396435663530386262643537656464356338663037653539343333 Feb 9 18:30:06.998000 audit: BPF prog-id=89 op=UNLOAD Feb 9 18:30:06.998000 audit: BPF prog-id=88 op=UNLOAD Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { perfmon } for pid=1869 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit[1869]: AVC avc: denied { bpf } for pid=1869 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:06.998000 audit: BPF prog-id=90 op=LOAD Feb 9 18:30:06.998000 audit[1869]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1730 pid=1869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:06.998000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639396435663530386262643537656464356338663037653539343333 Feb 9 18:30:07.029151 env[1146]: time="2024-02-09T18:30:07.027221715Z" level=info msg="StartContainer for \"7cecde5667d9517f2e277a43bc78759ad1d58a528638a4b2a8334b49aafb6f0d\" returns successfully" Feb 9 18:30:07.029151 env[1146]: time="2024-02-09T18:30:07.027733937Z" level=info msg="StartContainer for \"685f06c56e7b09d3b7624479f25423daa94d63e5b625fd0aa50504cbf6aff57b\" returns successfully" Feb 9 18:30:07.039602 env[1146]: time="2024-02-09T18:30:07.037314055Z" level=info msg="StartContainer for \"f99d5f508bbd57edd5c8f07e594334e1815a4af60a019698c19a688f90742b28\" returns successfully" Feb 9 18:30:07.383843 kubelet[1681]: I0209 18:30:07.383750 1681 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:30:07.899288 kubelet[1681]: E0209 18:30:07.899262 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:07.900980 kubelet[1681]: E0209 18:30:07.900961 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:07.902514 kubelet[1681]: E0209 18:30:07.902496 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:08.185000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:08.185000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:08.185000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40004c72c0 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:30:08.185000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:30:08.185000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400019abc0 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:30:08.185000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:30:08.672000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:08.672000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40074cdb60 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:30:08.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:30:08.672000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:08.672000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4006494860 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:30:08.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:30:08.673000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:08.673000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=400779a210 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:30:08.673000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:30:08.674000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:08.674000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=48 a1=400779a270 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:30:08.674000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:30:08.675000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:08.675000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=4003150660 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:30:08.675000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:30:08.676000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:08.676000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=51 a1=40036e07e0 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:30:08.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:30:08.760800 kubelet[1681]: I0209 18:30:08.760768 1681 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 9 18:30:08.868127 kubelet[1681]: I0209 18:30:08.868076 1681 apiserver.go:52] "Watching apiserver" Feb 9 18:30:08.876286 kubelet[1681]: I0209 18:30:08.876247 1681 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 9 18:30:08.907535 kubelet[1681]: E0209 18:30:08.907506 1681 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Feb 9 18:30:08.908277 kubelet[1681]: E0209 18:30:08.908259 1681 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:11.331468 systemd[1]: Reloading. Feb 9 18:30:11.381002 /usr/lib/systemd/system-generators/torcx-generator[1972]: time="2024-02-09T18:30:11Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.2 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.2 /var/lib/torcx/store]" Feb 9 18:30:11.381031 /usr/lib/systemd/system-generators/torcx-generator[1972]: time="2024-02-09T18:30:11Z" level=info msg="torcx already run" Feb 9 18:30:11.438616 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Feb 9 18:30:11.438639 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Feb 9 18:30:11.455361 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Feb 9 18:30:11.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.509702 kernel: kauditd_printk_skb: 581 callbacks suppressed Feb 9 18:30:11.509753 kernel: audit: type=1400 audit(1707503411.507:697): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.513223 kernel: audit: type=1400 audit(1707503411.509:698): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.513324 kernel: audit: type=1400 audit(1707503411.509:699): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514887 kernel: audit: type=1400 audit(1707503411.509:700): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.518337 kernel: audit: type=1400 audit(1707503411.509:701): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.518387 kernel: audit: type=1400 audit(1707503411.509:702): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.520544 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Feb 9 18:30:11.520607 kernel: audit: type=1400 audit(1707503411.509:703): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.520633 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Feb 9 18:30:11.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.522893 kernel: audit: type=1400 audit(1707503411.509:704): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit: BPF prog-id=91 op=LOAD Feb 9 18:30:11.510000 audit: BPF prog-id=83 op=UNLOAD Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.512000 audit: BPF prog-id=92 op=LOAD Feb 9 18:30:11.512000 audit: BPF prog-id=52 op=UNLOAD Feb 9 18:30:11.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514000 audit: BPF prog-id=93 op=LOAD Feb 9 18:30:11.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit: BPF prog-id=94 op=LOAD Feb 9 18:30:11.515000 audit: BPF prog-id=53 op=UNLOAD Feb 9 18:30:11.515000 audit: BPF prog-id=54 op=UNLOAD Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.517000 audit: BPF prog-id=95 op=LOAD Feb 9 18:30:11.517000 audit: BPF prog-id=55 op=UNLOAD Feb 9 18:30:11.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.517000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.517000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.518000 audit: BPF prog-id=96 op=LOAD Feb 9 18:30:11.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.518000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.518000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.523000 audit: BPF prog-id=98 op=LOAD Feb 9 18:30:11.523000 audit: BPF prog-id=71 op=UNLOAD Feb 9 18:30:11.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit: BPF prog-id=99 op=LOAD Feb 9 18:30:11.525000 audit: BPF prog-id=58 op=UNLOAD Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit: BPF prog-id=100 op=LOAD Feb 9 18:30:11.526000 audit: BPF prog-id=59 op=UNLOAD Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit: BPF prog-id=101 op=LOAD Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit: BPF prog-id=102 op=LOAD Feb 9 18:30:11.526000 audit: BPF prog-id=60 op=UNLOAD Feb 9 18:30:11.526000 audit: BPF prog-id=61 op=UNLOAD Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.526000 audit: BPF prog-id=103 op=LOAD Feb 9 18:30:11.526000 audit: BPF prog-id=62 op=UNLOAD Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit: BPF prog-id=104 op=LOAD Feb 9 18:30:11.527000 audit: BPF prog-id=79 op=UNLOAD Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.527000 audit: BPF prog-id=105 op=LOAD Feb 9 18:30:11.527000 audit: BPF prog-id=63 op=UNLOAD Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.528000 audit: BPF prog-id=106 op=LOAD Feb 9 18:30:11.529000 audit: BPF prog-id=67 op=UNLOAD Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.529000 audit: BPF prog-id=107 op=LOAD Feb 9 18:30:11.529000 audit: BPF prog-id=87 op=UNLOAD Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.530000 audit: BPF prog-id=108 op=LOAD Feb 9 18:30:11.530000 audit: BPF prog-id=64 op=UNLOAD Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit: BPF prog-id=109 op=LOAD Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit: BPF prog-id=110 op=LOAD Feb 9 18:30:11.531000 audit: BPF prog-id=65 op=UNLOAD Feb 9 18:30:11.531000 audit: BPF prog-id=66 op=UNLOAD Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.531000 audit: BPF prog-id=111 op=LOAD Feb 9 18:30:11.531000 audit: BPF prog-id=75 op=UNLOAD Feb 9 18:30:11.542912 kubelet[1681]: I0209 18:30:11.542835 1681 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 18:30:11.542957 systemd[1]: Stopping kubelet.service... Feb 9 18:30:11.564692 systemd[1]: kubelet.service: Deactivated successfully. Feb 9 18:30:11.564886 systemd[1]: Stopped kubelet.service. Feb 9 18:30:11.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:11.564938 systemd[1]: kubelet.service: Consumed 1.352s CPU time. Feb 9 18:30:11.566599 systemd[1]: Started kubelet.service. Feb 9 18:30:11.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:11.630359 kubelet[2009]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 18:30:11.633979 kubelet[2009]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Feb 9 18:30:11.633979 kubelet[2009]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Feb 9 18:30:11.634409 kubelet[2009]: I0209 18:30:11.634210 2009 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Feb 9 18:30:11.638842 kubelet[2009]: I0209 18:30:11.638808 2009 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Feb 9 18:30:11.638842 kubelet[2009]: I0209 18:30:11.638837 2009 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Feb 9 18:30:11.639008 kubelet[2009]: I0209 18:30:11.638994 2009 server.go:895] "Client rotation is on, will bootstrap in background" Feb 9 18:30:11.640585 kubelet[2009]: I0209 18:30:11.640559 2009 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Feb 9 18:30:11.641553 kubelet[2009]: I0209 18:30:11.641518 2009 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Feb 9 18:30:11.646435 kubelet[2009]: W0209 18:30:11.646409 2009 machine.go:65] Cannot read vendor id correctly, set empty. Feb 9 18:30:11.647177 kubelet[2009]: I0209 18:30:11.647129 2009 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Feb 9 18:30:11.647382 kubelet[2009]: I0209 18:30:11.647365 2009 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Feb 9 18:30:11.647535 kubelet[2009]: I0209 18:30:11.647512 2009 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Feb 9 18:30:11.647535 kubelet[2009]: I0209 18:30:11.647535 2009 topology_manager.go:138] "Creating topology manager with none policy" Feb 9 18:30:11.647639 kubelet[2009]: I0209 18:30:11.647544 2009 container_manager_linux.go:301] "Creating device plugin manager" Feb 9 18:30:11.647639 kubelet[2009]: I0209 18:30:11.647571 2009 state_mem.go:36] "Initialized new in-memory state store" Feb 9 18:30:11.647679 kubelet[2009]: I0209 18:30:11.647661 2009 kubelet.go:393] "Attempting to sync node with API server" Feb 9 18:30:11.647679 kubelet[2009]: I0209 18:30:11.647677 2009 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Feb 9 18:30:11.647721 kubelet[2009]: I0209 18:30:11.647694 2009 kubelet.go:309] "Adding apiserver pod source" Feb 9 18:30:11.649394 kubelet[2009]: I0209 18:30:11.649374 2009 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Feb 9 18:30:11.650469 kubelet[2009]: I0209 18:30:11.650446 2009 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Feb 9 18:30:11.650905 kubelet[2009]: I0209 18:30:11.650888 2009 server.go:1232] "Started kubelet" Feb 9 18:30:11.652169 kubelet[2009]: E0209 18:30:11.652148 2009 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Feb 9 18:30:11.652224 kubelet[2009]: E0209 18:30:11.652175 2009 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Feb 9 18:30:11.652255 kubelet[2009]: I0209 18:30:11.652233 2009 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Feb 9 18:30:11.652502 kubelet[2009]: I0209 18:30:11.652484 2009 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Feb 9 18:30:11.652549 kubelet[2009]: I0209 18:30:11.652537 2009 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Feb 9 18:30:11.652655 kubelet[2009]: I0209 18:30:11.652640 2009 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Feb 9 18:30:11.652687 kubelet[2009]: I0209 18:30:11.652674 2009 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Feb 9 18:30:11.652715 kubelet[2009]: I0209 18:30:11.652696 2009 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Feb 9 18:30:11.653172 kubelet[2009]: I0209 18:30:11.653146 2009 server.go:462] "Adding debug handlers to kubelet server" Feb 9 18:30:11.651000 audit[2009]: AVC avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.651000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:30:11.651000 audit[2009]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a58150 a1=40005edf98 a2=4000a58120 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:11.651000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:30:11.651000 audit[2009]: AVC avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.651000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:30:11.651000 audit[2009]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40007f0a20 a1=40005edfb0 a2=4000a581e0 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:11.651000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:30:11.662999 kubelet[2009]: I0209 18:30:11.662020 2009 volume_manager.go:291] "Starting Kubelet Volume Manager" Feb 9 18:30:11.662999 kubelet[2009]: I0209 18:30:11.662123 2009 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Feb 9 18:30:11.662999 kubelet[2009]: I0209 18:30:11.662254 2009 reconciler_new.go:29] "Reconciler: start to sync state" Feb 9 18:30:11.685372 kubelet[2009]: I0209 18:30:11.685338 2009 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Feb 9 18:30:11.688652 kubelet[2009]: I0209 18:30:11.688470 2009 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Feb 9 18:30:11.688652 kubelet[2009]: I0209 18:30:11.688503 2009 status_manager.go:217] "Starting to sync pod status with apiserver" Feb 9 18:30:11.688652 kubelet[2009]: I0209 18:30:11.688521 2009 kubelet.go:2303] "Starting kubelet main sync loop" Feb 9 18:30:11.688652 kubelet[2009]: E0209 18:30:11.688577 2009 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Feb 9 18:30:11.710643 kubelet[2009]: I0209 18:30:11.710618 2009 cpu_manager.go:214] "Starting CPU manager" policy="none" Feb 9 18:30:11.710791 kubelet[2009]: I0209 18:30:11.710779 2009 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Feb 9 18:30:11.710854 kubelet[2009]: I0209 18:30:11.710845 2009 state_mem.go:36] "Initialized new in-memory state store" Feb 9 18:30:11.711055 kubelet[2009]: I0209 18:30:11.711041 2009 state_mem.go:88] "Updated default CPUSet" cpuSet="" Feb 9 18:30:11.711171 kubelet[2009]: I0209 18:30:11.711159 2009 state_mem.go:96] "Updated CPUSet assignments" assignments={} Feb 9 18:30:11.711263 kubelet[2009]: I0209 18:30:11.711252 2009 policy_none.go:49] "None policy: Start" Feb 9 18:30:11.711844 kubelet[2009]: I0209 18:30:11.711828 2009 memory_manager.go:169] "Starting memorymanager" policy="None" Feb 9 18:30:11.711896 kubelet[2009]: I0209 18:30:11.711857 2009 state_mem.go:35] "Initializing new in-memory state store" Feb 9 18:30:11.712034 kubelet[2009]: I0209 18:30:11.712021 2009 state_mem.go:75] "Updated machine memory state" Feb 9 18:30:11.715786 kubelet[2009]: I0209 18:30:11.715765 2009 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Feb 9 18:30:11.714000 audit[2009]: AVC avc: denied { mac_admin } for pid=2009 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:11.714000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Feb 9 18:30:11.714000 audit[2009]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000e5de00 a1=4000f717d0 a2=4000e5ddd0 a3=25 items=0 ppid=1 pid=2009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:11.714000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Feb 9 18:30:11.716136 kubelet[2009]: I0209 18:30:11.716117 2009 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Feb 9 18:30:11.716446 kubelet[2009]: I0209 18:30:11.716425 2009 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Feb 9 18:30:11.765187 kubelet[2009]: I0209 18:30:11.765155 2009 kubelet_node_status.go:70] "Attempting to register node" node="localhost" Feb 9 18:30:11.774717 kubelet[2009]: I0209 18:30:11.774683 2009 kubelet_node_status.go:108] "Node was previously registered" node="localhost" Feb 9 18:30:11.774842 kubelet[2009]: I0209 18:30:11.774774 2009 kubelet_node_status.go:73] "Successfully registered node" node="localhost" Feb 9 18:30:11.789497 kubelet[2009]: I0209 18:30:11.789468 2009 topology_manager.go:215] "Topology Admit Handler" podUID="823a3415e6c1c35f06c29b38fe86736a" podNamespace="kube-system" podName="kube-apiserver-localhost" Feb 9 18:30:11.789614 kubelet[2009]: I0209 18:30:11.789576 2009 topology_manager.go:215] "Topology Admit Handler" podUID="212dcc5e2f08bec92c239ac5786b7e2b" podNamespace="kube-system" podName="kube-controller-manager-localhost" Feb 9 18:30:11.789614 kubelet[2009]: I0209 18:30:11.789612 2009 topology_manager.go:215] "Topology Admit Handler" podUID="d0325d16aab19669b5fea4b6623890e6" podNamespace="kube-system" podName="kube-scheduler-localhost" Feb 9 18:30:11.862642 kubelet[2009]: I0209 18:30:11.862600 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:11.862642 kubelet[2009]: I0209 18:30:11.862647 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d0325d16aab19669b5fea4b6623890e6-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"d0325d16aab19669b5fea4b6623890e6\") " pod="kube-system/kube-scheduler-localhost" Feb 9 18:30:11.862814 kubelet[2009]: I0209 18:30:11.862669 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/823a3415e6c1c35f06c29b38fe86736a-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"823a3415e6c1c35f06c29b38fe86736a\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:30:11.862814 kubelet[2009]: I0209 18:30:11.862687 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/823a3415e6c1c35f06c29b38fe86736a-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"823a3415e6c1c35f06c29b38fe86736a\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:30:11.862814 kubelet[2009]: I0209 18:30:11.862705 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:11.862814 kubelet[2009]: I0209 18:30:11.862723 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:11.862814 kubelet[2009]: I0209 18:30:11.862750 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:11.862920 kubelet[2009]: I0209 18:30:11.862767 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/212dcc5e2f08bec92c239ac5786b7e2b-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"212dcc5e2f08bec92c239ac5786b7e2b\") " pod="kube-system/kube-controller-manager-localhost" Feb 9 18:30:11.862920 kubelet[2009]: I0209 18:30:11.862785 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/823a3415e6c1c35f06c29b38fe86736a-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"823a3415e6c1c35f06c29b38fe86736a\") " pod="kube-system/kube-apiserver-localhost" Feb 9 18:30:12.096526 kubelet[2009]: E0209 18:30:12.096482 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:12.096952 kubelet[2009]: E0209 18:30:12.096931 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:12.097077 kubelet[2009]: E0209 18:30:12.097060 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:12.650442 kubelet[2009]: I0209 18:30:12.650389 2009 apiserver.go:52] "Watching apiserver" Feb 9 18:30:12.662442 kubelet[2009]: I0209 18:30:12.662394 2009 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Feb 9 18:30:12.699726 kubelet[2009]: E0209 18:30:12.699685 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:12.700783 kubelet[2009]: E0209 18:30:12.700751 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:12.701008 kubelet[2009]: E0209 18:30:12.700978 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:12.734235 kubelet[2009]: I0209 18:30:12.734186 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.7341431470000002 podCreationTimestamp="2024-02-09 18:30:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:30:12.733964979 +0000 UTC m=+1.163162961" watchObservedRunningTime="2024-02-09 18:30:12.734143147 +0000 UTC m=+1.163341128" Feb 9 18:30:12.734387 kubelet[2009]: I0209 18:30:12.734324 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.734288901 podCreationTimestamp="2024-02-09 18:30:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:30:12.725875761 +0000 UTC m=+1.155073703" watchObservedRunningTime="2024-02-09 18:30:12.734288901 +0000 UTC m=+1.163486883" Feb 9 18:30:12.741394 kubelet[2009]: I0209 18:30:12.741353 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.741323424 podCreationTimestamp="2024-02-09 18:30:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:30:12.740845794 +0000 UTC m=+1.170043776" watchObservedRunningTime="2024-02-09 18:30:12.741323424 +0000 UTC m=+1.170521406" Feb 9 18:30:13.655000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:13.655000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fb58e0 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:30:13.655000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:30:13.656000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:13.656000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40002bdb80 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:30:13.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:30:13.656000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:13.656000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000b17e00 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:30:13.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:30:13.656000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:30:13.656000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000fb5a20 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:30:13.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:30:13.701174 kubelet[2009]: E0209 18:30:13.701126 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:15.374429 kubelet[2009]: E0209 18:30:15.374297 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:16.445584 sudo[1277]: pam_unix(sudo:session): session closed for user root Feb 9 18:30:16.444000 audit[1277]: USER_END pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:30:16.444000 audit[1277]: CRED_DISP pid=1277 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Feb 9 18:30:16.446934 sshd[1272]: pam_unix(sshd:session): session closed for user core Feb 9 18:30:16.446000 audit[1272]: USER_END pid=1272 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:16.446000 audit[1272]: CRED_DISP pid=1272 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:16.449660 systemd[1]: sshd@6-10.0.0.66:22-10.0.0.1:39314.service: Deactivated successfully. Feb 9 18:30:16.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.66:22-10.0.0.1:39314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:16.450406 systemd[1]: session-7.scope: Deactivated successfully. Feb 9 18:30:16.450594 systemd[1]: session-7.scope: Consumed 6.890s CPU time. Feb 9 18:30:16.450943 systemd-logind[1135]: Session 7 logged out. Waiting for processes to exit. Feb 9 18:30:16.451588 systemd-logind[1135]: Removed session 7. Feb 9 18:30:16.879012 kubelet[2009]: E0209 18:30:16.878892 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:19.531145 kubelet[2009]: E0209 18:30:19.531072 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:19.709677 kubelet[2009]: E0209 18:30:19.709649 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:24.670000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 9 18:30:24.671762 kernel: kauditd_printk_skb: 279 callbacks suppressed Feb 9 18:30:24.671812 kernel: audit: type=1400 audit(1707503424.670:948): avc: denied { watch } for pid=1900 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Feb 9 18:30:24.670000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000dd5bc0 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:30:24.677708 kernel: audit: type=1300 audit(1707503424.670:948): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000dd5bc0 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:30:24.677757 kernel: audit: type=1327 audit(1707503424.670:948): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:30:24.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:30:25.160981 kubelet[2009]: I0209 18:30:25.160952 2009 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Feb 9 18:30:25.161290 env[1146]: time="2024-02-09T18:30:25.161260794Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Feb 9 18:30:25.161480 kubelet[2009]: I0209 18:30:25.161429 2009 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Feb 9 18:30:25.383528 kubelet[2009]: E0209 18:30:25.383491 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:25.671535 kubelet[2009]: I0209 18:30:25.671506 2009 topology_manager.go:215] "Topology Admit Handler" podUID="599c31cd-8db0-4643-9ecb-33693cc464ed" podNamespace="kube-system" podName="kube-proxy-pzj6x" Feb 9 18:30:25.676142 systemd[1]: Created slice kubepods-besteffort-pod599c31cd_8db0_4643_9ecb_33693cc464ed.slice. Feb 9 18:30:25.767808 kubelet[2009]: I0209 18:30:25.767769 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/599c31cd-8db0-4643-9ecb-33693cc464ed-kube-proxy\") pod \"kube-proxy-pzj6x\" (UID: \"599c31cd-8db0-4643-9ecb-33693cc464ed\") " pod="kube-system/kube-proxy-pzj6x" Feb 9 18:30:25.767808 kubelet[2009]: I0209 18:30:25.767814 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/599c31cd-8db0-4643-9ecb-33693cc464ed-xtables-lock\") pod \"kube-proxy-pzj6x\" (UID: \"599c31cd-8db0-4643-9ecb-33693cc464ed\") " pod="kube-system/kube-proxy-pzj6x" Feb 9 18:30:25.767960 kubelet[2009]: I0209 18:30:25.767833 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/599c31cd-8db0-4643-9ecb-33693cc464ed-lib-modules\") pod \"kube-proxy-pzj6x\" (UID: \"599c31cd-8db0-4643-9ecb-33693cc464ed\") " pod="kube-system/kube-proxy-pzj6x" Feb 9 18:30:25.767960 kubelet[2009]: I0209 18:30:25.767857 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fhkkb\" (UniqueName: \"kubernetes.io/projected/599c31cd-8db0-4643-9ecb-33693cc464ed-kube-api-access-fhkkb\") pod \"kube-proxy-pzj6x\" (UID: \"599c31cd-8db0-4643-9ecb-33693cc464ed\") " pod="kube-system/kube-proxy-pzj6x" Feb 9 18:30:25.981744 kubelet[2009]: E0209 18:30:25.981654 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:25.982167 env[1146]: time="2024-02-09T18:30:25.982119430Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-pzj6x,Uid:599c31cd-8db0-4643-9ecb-33693cc464ed,Namespace:kube-system,Attempt:0,}" Feb 9 18:30:25.996145 env[1146]: time="2024-02-09T18:30:25.996060144Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:25.996145 env[1146]: time="2024-02-09T18:30:25.996109913Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:25.996145 env[1146]: time="2024-02-09T18:30:25.996120755Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:25.996463 env[1146]: time="2024-02-09T18:30:25.996429087Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/00ea6fd80866e4616b21d8b4fcf54795e0b7191e361714893607043d7509362a pid=2107 runtime=io.containerd.runc.v2 Feb 9 18:30:26.015471 systemd[1]: Started cri-containerd-00ea6fd80866e4616b21d8b4fcf54795e0b7191e361714893607043d7509362a.scope. Feb 9 18:30:26.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.079043 kernel: audit: type=1400 audit(1707503426.073:949): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.079086 kernel: audit: type=1400 audit(1707503426.073:950): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.079102 kernel: audit: type=1400 audit(1707503426.073:951): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.080766 kernel: audit: type=1400 audit(1707503426.073:952): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.082941 kernel: audit: type=1400 audit(1707503426.073:953): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.084871 kernel: audit: type=1400 audit(1707503426.073:954): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.089356 kernel: audit: type=1400 audit(1707503426.073:955): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.073000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.073000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit: BPF prog-id=112 op=LOAD Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2107 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030656136666438303836366534363136623231643862346663663534 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2107 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030656136666438303836366534363136623231643862346663663534 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.074000 audit: BPF prog-id=113 op=LOAD Feb 9 18:30:26.074000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2107 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.074000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030656136666438303836366534363136623231643862346663663534 Feb 9 18:30:26.076000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.076000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.076000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.076000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.076000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.076000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.076000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.076000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.076000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.076000 audit: BPF prog-id=114 op=LOAD Feb 9 18:30:26.076000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2107 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030656136666438303836366534363136623231643862346663663534 Feb 9 18:30:26.077000 audit: BPF prog-id=114 op=UNLOAD Feb 9 18:30:26.077000 audit: BPF prog-id=113 op=UNLOAD Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { perfmon } for pid=2116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit[2116]: AVC avc: denied { bpf } for pid=2116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.077000 audit: BPF prog-id=115 op=LOAD Feb 9 18:30:26.077000 audit[2116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2107 pid=2116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030656136666438303836366534363136623231643862346663663534 Feb 9 18:30:26.099159 env[1146]: time="2024-02-09T18:30:26.099104602Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-pzj6x,Uid:599c31cd-8db0-4643-9ecb-33693cc464ed,Namespace:kube-system,Attempt:0,} returns sandbox id \"00ea6fd80866e4616b21d8b4fcf54795e0b7191e361714893607043d7509362a\"" Feb 9 18:30:26.099934 kubelet[2009]: E0209 18:30:26.099896 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:26.105089 env[1146]: time="2024-02-09T18:30:26.105029529Z" level=info msg="CreateContainer within sandbox \"00ea6fd80866e4616b21d8b4fcf54795e0b7191e361714893607043d7509362a\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Feb 9 18:30:26.119532 env[1146]: time="2024-02-09T18:30:26.119480087Z" level=info msg="CreateContainer within sandbox \"00ea6fd80866e4616b21d8b4fcf54795e0b7191e361714893607043d7509362a\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"361f120f0f9c5e5fb280c0a79098d53e1bcb7aac63f0de3fb08da8cf7065610c\"" Feb 9 18:30:26.120239 env[1146]: time="2024-02-09T18:30:26.120200684Z" level=info msg="StartContainer for \"361f120f0f9c5e5fb280c0a79098d53e1bcb7aac63f0de3fb08da8cf7065610c\"" Feb 9 18:30:26.143619 kubelet[2009]: I0209 18:30:26.140033 2009 topology_manager.go:215] "Topology Admit Handler" podUID="ff7f816d-58de-42ce-a84c-e22ee3117447" podNamespace="tigera-operator" podName="tigera-operator-55585899bf-w8khm" Feb 9 18:30:26.151919 systemd[1]: Created slice kubepods-besteffort-podff7f816d_58de_42ce_a84c_e22ee3117447.slice. Feb 9 18:30:26.170192 kubelet[2009]: I0209 18:30:26.170091 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-x22z2\" (UniqueName: \"kubernetes.io/projected/ff7f816d-58de-42ce-a84c-e22ee3117447-kube-api-access-x22z2\") pod \"tigera-operator-55585899bf-w8khm\" (UID: \"ff7f816d-58de-42ce-a84c-e22ee3117447\") " pod="tigera-operator/tigera-operator-55585899bf-w8khm" Feb 9 18:30:26.170192 kubelet[2009]: I0209 18:30:26.170134 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ff7f816d-58de-42ce-a84c-e22ee3117447-var-lib-calico\") pod \"tigera-operator-55585899bf-w8khm\" (UID: \"ff7f816d-58de-42ce-a84c-e22ee3117447\") " pod="tigera-operator/tigera-operator-55585899bf-w8khm" Feb 9 18:30:26.170520 systemd[1]: Started cri-containerd-361f120f0f9c5e5fb280c0a79098d53e1bcb7aac63f0de3fb08da8cf7065610c.scope. Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bf5a0 a2=3c a3=0 items=0 ppid=2107 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336316631323066306639633565356662323830633061373930393864 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit: BPF prog-id=116 op=LOAD Feb 9 18:30:26.206000 audit[2148]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bf8e0 a2=78 a3=0 items=0 ppid=2107 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336316631323066306639633565356662323830633061373930393864 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit: BPF prog-id=117 op=LOAD Feb 9 18:30:26.206000 audit[2148]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bf670 a2=78 a3=0 items=0 ppid=2107 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336316631323066306639633565356662323830633061373930393864 Feb 9 18:30:26.206000 audit: BPF prog-id=117 op=UNLOAD Feb 9 18:30:26.206000 audit: BPF prog-id=116 op=UNLOAD Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { perfmon } for pid=2148 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit[2148]: AVC avc: denied { bpf } for pid=2148 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.206000 audit: BPF prog-id=118 op=LOAD Feb 9 18:30:26.206000 audit[2148]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bfb40 a2=78 a3=0 items=0 ppid=2107 pid=2148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.206000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3336316631323066306639633565356662323830633061373930393864 Feb 9 18:30:26.223994 env[1146]: time="2024-02-09T18:30:26.223948732Z" level=info msg="StartContainer for \"361f120f0f9c5e5fb280c0a79098d53e1bcb7aac63f0de3fb08da8cf7065610c\" returns successfully" Feb 9 18:30:26.330000 audit[2201]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.330000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffca24dd50 a2=0 a3=ffff9a8c56c0 items=0 ppid=2159 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.331000 audit[2202]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.331000 audit[2202]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd39ccca0 a2=0 a3=ffffacdc26c0 items=0 ppid=2159 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.331000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 18:30:26.330000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Feb 9 18:30:26.332000 audit[2203]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.332000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea327770 a2=0 a3=ffffb4c786c0 items=0 ppid=2159 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.332000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 18:30:26.333000 audit[2204]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.333000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc46f010 a2=0 a3=ffff921076c0 items=0 ppid=2159 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.333000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Feb 9 18:30:26.335000 audit[2205]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.335000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc9a34590 a2=0 a3=ffff838556c0 items=0 ppid=2159 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.335000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 18:30:26.335000 audit[2206]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.335000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd0f575b0 a2=0 a3=ffff858626c0 items=0 ppid=2159 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.335000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Feb 9 18:30:26.432000 audit[2207]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.432000 audit[2207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffce29d8d0 a2=0 a3=ffff9b86c6c0 items=0 ppid=2159 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.432000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 18:30:26.435000 audit[2209]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.435000 audit[2209]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffc0e16d0 a2=0 a3=ffff9d9146c0 items=0 ppid=2159 pid=2209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Feb 9 18:30:26.438000 audit[2212]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2212 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.438000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffdb0f560 a2=0 a3=ffff93df86c0 items=0 ppid=2159 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.438000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Feb 9 18:30:26.439000 audit[2213]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.439000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe11ed760 a2=0 a3=ffffa9c1a6c0 items=0 ppid=2159 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.439000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 18:30:26.441000 audit[2215]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2215 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.441000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc30f1640 a2=0 a3=ffffa4a236c0 items=0 ppid=2159 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.441000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 18:30:26.442000 audit[2216]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.442000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeace5990 a2=0 a3=ffff801f16c0 items=0 ppid=2159 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.442000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 18:30:26.444000 audit[2219]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.444000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd24383a0 a2=0 a3=ffff921fc6c0 items=0 ppid=2159 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.444000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 18:30:26.447000 audit[2222]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.447000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd4723b90 a2=0 a3=ffff9f4a66c0 items=0 ppid=2159 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.447000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Feb 9 18:30:26.449000 audit[2223]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.449000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc1096a30 a2=0 a3=ffffa673e6c0 items=0 ppid=2159 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.449000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 18:30:26.451000 audit[2225]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.451000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc3dcf420 a2=0 a3=ffffb43c56c0 items=0 ppid=2159 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.451000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 18:30:26.452000 audit[2226]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.452000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffffcfae680 a2=0 a3=ffffa06ad6c0 items=0 ppid=2159 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 18:30:26.454000 audit[2228]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.454000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd6956940 a2=0 a3=ffff999ab6c0 items=0 ppid=2159 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 18:30:26.457204 env[1146]: time="2024-02-09T18:30:26.457162664Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-55585899bf-w8khm,Uid:ff7f816d-58de-42ce-a84c-e22ee3117447,Namespace:tigera-operator,Attempt:0,}" Feb 9 18:30:26.458000 audit[2231]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.458000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd2c1b8c0 a2=0 a3=ffffb5f376c0 items=0 ppid=2159 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.458000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 18:30:26.461000 audit[2234]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.461000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeb66bd00 a2=0 a3=ffffa9ba76c0 items=0 ppid=2159 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.461000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 18:30:26.463000 audit[2236]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2236 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.463000 audit[2236]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffecab3170 a2=0 a3=ffffb39886c0 items=0 ppid=2159 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 18:30:26.466000 audit[2244]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.466000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffdd673960 a2=0 a3=ffff99ddb6c0 items=0 ppid=2159 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.466000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 18:30:26.469359 env[1146]: time="2024-02-09T18:30:26.469250036Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:26.469451 env[1146]: time="2024-02-09T18:30:26.469353853Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:26.469451 env[1146]: time="2024-02-09T18:30:26.469382457Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:26.469651 env[1146]: time="2024-02-09T18:30:26.469562807Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6651276086038942cfa1829a01cc8529f378e75e1b691f17e48149acd2fbed13 pid=2245 runtime=io.containerd.runc.v2 Feb 9 18:30:26.471000 audit[2259]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.471000 audit[2259]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcf5f0eb0 a2=0 a3=ffff9ce5d6c0 items=0 ppid=2159 pid=2259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.471000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 18:30:26.475000 audit[2264]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2264 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.475000 audit[2264]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe7e10030 a2=0 a3=ffffab41e6c0 items=0 ppid=2159 pid=2264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.475000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 18:30:26.478000 audit[2267]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2267 subj=system_u:system_r:kernel_t:s0 comm="iptables" Feb 9 18:30:26.478000 audit[2267]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffee462cb0 a2=0 a3=ffff9d7ce6c0 items=0 ppid=2159 pid=2267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.478000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 18:30:26.482971 systemd[1]: Started cri-containerd-6651276086038942cfa1829a01cc8529f378e75e1b691f17e48149acd2fbed13.scope. Feb 9 18:30:26.500000 audit[2277]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2277 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:26.500000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4956 a0=3 a1=ffffe2fd06d0 a2=0 a3=ffff836d46c0 items=0 ppid=2159 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.500000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit: BPF prog-id=119 op=LOAD Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2245 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636353132373630383630333839343263666131383239613031636338 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2245 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636353132373630383630333839343263666131383239613031636338 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit: BPF prog-id=120 op=LOAD Feb 9 18:30:26.502000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2245 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636353132373630383630333839343263666131383239613031636338 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.502000 audit: BPF prog-id=121 op=LOAD Feb 9 18:30:26.502000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2245 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.502000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636353132373630383630333839343263666131383239613031636338 Feb 9 18:30:26.503000 audit: BPF prog-id=121 op=UNLOAD Feb 9 18:30:26.503000 audit: BPF prog-id=120 op=UNLOAD Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { perfmon } for pid=2256 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit[2256]: AVC avc: denied { bpf } for pid=2256 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:26.503000 audit: BPF prog-id=122 op=LOAD Feb 9 18:30:26.503000 audit[2256]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2245 pid=2256 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636353132373630383630333839343263666131383239613031636338 Feb 9 18:30:26.509000 audit[2277]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2277 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:26.509000 audit[2277]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5340 a0=3 a1=ffffe2fd06d0 a2=0 a3=ffff836d46c0 items=0 ppid=2159 pid=2277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.509000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:26.511000 audit[2287]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2287 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.511000 audit[2287]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffcf20bba0 a2=0 a3=ffff875066c0 items=0 ppid=2159 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.511000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Feb 9 18:30:26.514000 audit[2290]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.514000 audit[2290]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffee847bd0 a2=0 a3=ffff9a81a6c0 items=0 ppid=2159 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.514000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Feb 9 18:30:26.520000 audit[2298]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.520000 audit[2298]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc30834e0 a2=0 a3=ffff80fb66c0 items=0 ppid=2159 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.520000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Feb 9 18:30:26.521000 audit[2299]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.521000 audit[2299]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffda0d32e0 a2=0 a3=ffff9c70c6c0 items=0 ppid=2159 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.521000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Feb 9 18:30:26.524320 env[1146]: time="2024-02-09T18:30:26.524264812Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-55585899bf-w8khm,Uid:ff7f816d-58de-42ce-a84c-e22ee3117447,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"6651276086038942cfa1829a01cc8529f378e75e1b691f17e48149acd2fbed13\"" Feb 9 18:30:26.523000 audit[2301]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.523000 audit[2301]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef6ecbb0 a2=0 a3=ffffb771c6c0 items=0 ppid=2159 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.523000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Feb 9 18:30:26.524000 audit[2302]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.524000 audit[2302]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe6302b50 a2=0 a3=ffffba8846c0 items=0 ppid=2159 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.524000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Feb 9 18:30:26.526155 env[1146]: time="2024-02-09T18:30:26.526129476Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\"" Feb 9 18:30:26.526000 audit[2304]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.526000 audit[2304]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe9582100 a2=0 a3=ffff81d1d6c0 items=0 ppid=2159 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.526000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Feb 9 18:30:26.530000 audit[2307]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2307 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.530000 audit[2307]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc72d2d20 a2=0 a3=ffff8b9416c0 items=0 ppid=2159 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.530000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Feb 9 18:30:26.532000 audit[2308]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.532000 audit[2308]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffc260560 a2=0 a3=ffff8f33d6c0 items=0 ppid=2159 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.532000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Feb 9 18:30:26.534000 audit[2310]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.534000 audit[2310]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffddac250 a2=0 a3=ffff8a2796c0 items=0 ppid=2159 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.534000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Feb 9 18:30:26.535000 audit[2311]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.535000 audit[2311]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffebe25900 a2=0 a3=ffff963266c0 items=0 ppid=2159 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.535000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Feb 9 18:30:26.537000 audit[2313]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.537000 audit[2313]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff4e2a9e0 a2=0 a3=ffffb427f6c0 items=0 ppid=2159 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.537000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Feb 9 18:30:26.540000 audit[2316]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.540000 audit[2316]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd970ec40 a2=0 a3=ffff9fb3d6c0 items=0 ppid=2159 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.540000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Feb 9 18:30:26.543000 audit[2319]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.543000 audit[2319]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffeeef5550 a2=0 a3=ffffa78416c0 items=0 ppid=2159 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.543000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Feb 9 18:30:26.544000 audit[2320]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2320 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.544000 audit[2320]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff8396790 a2=0 a3=ffff8b86c6c0 items=0 ppid=2159 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.544000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Feb 9 18:30:26.546000 audit[2322]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2322 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.546000 audit[2322]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffe7d1b530 a2=0 a3=ffffaee0d6c0 items=0 ppid=2159 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.546000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 18:30:26.551000 audit[2325]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.551000 audit[2325]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd7213460 a2=0 a3=ffffb66586c0 items=0 ppid=2159 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.551000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Feb 9 18:30:26.552000 audit[2326]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2326 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.552000 audit[2326]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffda615370 a2=0 a3=ffff9de326c0 items=0 ppid=2159 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.552000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Feb 9 18:30:26.554000 audit[2328]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.554000 audit[2328]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe10a0d70 a2=0 a3=ffffb498a6c0 items=0 ppid=2159 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.554000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Feb 9 18:30:26.555000 audit[2329]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.555000 audit[2329]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffefb751a0 a2=0 a3=ffff916846c0 items=0 ppid=2159 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Feb 9 18:30:26.557000 audit[2331]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2331 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.557000 audit[2331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffccea05c0 a2=0 a3=ffff820d96c0 items=0 ppid=2159 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.557000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 18:30:26.560000 audit[2334]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2334 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Feb 9 18:30:26.560000 audit[2334]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffebd0bcb0 a2=0 a3=ffff952a56c0 items=0 ppid=2159 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.560000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Feb 9 18:30:26.563000 audit[2336]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 18:30:26.563000 audit[2336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1916 a0=3 a1=ffffe598c540 a2=0 a3=ffff9f3706c0 items=0 ppid=2159 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.563000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:26.563000 audit[2336]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2336 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Feb 9 18:30:26.563000 audit[2336]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=1968 a0=3 a1=ffffe598c540 a2=0 a3=ffff9f3706c0 items=0 ppid=2159 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:26.563000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:26.722868 kubelet[2009]: E0209 18:30:26.722829 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:26.735824 kubelet[2009]: I0209 18:30:26.735790 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-pzj6x" podStartSLOduration=1.73575672 podCreationTimestamp="2024-02-09 18:30:25 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:30:26.734427823 +0000 UTC m=+15.163625805" watchObservedRunningTime="2024-02-09 18:30:26.73575672 +0000 UTC m=+15.164954702" Feb 9 18:30:26.888208 kubelet[2009]: E0209 18:30:26.888135 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:27.010276 update_engine[1136]: I0209 18:30:27.010145 1136 update_attempter.cc:509] Updating boot flags... Feb 9 18:30:27.640548 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3262901306.mount: Deactivated successfully. Feb 9 18:30:27.724405 kubelet[2009]: E0209 18:30:27.724199 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:28.512091 env[1146]: time="2024-02-09T18:30:28.512007082Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:28.513593 env[1146]: time="2024-02-09T18:30:28.513565192Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:28.515037 env[1146]: time="2024-02-09T18:30:28.515008925Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:28.517065 env[1146]: time="2024-02-09T18:30:28.517028183Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:715ac9a30f8a9579e44258af20de354715429e11836b493918e9e1a696e9b028,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:28.517581 env[1146]: time="2024-02-09T18:30:28.517551060Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.3\" returns image reference \"sha256:c7a10ec867a90652f951a6ba5a12efb94165e0a1c9b72167810d1065e57d768f\"" Feb 9 18:30:28.521853 env[1146]: time="2024-02-09T18:30:28.521638864Z" level=info msg="CreateContainer within sandbox \"6651276086038942cfa1829a01cc8529f378e75e1b691f17e48149acd2fbed13\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Feb 9 18:30:28.530212 env[1146]: time="2024-02-09T18:30:28.530176324Z" level=info msg="CreateContainer within sandbox \"6651276086038942cfa1829a01cc8529f378e75e1b691f17e48149acd2fbed13\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"e07e54549f08498aaa97569ba3875afc82973f4afc7b245221feff1ed6d9a819\"" Feb 9 18:30:28.530788 env[1146]: time="2024-02-09T18:30:28.530744448Z" level=info msg="StartContainer for \"e07e54549f08498aaa97569ba3875afc82973f4afc7b245221feff1ed6d9a819\"" Feb 9 18:30:28.548265 systemd[1]: run-containerd-runc-k8s.io-e07e54549f08498aaa97569ba3875afc82973f4afc7b245221feff1ed6d9a819-runc.YbhouD.mount: Deactivated successfully. Feb 9 18:30:28.549572 systemd[1]: Started cri-containerd-e07e54549f08498aaa97569ba3875afc82973f4afc7b245221feff1ed6d9a819.scope. Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit: BPF prog-id=123 op=LOAD Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2245 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:28.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376535343534396630383439386161613937353639626133383735 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2245 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:28.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376535343534396630383439386161613937353639626133383735 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.575000 audit: BPF prog-id=124 op=LOAD Feb 9 18:30:28.575000 audit[2357]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2245 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:28.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376535343534396630383439386161613937353639626133383735 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit: BPF prog-id=125 op=LOAD Feb 9 18:30:28.576000 audit[2357]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2245 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:28.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376535343534396630383439386161613937353639626133383735 Feb 9 18:30:28.576000 audit: BPF prog-id=125 op=UNLOAD Feb 9 18:30:28.576000 audit: BPF prog-id=124 op=UNLOAD Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { perfmon } for pid=2357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit[2357]: AVC avc: denied { bpf } for pid=2357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:28.576000 audit: BPF prog-id=126 op=LOAD Feb 9 18:30:28.576000 audit[2357]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2245 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:28.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376535343534396630383439386161613937353639626133383735 Feb 9 18:30:28.608818 env[1146]: time="2024-02-09T18:30:28.608771807Z" level=info msg="StartContainer for \"e07e54549f08498aaa97569ba3875afc82973f4afc7b245221feff1ed6d9a819\" returns successfully" Feb 9 18:30:31.540000 audit[2392]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:31.541788 kernel: kauditd_printk_skb: 360 callbacks suppressed Feb 9 18:30:31.541838 kernel: audit: type=1325 audit(1707503431.540:1060): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:31.540000 audit[2392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffca9d6b80 a2=0 a3=ffffb74f96c0 items=0 ppid=2159 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:31.546044 kernel: audit: type=1300 audit(1707503431.540:1060): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffca9d6b80 a2=0 a3=ffffb74f96c0 items=0 ppid=2159 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:31.546109 kernel: audit: type=1327 audit(1707503431.540:1060): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:31.540000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:31.541000 audit[2392]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:31.541000 audit[2392]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffca9d6b80 a2=0 a3=ffffb74f96c0 items=0 ppid=2159 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:31.553921 kernel: audit: type=1325 audit(1707503431.541:1061): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2392 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:31.553989 kernel: audit: type=1300 audit(1707503431.541:1061): arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffca9d6b80 a2=0 a3=ffffb74f96c0 items=0 ppid=2159 pid=2392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:31.554016 kernel: audit: type=1327 audit(1707503431.541:1061): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:31.541000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:31.553000 audit[2394]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:31.553000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc369b170 a2=0 a3=ffffaf8c06c0 items=0 ppid=2159 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:31.568669 kernel: audit: type=1325 audit(1707503431.553:1062): table=filter:91 family=2 entries=16 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:31.568722 kernel: audit: type=1300 audit(1707503431.553:1062): arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffc369b170 a2=0 a3=ffffaf8c06c0 items=0 ppid=2159 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:31.568739 kernel: audit: type=1327 audit(1707503431.553:1062): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:31.553000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:31.564000 audit[2394]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:31.564000 audit[2394]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffc369b170 a2=0 a3=ffffaf8c06c0 items=0 ppid=2159 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:31.564000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:31.577323 kernel: audit: type=1325 audit(1707503431.564:1063): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:31.670757 kubelet[2009]: I0209 18:30:31.670708 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-55585899bf-w8khm" podStartSLOduration=3.678062407 podCreationTimestamp="2024-02-09 18:30:26 +0000 UTC" firstStartedPulling="2024-02-09 18:30:26.525341788 +0000 UTC m=+14.954539730" lastFinishedPulling="2024-02-09 18:30:28.517937557 +0000 UTC m=+16.947135540" observedRunningTime="2024-02-09 18:30:28.735484192 +0000 UTC m=+17.164682174" watchObservedRunningTime="2024-02-09 18:30:31.670658217 +0000 UTC m=+20.099856199" Feb 9 18:30:31.671125 kubelet[2009]: I0209 18:30:31.670828 2009 topology_manager.go:215] "Topology Admit Handler" podUID="b4fdc717-dbb1-4cb8-91ba-fa74de1cd0b1" podNamespace="calico-system" podName="calico-typha-766884b47b-lmmhv" Feb 9 18:30:31.676106 systemd[1]: Created slice kubepods-besteffort-podb4fdc717_dbb1_4cb8_91ba_fa74de1cd0b1.slice. Feb 9 18:30:31.707696 kubelet[2009]: I0209 18:30:31.707652 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/b4fdc717-dbb1-4cb8-91ba-fa74de1cd0b1-tigera-ca-bundle\") pod \"calico-typha-766884b47b-lmmhv\" (UID: \"b4fdc717-dbb1-4cb8-91ba-fa74de1cd0b1\") " pod="calico-system/calico-typha-766884b47b-lmmhv" Feb 9 18:30:31.707696 kubelet[2009]: I0209 18:30:31.707705 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lph29\" (UniqueName: \"kubernetes.io/projected/b4fdc717-dbb1-4cb8-91ba-fa74de1cd0b1-kube-api-access-lph29\") pod \"calico-typha-766884b47b-lmmhv\" (UID: \"b4fdc717-dbb1-4cb8-91ba-fa74de1cd0b1\") " pod="calico-system/calico-typha-766884b47b-lmmhv" Feb 9 18:30:31.707863 kubelet[2009]: I0209 18:30:31.707731 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/b4fdc717-dbb1-4cb8-91ba-fa74de1cd0b1-typha-certs\") pod \"calico-typha-766884b47b-lmmhv\" (UID: \"b4fdc717-dbb1-4cb8-91ba-fa74de1cd0b1\") " pod="calico-system/calico-typha-766884b47b-lmmhv" Feb 9 18:30:31.759332 kubelet[2009]: I0209 18:30:31.759272 2009 topology_manager.go:215] "Topology Admit Handler" podUID="54b5e56a-4503-4ef7-8e15-254e64915be7" podNamespace="calico-system" podName="calico-node-2jpvf" Feb 9 18:30:31.765251 systemd[1]: Created slice kubepods-besteffort-pod54b5e56a_4503_4ef7_8e15_254e64915be7.slice. Feb 9 18:30:31.807919 kubelet[2009]: I0209 18:30:31.807819 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/54b5e56a-4503-4ef7-8e15-254e64915be7-var-run-calico\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.807919 kubelet[2009]: I0209 18:30:31.807862 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/54b5e56a-4503-4ef7-8e15-254e64915be7-xtables-lock\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.807919 kubelet[2009]: I0209 18:30:31.807906 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/54b5e56a-4503-4ef7-8e15-254e64915be7-policysync\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.808094 kubelet[2009]: I0209 18:30:31.807926 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/54b5e56a-4503-4ef7-8e15-254e64915be7-node-certs\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.808094 kubelet[2009]: I0209 18:30:31.807946 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/54b5e56a-4503-4ef7-8e15-254e64915be7-flexvol-driver-host\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.808094 kubelet[2009]: I0209 18:30:31.807974 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/54b5e56a-4503-4ef7-8e15-254e64915be7-tigera-ca-bundle\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.808094 kubelet[2009]: I0209 18:30:31.807992 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/54b5e56a-4503-4ef7-8e15-254e64915be7-var-lib-calico\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.808094 kubelet[2009]: I0209 18:30:31.808011 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/54b5e56a-4503-4ef7-8e15-254e64915be7-cni-log-dir\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.808286 kubelet[2009]: I0209 18:30:31.808037 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/54b5e56a-4503-4ef7-8e15-254e64915be7-lib-modules\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.808286 kubelet[2009]: I0209 18:30:31.808074 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/54b5e56a-4503-4ef7-8e15-254e64915be7-cni-net-dir\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.808286 kubelet[2009]: I0209 18:30:31.808162 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/54b5e56a-4503-4ef7-8e15-254e64915be7-cni-bin-dir\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.808286 kubelet[2009]: I0209 18:30:31.808224 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ww6f7\" (UniqueName: \"kubernetes.io/projected/54b5e56a-4503-4ef7-8e15-254e64915be7-kube-api-access-ww6f7\") pod \"calico-node-2jpvf\" (UID: \"54b5e56a-4503-4ef7-8e15-254e64915be7\") " pod="calico-system/calico-node-2jpvf" Feb 9 18:30:31.862578 kubelet[2009]: I0209 18:30:31.862541 2009 topology_manager.go:215] "Topology Admit Handler" podUID="29ec715c-b377-41b0-b3fb-4bbf5d6a19ba" podNamespace="calico-system" podName="csi-node-driver-zdcmm" Feb 9 18:30:31.862811 kubelet[2009]: E0209 18:30:31.862792 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zdcmm" podUID="29ec715c-b377-41b0-b3fb-4bbf5d6a19ba" Feb 9 18:30:31.908665 kubelet[2009]: I0209 18:30:31.908630 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/29ec715c-b377-41b0-b3fb-4bbf5d6a19ba-kubelet-dir\") pod \"csi-node-driver-zdcmm\" (UID: \"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba\") " pod="calico-system/csi-node-driver-zdcmm" Feb 9 18:30:31.908810 kubelet[2009]: I0209 18:30:31.908762 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/29ec715c-b377-41b0-b3fb-4bbf5d6a19ba-registration-dir\") pod \"csi-node-driver-zdcmm\" (UID: \"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba\") " pod="calico-system/csi-node-driver-zdcmm" Feb 9 18:30:31.908810 kubelet[2009]: I0209 18:30:31.908805 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/29ec715c-b377-41b0-b3fb-4bbf5d6a19ba-varrun\") pod \"csi-node-driver-zdcmm\" (UID: \"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba\") " pod="calico-system/csi-node-driver-zdcmm" Feb 9 18:30:31.908862 kubelet[2009]: I0209 18:30:31.908827 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ndmr6\" (UniqueName: \"kubernetes.io/projected/29ec715c-b377-41b0-b3fb-4bbf5d6a19ba-kube-api-access-ndmr6\") pod \"csi-node-driver-zdcmm\" (UID: \"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba\") " pod="calico-system/csi-node-driver-zdcmm" Feb 9 18:30:31.908862 kubelet[2009]: I0209 18:30:31.908845 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/29ec715c-b377-41b0-b3fb-4bbf5d6a19ba-socket-dir\") pod \"csi-node-driver-zdcmm\" (UID: \"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba\") " pod="calico-system/csi-node-driver-zdcmm" Feb 9 18:30:31.910502 kubelet[2009]: E0209 18:30:31.910462 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.910502 kubelet[2009]: W0209 18:30:31.910496 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.910620 kubelet[2009]: E0209 18:30:31.910525 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.910788 kubelet[2009]: E0209 18:30:31.910768 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.910788 kubelet[2009]: W0209 18:30:31.910786 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.910858 kubelet[2009]: E0209 18:30:31.910815 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.912258 kubelet[2009]: E0209 18:30:31.912239 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.912258 kubelet[2009]: W0209 18:30:31.912253 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.912385 kubelet[2009]: E0209 18:30:31.912369 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.912735 kubelet[2009]: E0209 18:30:31.912713 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.912735 kubelet[2009]: W0209 18:30:31.912728 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.912900 kubelet[2009]: E0209 18:30:31.912875 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.913056 kubelet[2009]: E0209 18:30:31.913040 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.913056 kubelet[2009]: W0209 18:30:31.913054 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.913128 kubelet[2009]: E0209 18:30:31.913108 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.913263 kubelet[2009]: E0209 18:30:31.913248 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.913263 kubelet[2009]: W0209 18:30:31.913259 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.913342 kubelet[2009]: E0209 18:30:31.913296 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.913439 kubelet[2009]: E0209 18:30:31.913423 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.913439 kubelet[2009]: W0209 18:30:31.913433 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.913503 kubelet[2009]: E0209 18:30:31.913489 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.916040 kubelet[2009]: E0209 18:30:31.916018 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.916206 kubelet[2009]: W0209 18:30:31.916191 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.916413 kubelet[2009]: E0209 18:30:31.916401 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.916819 kubelet[2009]: E0209 18:30:31.916805 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.916912 kubelet[2009]: W0209 18:30:31.916900 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.916996 kubelet[2009]: E0209 18:30:31.916984 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.917399 kubelet[2009]: E0209 18:30:31.917385 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.917513 kubelet[2009]: W0209 18:30:31.917500 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.917632 kubelet[2009]: E0209 18:30:31.917613 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.917848 kubelet[2009]: E0209 18:30:31.917829 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.917924 kubelet[2009]: W0209 18:30:31.917912 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.917997 kubelet[2009]: E0209 18:30:31.917987 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.919802 kubelet[2009]: E0209 18:30:31.919786 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.919947 kubelet[2009]: W0209 18:30:31.919933 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.920028 kubelet[2009]: E0209 18:30:31.920017 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.922326 kubelet[2009]: E0209 18:30:31.921397 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.922326 kubelet[2009]: W0209 18:30:31.921413 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.922326 kubelet[2009]: E0209 18:30:31.921454 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.922326 kubelet[2009]: E0209 18:30:31.921627 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.922326 kubelet[2009]: W0209 18:30:31.921636 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.922326 kubelet[2009]: E0209 18:30:31.921649 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.922992 kubelet[2009]: E0209 18:30:31.922975 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:31.923072 kubelet[2009]: W0209 18:30:31.923059 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:31.923141 kubelet[2009]: E0209 18:30:31.923130 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:31.978917 kubelet[2009]: E0209 18:30:31.978890 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:31.979654 env[1146]: time="2024-02-09T18:30:31.979604010Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-766884b47b-lmmhv,Uid:b4fdc717-dbb1-4cb8-91ba-fa74de1cd0b1,Namespace:calico-system,Attempt:0,}" Feb 9 18:30:31.993495 env[1146]: time="2024-02-09T18:30:31.993344886Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:31.993495 env[1146]: time="2024-02-09T18:30:31.993384771Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:31.993495 env[1146]: time="2024-02-09T18:30:31.993395252Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:31.993783 env[1146]: time="2024-02-09T18:30:31.993727935Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0a03c7b6effa9d30eb560e416afcf24e077bfa9789e4c3a43018e8dc00b7c61a pid=2423 runtime=io.containerd.runc.v2 Feb 9 18:30:32.005210 systemd[1]: Started cri-containerd-0a03c7b6effa9d30eb560e416afcf24e077bfa9789e4c3a43018e8dc00b7c61a.scope. Feb 9 18:30:32.010326 kubelet[2009]: E0209 18:30:32.010268 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.010326 kubelet[2009]: W0209 18:30:32.010286 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.010326 kubelet[2009]: E0209 18:30:32.010319 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.011137 kubelet[2009]: E0209 18:30:32.011104 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.011137 kubelet[2009]: W0209 18:30:32.011133 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.011137 kubelet[2009]: E0209 18:30:32.011152 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.011787 kubelet[2009]: E0209 18:30:32.011367 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.011787 kubelet[2009]: W0209 18:30:32.011383 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.011787 kubelet[2009]: E0209 18:30:32.011406 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.011787 kubelet[2009]: E0209 18:30:32.011689 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.011787 kubelet[2009]: W0209 18:30:32.011699 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.011787 kubelet[2009]: E0209 18:30:32.011720 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.011974 kubelet[2009]: E0209 18:30:32.011874 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.011974 kubelet[2009]: W0209 18:30:32.011882 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.011974 kubelet[2009]: E0209 18:30:32.011898 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.012088 kubelet[2009]: E0209 18:30:32.012065 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.012088 kubelet[2009]: W0209 18:30:32.012081 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.012160 kubelet[2009]: E0209 18:30:32.012098 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.012395 kubelet[2009]: E0209 18:30:32.012360 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.012395 kubelet[2009]: W0209 18:30:32.012373 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.012395 kubelet[2009]: E0209 18:30:32.012388 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.012621 kubelet[2009]: E0209 18:30:32.012600 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.012621 kubelet[2009]: W0209 18:30:32.012615 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.012690 kubelet[2009]: E0209 18:30:32.012632 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.012971 kubelet[2009]: E0209 18:30:32.012810 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.012971 kubelet[2009]: W0209 18:30:32.012823 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.012971 kubelet[2009]: E0209 18:30:32.012838 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.016422 kubelet[2009]: E0209 18:30:32.016398 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.016422 kubelet[2009]: W0209 18:30:32.016414 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.016422 kubelet[2009]: E0209 18:30:32.016430 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.024058 kubelet[2009]: E0209 18:30:32.016700 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.024058 kubelet[2009]: W0209 18:30:32.016709 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.024058 kubelet[2009]: E0209 18:30:32.020258 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.024058 kubelet[2009]: E0209 18:30:32.022178 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.024058 kubelet[2009]: W0209 18:30:32.022191 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.024058 kubelet[2009]: E0209 18:30:32.022869 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.025959 kubelet[2009]: E0209 18:30:32.025922 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.025959 kubelet[2009]: W0209 18:30:32.025940 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.025959 kubelet[2009]: E0209 18:30:32.025959 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.026625 kubelet[2009]: E0209 18:30:32.026600 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.026625 kubelet[2009]: W0209 18:30:32.026612 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.026709 kubelet[2009]: E0209 18:30:32.026683 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.028696 kubelet[2009]: E0209 18:30:32.028674 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.028696 kubelet[2009]: W0209 18:30:32.028689 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.029042 kubelet[2009]: E0209 18:30:32.029026 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.029145 kubelet[2009]: E0209 18:30:32.029133 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.029145 kubelet[2009]: W0209 18:30:32.029144 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.029231 kubelet[2009]: E0209 18:30:32.029219 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.029475 kubelet[2009]: E0209 18:30:32.029455 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.029475 kubelet[2009]: W0209 18:30:32.029470 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.029614 kubelet[2009]: E0209 18:30:32.029550 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.029696 kubelet[2009]: E0209 18:30:32.029683 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.029696 kubelet[2009]: W0209 18:30:32.029694 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.029761 kubelet[2009]: E0209 18:30:32.029708 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.029875 kubelet[2009]: E0209 18:30:32.029864 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.029905 kubelet[2009]: W0209 18:30:32.029876 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.029905 kubelet[2009]: E0209 18:30:32.029887 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.030074 kubelet[2009]: E0209 18:30:32.030028 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.030074 kubelet[2009]: W0209 18:30:32.030059 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.030074 kubelet[2009]: E0209 18:30:32.030073 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.030322 kubelet[2009]: E0209 18:30:32.030297 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.030322 kubelet[2009]: W0209 18:30:32.030322 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.030394 kubelet[2009]: E0209 18:30:32.030336 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.031725 kubelet[2009]: E0209 18:30:32.031708 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.031725 kubelet[2009]: W0209 18:30:32.031724 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.031804 kubelet[2009]: E0209 18:30:32.031743 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.031940 kubelet[2009]: E0209 18:30:32.031928 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.031940 kubelet[2009]: W0209 18:30:32.031941 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.032091 kubelet[2009]: E0209 18:30:32.032023 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.032304 kubelet[2009]: E0209 18:30:32.032283 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.032355 kubelet[2009]: W0209 18:30:32.032316 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.032355 kubelet[2009]: E0209 18:30:32.032333 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.033902 kubelet[2009]: E0209 18:30:32.032722 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.033902 kubelet[2009]: W0209 18:30:32.032737 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.033902 kubelet[2009]: E0209 18:30:32.032750 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit: BPF prog-id=127 op=LOAD Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303363376236656666613964333065623536306534313661666366 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303363376236656666613964333065623536306534313661666366 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit: BPF prog-id=128 op=LOAD Feb 9 18:30:32.041000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303363376236656666613964333065623536306534313661666366 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit: BPF prog-id=129 op=LOAD Feb 9 18:30:32.041000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303363376236656666613964333065623536306534313661666366 Feb 9 18:30:32.041000 audit: BPF prog-id=129 op=UNLOAD Feb 9 18:30:32.041000 audit: BPF prog-id=128 op=UNLOAD Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { perfmon } for pid=2432 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit[2432]: AVC avc: denied { bpf } for pid=2432 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.041000 audit: BPF prog-id=130 op=LOAD Feb 9 18:30:32.041000 audit[2432]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=2423 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303363376236656666613964333065623536306534313661666366 Feb 9 18:30:32.045324 kubelet[2009]: E0209 18:30:32.044883 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:32.045324 kubelet[2009]: W0209 18:30:32.044902 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:32.045324 kubelet[2009]: E0209 18:30:32.044920 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:32.065452 env[1146]: time="2024-02-09T18:30:32.065341146Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-766884b47b-lmmhv,Uid:b4fdc717-dbb1-4cb8-91ba-fa74de1cd0b1,Namespace:calico-system,Attempt:0,} returns sandbox id \"0a03c7b6effa9d30eb560e416afcf24e077bfa9789e4c3a43018e8dc00b7c61a\"" Feb 9 18:30:32.066015 kubelet[2009]: E0209 18:30:32.065996 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:32.067404 kubelet[2009]: E0209 18:30:32.067382 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:32.068227 env[1146]: time="2024-02-09T18:30:32.068193454Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2jpvf,Uid:54b5e56a-4503-4ef7-8e15-254e64915be7,Namespace:calico-system,Attempt:0,}" Feb 9 18:30:32.068576 env[1146]: time="2024-02-09T18:30:32.068227178Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\"" Feb 9 18:30:32.082893 env[1146]: time="2024-02-09T18:30:32.082835200Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:32.083009 env[1146]: time="2024-02-09T18:30:32.082874205Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:32.083009 env[1146]: time="2024-02-09T18:30:32.082885166Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:32.083167 env[1146]: time="2024-02-09T18:30:32.083135957Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9fa948e2306d6b400b61231dda52fa544ad5fdded7db93fdb951c1da13a85268 pid=2492 runtime=io.containerd.runc.v2 Feb 9 18:30:32.094701 systemd[1]: Started cri-containerd-9fa948e2306d6b400b61231dda52fa544ad5fdded7db93fdb951c1da13a85268.scope. Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.115000 audit: BPF prog-id=131 op=LOAD Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966613934386532333036643662343030623631323331646461353266 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966613934386532333036643662343030623631323331646461353266 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit: BPF prog-id=132 op=LOAD Feb 9 18:30:32.116000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966613934386532333036643662343030623631323331646461353266 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit: BPF prog-id=133 op=LOAD Feb 9 18:30:32.116000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966613934386532333036643662343030623631323331646461353266 Feb 9 18:30:32.116000 audit: BPF prog-id=133 op=UNLOAD Feb 9 18:30:32.116000 audit: BPF prog-id=132 op=UNLOAD Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { perfmon } for pid=2501 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit[2501]: AVC avc: denied { bpf } for pid=2501 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:32.116000 audit: BPF prog-id=134 op=LOAD Feb 9 18:30:32.116000 audit[2501]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2492 pid=2501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966613934386532333036643662343030623631323331646461353266 Feb 9 18:30:32.133078 env[1146]: time="2024-02-09T18:30:32.133040803Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2jpvf,Uid:54b5e56a-4503-4ef7-8e15-254e64915be7,Namespace:calico-system,Attempt:0,} returns sandbox id \"9fa948e2306d6b400b61231dda52fa544ad5fdded7db93fdb951c1da13a85268\"" Feb 9 18:30:32.134141 kubelet[2009]: E0209 18:30:32.134113 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:32.578000 audit[2527]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2527 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:32.578000 audit[2527]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=fffff4f6f6c0 a2=0 a3=ffff971306c0 items=0 ppid=2159 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.578000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:32.579000 audit[2527]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2527 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:32.579000 audit[2527]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=fffff4f6f6c0 a2=0 a3=ffff971306c0 items=0 ppid=2159 pid=2527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:32.579000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:33.145539 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2663811752.mount: Deactivated successfully. Feb 9 18:30:33.689290 kubelet[2009]: E0209 18:30:33.689256 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zdcmm" podUID="29ec715c-b377-41b0-b3fb-4bbf5d6a19ba" Feb 9 18:30:33.886869 env[1146]: time="2024-02-09T18:30:33.886819834Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:33.888797 env[1146]: time="2024-02-09T18:30:33.888763981Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:33.890442 env[1146]: time="2024-02-09T18:30:33.890417173Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:33.892287 env[1146]: time="2024-02-09T18:30:33.892252107Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:5f2d3b8c354a4eb6de46e786889913916e620c6c256982fb8d0f1a1d36a282bc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:33.892921 env[1146]: time="2024-02-09T18:30:33.892889101Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.0\" returns image reference \"sha256:fba96c9caf161e105c76b559b06b4b2337b89b54833d69984209161d93145969\"" Feb 9 18:30:33.895606 env[1146]: time="2024-02-09T18:30:33.895581055Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\"" Feb 9 18:30:33.902234 env[1146]: time="2024-02-09T18:30:33.902190705Z" level=info msg="CreateContainer within sandbox \"0a03c7b6effa9d30eb560e416afcf24e077bfa9789e4c3a43018e8dc00b7c61a\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Feb 9 18:30:33.913912 env[1146]: time="2024-02-09T18:30:33.913860025Z" level=info msg="CreateContainer within sandbox \"0a03c7b6effa9d30eb560e416afcf24e077bfa9789e4c3a43018e8dc00b7c61a\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"0003f96b861a8b4c15848e6f2fe5e93a74cc2460b23dbfa836bf60f9d533e6ac\"" Feb 9 18:30:33.915961 env[1146]: time="2024-02-09T18:30:33.915928466Z" level=info msg="StartContainer for \"0003f96b861a8b4c15848e6f2fe5e93a74cc2460b23dbfa836bf60f9d533e6ac\"" Feb 9 18:30:33.943932 systemd[1]: Started cri-containerd-0003f96b861a8b4c15848e6f2fe5e93a74cc2460b23dbfa836bf60f9d533e6ac.scope. Feb 9 18:30:33.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.985000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.985000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit: BPF prog-id=135 op=LOAD Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2423 pid=2538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:33.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030303366393662383631613862346331353834386536663266653565 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2423 pid=2538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:33.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030303366393662383631613862346331353834386536663266653565 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.986000 audit: BPF prog-id=136 op=LOAD Feb 9 18:30:33.986000 audit[2538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2423 pid=2538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:33.986000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030303366393662383631613862346331353834386536663266653565 Feb 9 18:30:33.988000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.988000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.988000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.988000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.988000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.988000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.988000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.988000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.988000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.988000 audit: BPF prog-id=137 op=LOAD Feb 9 18:30:33.988000 audit[2538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2423 pid=2538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:33.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030303366393662383631613862346331353834386536663266653565 Feb 9 18:30:33.989000 audit: BPF prog-id=137 op=UNLOAD Feb 9 18:30:33.989000 audit: BPF prog-id=136 op=UNLOAD Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { perfmon } for pid=2538 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit[2538]: AVC avc: denied { bpf } for pid=2538 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:33.989000 audit: BPF prog-id=138 op=LOAD Feb 9 18:30:33.989000 audit[2538]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2423 pid=2538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:33.989000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030303366393662383631613862346331353834386536663266653565 Feb 9 18:30:34.012339 env[1146]: time="2024-02-09T18:30:34.009864367Z" level=info msg="StartContainer for \"0003f96b861a8b4c15848e6f2fe5e93a74cc2460b23dbfa836bf60f9d533e6ac\" returns successfully" Feb 9 18:30:34.739532 kubelet[2009]: E0209 18:30:34.739503 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:34.752141 kubelet[2009]: I0209 18:30:34.752106 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-766884b47b-lmmhv" podStartSLOduration=1.925088852 podCreationTimestamp="2024-02-09 18:30:31 +0000 UTC" firstStartedPulling="2024-02-09 18:30:32.067035073 +0000 UTC m=+20.496233015" lastFinishedPulling="2024-02-09 18:30:33.894019833 +0000 UTC m=+22.323217815" observedRunningTime="2024-02-09 18:30:34.750017743 +0000 UTC m=+23.179215725" watchObservedRunningTime="2024-02-09 18:30:34.752073652 +0000 UTC m=+23.181271634" Feb 9 18:30:34.828666 kubelet[2009]: E0209 18:30:34.828631 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.828666 kubelet[2009]: W0209 18:30:34.828654 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.828862 kubelet[2009]: E0209 18:30:34.828682 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.828966 kubelet[2009]: E0209 18:30:34.828951 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.828966 kubelet[2009]: W0209 18:30:34.828964 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.829041 kubelet[2009]: E0209 18:30:34.828977 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.829269 kubelet[2009]: E0209 18:30:34.829255 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.829269 kubelet[2009]: W0209 18:30:34.829268 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.829386 kubelet[2009]: E0209 18:30:34.829280 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.829514 kubelet[2009]: E0209 18:30:34.829499 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.829514 kubelet[2009]: W0209 18:30:34.829511 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.829597 kubelet[2009]: E0209 18:30:34.829524 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.829723 kubelet[2009]: E0209 18:30:34.829711 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.829723 kubelet[2009]: W0209 18:30:34.829722 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.829791 kubelet[2009]: E0209 18:30:34.829733 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.829886 kubelet[2009]: E0209 18:30:34.829876 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.829886 kubelet[2009]: W0209 18:30:34.829887 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.829953 kubelet[2009]: E0209 18:30:34.829900 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.830070 kubelet[2009]: E0209 18:30:34.830059 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.830102 kubelet[2009]: W0209 18:30:34.830070 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.830102 kubelet[2009]: E0209 18:30:34.830081 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.830862 kubelet[2009]: E0209 18:30:34.830842 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.830862 kubelet[2009]: W0209 18:30:34.830857 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.830941 kubelet[2009]: E0209 18:30:34.830871 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.831060 kubelet[2009]: E0209 18:30:34.831048 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.831060 kubelet[2009]: W0209 18:30:34.831059 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.831139 kubelet[2009]: E0209 18:30:34.831071 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.831255 kubelet[2009]: E0209 18:30:34.831243 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.831255 kubelet[2009]: W0209 18:30:34.831254 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.831339 kubelet[2009]: E0209 18:30:34.831265 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.831417 kubelet[2009]: E0209 18:30:34.831402 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.831417 kubelet[2009]: W0209 18:30:34.831417 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.831494 kubelet[2009]: E0209 18:30:34.831427 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.831587 kubelet[2009]: E0209 18:30:34.831571 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.831587 kubelet[2009]: W0209 18:30:34.831587 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.831650 kubelet[2009]: E0209 18:30:34.831598 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.831768 kubelet[2009]: E0209 18:30:34.831758 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.831808 kubelet[2009]: W0209 18:30:34.831769 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.831808 kubelet[2009]: E0209 18:30:34.831780 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.831915 kubelet[2009]: E0209 18:30:34.831905 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.831948 kubelet[2009]: W0209 18:30:34.831921 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.831948 kubelet[2009]: E0209 18:30:34.831932 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.832080 kubelet[2009]: E0209 18:30:34.832070 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.832080 kubelet[2009]: W0209 18:30:34.832080 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.832136 kubelet[2009]: E0209 18:30:34.832090 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.850722 kubelet[2009]: E0209 18:30:34.850575 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.850722 kubelet[2009]: W0209 18:30:34.850596 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.850722 kubelet[2009]: E0209 18:30:34.850616 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.851065 kubelet[2009]: E0209 18:30:34.850952 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.851065 kubelet[2009]: W0209 18:30:34.850967 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.851065 kubelet[2009]: E0209 18:30:34.850984 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.851326 kubelet[2009]: E0209 18:30:34.851214 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.851326 kubelet[2009]: W0209 18:30:34.851228 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.851326 kubelet[2009]: E0209 18:30:34.851245 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.851610 kubelet[2009]: E0209 18:30:34.851484 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.851610 kubelet[2009]: W0209 18:30:34.851495 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.851610 kubelet[2009]: E0209 18:30:34.851512 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.852026 kubelet[2009]: E0209 18:30:34.851755 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.852026 kubelet[2009]: W0209 18:30:34.851768 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.852026 kubelet[2009]: E0209 18:30:34.851785 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.852144 kubelet[2009]: E0209 18:30:34.852034 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.852144 kubelet[2009]: W0209 18:30:34.852047 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.852144 kubelet[2009]: E0209 18:30:34.852067 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.852277 kubelet[2009]: E0209 18:30:34.852250 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.852277 kubelet[2009]: W0209 18:30:34.852262 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.852277 kubelet[2009]: E0209 18:30:34.852277 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.852485 kubelet[2009]: E0209 18:30:34.852458 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.852485 kubelet[2009]: W0209 18:30:34.852470 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.852485 kubelet[2009]: E0209 18:30:34.852483 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.852634 kubelet[2009]: E0209 18:30:34.852622 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.852634 kubelet[2009]: W0209 18:30:34.852632 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.852702 kubelet[2009]: E0209 18:30:34.852646 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.852768 kubelet[2009]: E0209 18:30:34.852757 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.852768 kubelet[2009]: W0209 18:30:34.852766 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.852831 kubelet[2009]: E0209 18:30:34.852778 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.852933 kubelet[2009]: E0209 18:30:34.852916 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.852933 kubelet[2009]: W0209 18:30:34.852926 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.852933 kubelet[2009]: E0209 18:30:34.852935 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.853193 kubelet[2009]: E0209 18:30:34.853178 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.853274 kubelet[2009]: W0209 18:30:34.853261 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.853372 kubelet[2009]: E0209 18:30:34.853359 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.853577 kubelet[2009]: E0209 18:30:34.853550 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.853577 kubelet[2009]: W0209 18:30:34.853564 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.853577 kubelet[2009]: E0209 18:30:34.853584 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.853748 kubelet[2009]: E0209 18:30:34.853737 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.853748 kubelet[2009]: W0209 18:30:34.853747 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.853816 kubelet[2009]: E0209 18:30:34.853760 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.853883 kubelet[2009]: E0209 18:30:34.853873 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.853883 kubelet[2009]: W0209 18:30:34.853881 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.853944 kubelet[2009]: E0209 18:30:34.853895 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.854045 kubelet[2009]: E0209 18:30:34.854036 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.854045 kubelet[2009]: W0209 18:30:34.854044 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.854108 kubelet[2009]: E0209 18:30:34.854057 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.854466 kubelet[2009]: E0209 18:30:34.854340 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.854466 kubelet[2009]: W0209 18:30:34.854354 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.854466 kubelet[2009]: E0209 18:30:34.854373 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:34.854673 kubelet[2009]: E0209 18:30:34.854625 2009 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Feb 9 18:30:34.854673 kubelet[2009]: W0209 18:30:34.854637 2009 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Feb 9 18:30:34.854673 kubelet[2009]: E0209 18:30:34.854652 2009 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Feb 9 18:30:35.158735 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4219682138.mount: Deactivated successfully. Feb 9 18:30:35.241372 env[1146]: time="2024-02-09T18:30:35.241324129Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:35.243316 env[1146]: time="2024-02-09T18:30:35.243280137Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:35.245192 env[1146]: time="2024-02-09T18:30:35.245156337Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:35.247084 env[1146]: time="2024-02-09T18:30:35.247041298Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:b05edbd1f80db4ada229e6001a666a7dd36bb6ab617143684fb3d28abfc4b71e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:35.247359 env[1146]: time="2024-02-09T18:30:35.247326048Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.0\" returns image reference \"sha256:cbddd33ed55a4a5c129e8f09945d426860425b9778d9402efe7bcefea7990a57\"" Feb 9 18:30:35.249379 env[1146]: time="2024-02-09T18:30:35.249349144Z" level=info msg="CreateContainer within sandbox \"9fa948e2306d6b400b61231dda52fa544ad5fdded7db93fdb951c1da13a85268\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Feb 9 18:30:35.261436 env[1146]: time="2024-02-09T18:30:35.261389668Z" level=info msg="CreateContainer within sandbox \"9fa948e2306d6b400b61231dda52fa544ad5fdded7db93fdb951c1da13a85268\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"5f81d4610578a13cc1cd6e55ef1751768fcb1f6617f6e2b5f3feb12235e834d4\"" Feb 9 18:30:35.261925 env[1146]: time="2024-02-09T18:30:35.261896522Z" level=info msg="StartContainer for \"5f81d4610578a13cc1cd6e55ef1751768fcb1f6617f6e2b5f3feb12235e834d4\"" Feb 9 18:30:35.284812 systemd[1]: Started cri-containerd-5f81d4610578a13cc1cd6e55ef1751768fcb1f6617f6e2b5f3feb12235e834d4.scope. Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2492 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:35.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566383164343631303537386131336363316364366535356566313735 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit: BPF prog-id=139 op=LOAD Feb 9 18:30:35.329000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2492 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:35.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566383164343631303537386131336363316364366535356566313735 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit: BPF prog-id=140 op=LOAD Feb 9 18:30:35.329000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2492 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:35.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566383164343631303537386131336363316364366535356566313735 Feb 9 18:30:35.329000 audit: BPF prog-id=140 op=UNLOAD Feb 9 18:30:35.329000 audit: BPF prog-id=139 op=UNLOAD Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { perfmon } for pid=2611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit[2611]: AVC avc: denied { bpf } for pid=2611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:35.329000 audit: BPF prog-id=141 op=LOAD Feb 9 18:30:35.329000 audit[2611]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2492 pid=2611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:35.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3566383164343631303537386131336363316364366535356566313735 Feb 9 18:30:35.349175 env[1146]: time="2024-02-09T18:30:35.349117181Z" level=info msg="StartContainer for \"5f81d4610578a13cc1cd6e55ef1751768fcb1f6617f6e2b5f3feb12235e834d4\" returns successfully" Feb 9 18:30:35.364316 systemd[1]: cri-containerd-5f81d4610578a13cc1cd6e55ef1751768fcb1f6617f6e2b5f3feb12235e834d4.scope: Deactivated successfully. Feb 9 18:30:35.369000 audit: BPF prog-id=141 op=UNLOAD Feb 9 18:30:35.393556 env[1146]: time="2024-02-09T18:30:35.393489752Z" level=info msg="shim disconnected" id=5f81d4610578a13cc1cd6e55ef1751768fcb1f6617f6e2b5f3feb12235e834d4 Feb 9 18:30:35.394018 env[1146]: time="2024-02-09T18:30:35.393626567Z" level=warning msg="cleaning up after shim disconnected" id=5f81d4610578a13cc1cd6e55ef1751768fcb1f6617f6e2b5f3feb12235e834d4 namespace=k8s.io Feb 9 18:30:35.394018 env[1146]: time="2024-02-09T18:30:35.393639568Z" level=info msg="cleaning up dead shim" Feb 9 18:30:35.402327 env[1146]: time="2024-02-09T18:30:35.402274089Z" level=warning msg="cleanup warnings time=\"2024-02-09T18:30:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2651 runtime=io.containerd.runc.v2\n" Feb 9 18:30:35.689672 kubelet[2009]: E0209 18:30:35.689628 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zdcmm" podUID="29ec715c-b377-41b0-b3fb-4bbf5d6a19ba" Feb 9 18:30:35.742475 kubelet[2009]: I0209 18:30:35.742447 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 18:30:35.742772 kubelet[2009]: E0209 18:30:35.742677 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:35.742985 kubelet[2009]: E0209 18:30:35.742960 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:35.743406 env[1146]: time="2024-02-09T18:30:35.743375016Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\"" Feb 9 18:30:36.743433 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3661115090.mount: Deactivated successfully. Feb 9 18:30:37.689338 kubelet[2009]: E0209 18:30:37.689284 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zdcmm" podUID="29ec715c-b377-41b0-b3fb-4bbf5d6a19ba" Feb 9 18:30:39.688976 kubelet[2009]: E0209 18:30:39.688936 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-zdcmm" podUID="29ec715c-b377-41b0-b3fb-4bbf5d6a19ba" Feb 9 18:30:39.792228 env[1146]: time="2024-02-09T18:30:39.792186070Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:39.793942 env[1146]: time="2024-02-09T18:30:39.793897945Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:39.795102 env[1146]: time="2024-02-09T18:30:39.795079372Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:39.796705 env[1146]: time="2024-02-09T18:30:39.796671315Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:d943b4c23e82a39b0186a1a3b2fe8f728e543d503df72d7be521501a82b7e7b4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:39.797231 env[1146]: time="2024-02-09T18:30:39.797202563Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.0\" returns image reference \"sha256:9c9318f5fbf505fc3d84676966009a3887e58ea1e3eac10039e5a96dfceb254b\"" Feb 9 18:30:39.799646 env[1146]: time="2024-02-09T18:30:39.799611701Z" level=info msg="CreateContainer within sandbox \"9fa948e2306d6b400b61231dda52fa544ad5fdded7db93fdb951c1da13a85268\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Feb 9 18:30:39.811471 env[1146]: time="2024-02-09T18:30:39.811440129Z" level=info msg="CreateContainer within sandbox \"9fa948e2306d6b400b61231dda52fa544ad5fdded7db93fdb951c1da13a85268\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"ac7620029de8cacb02becdf686375ea503730abf939806a692e85e3d99fb5fb2\"" Feb 9 18:30:39.812093 env[1146]: time="2024-02-09T18:30:39.812064585Z" level=info msg="StartContainer for \"ac7620029de8cacb02becdf686375ea503730abf939806a692e85e3d99fb5fb2\"" Feb 9 18:30:39.833954 systemd[1]: Started cri-containerd-ac7620029de8cacb02becdf686375ea503730abf939806a692e85e3d99fb5fb2.scope. Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.865022 kernel: kauditd_printk_skb: 223 callbacks suppressed Feb 9 18:30:39.865094 kernel: audit: type=1400 audit(1707503439.862:1127): avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.865119 kernel: audit: type=1300 audit(1707503439.862:1127): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2492 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:39.862000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2492 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:39.867662 kernel: audit: type=1327 audit(1707503439.862:1127): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163373632303032396465386361636230326265636466363836333735 Feb 9 18:30:39.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163373632303032396465386361636230326265636466363836333735 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.871662 kernel: audit: type=1400 audit(1707503439.862:1128): avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.871728 kernel: audit: type=1400 audit(1707503439.862:1128): avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.875577 kernel: audit: type=1400 audit(1707503439.862:1128): avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.877702 kernel: audit: type=1400 audit(1707503439.862:1128): avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.877769 kernel: audit: type=1400 audit(1707503439.862:1128): avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.881491 kernel: audit: type=1400 audit(1707503439.862:1128): avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.881548 kernel: audit: type=1400 audit(1707503439.862:1128): avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit: BPF prog-id=142 op=LOAD Feb 9 18:30:39.862000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2492 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:39.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163373632303032396465386361636230326265636466363836333735 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.862000 audit: BPF prog-id=143 op=LOAD Feb 9 18:30:39.862000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2492 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:39.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163373632303032396465386361636230326265636466363836333735 Feb 9 18:30:39.864000 audit: BPF prog-id=143 op=UNLOAD Feb 9 18:30:39.864000 audit: BPF prog-id=142 op=UNLOAD Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { perfmon } for pid=2677 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit[2677]: AVC avc: denied { bpf } for pid=2677 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:39.864000 audit: BPF prog-id=144 op=LOAD Feb 9 18:30:39.864000 audit[2677]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2492 pid=2677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:39.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163373632303032396465386361636230326265636466363836333735 Feb 9 18:30:39.894050 env[1146]: time="2024-02-09T18:30:39.894005383Z" level=info msg="StartContainer for \"ac7620029de8cacb02becdf686375ea503730abf939806a692e85e3d99fb5fb2\" returns successfully" Feb 9 18:30:40.604720 env[1146]: time="2024-02-09T18:30:40.604660967Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Feb 9 18:30:40.608432 systemd[1]: cri-containerd-ac7620029de8cacb02becdf686375ea503730abf939806a692e85e3d99fb5fb2.scope: Deactivated successfully. Feb 9 18:30:40.613000 audit: BPF prog-id=144 op=UNLOAD Feb 9 18:30:40.622113 kubelet[2009]: I0209 18:30:40.621912 2009 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Feb 9 18:30:40.635939 env[1146]: time="2024-02-09T18:30:40.635886277Z" level=info msg="shim disconnected" id=ac7620029de8cacb02becdf686375ea503730abf939806a692e85e3d99fb5fb2 Feb 9 18:30:40.635939 env[1146]: time="2024-02-09T18:30:40.635933722Z" level=warning msg="cleaning up after shim disconnected" id=ac7620029de8cacb02becdf686375ea503730abf939806a692e85e3d99fb5fb2 namespace=k8s.io Feb 9 18:30:40.635939 env[1146]: time="2024-02-09T18:30:40.635943442Z" level=info msg="cleaning up dead shim" Feb 9 18:30:40.646615 env[1146]: time="2024-02-09T18:30:40.646566645Z" level=warning msg="cleanup warnings time=\"2024-02-09T18:30:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2726 runtime=io.containerd.runc.v2\n" Feb 9 18:30:40.649880 kubelet[2009]: I0209 18:30:40.649822 2009 topology_manager.go:215] "Topology Admit Handler" podUID="08a1d60c-4f44-4461-a0b2-9e18871123c4" podNamespace="kube-system" podName="coredns-5dd5756b68-glcd9" Feb 9 18:30:40.650043 kubelet[2009]: I0209 18:30:40.650022 2009 topology_manager.go:215] "Topology Admit Handler" podUID="2686f9a6-afe9-4cfd-bb35-4734db9b315f" podNamespace="calico-system" podName="calico-kube-controllers-7ff54d4cbb-w85vs" Feb 9 18:30:40.650580 kubelet[2009]: I0209 18:30:40.650545 2009 topology_manager.go:215] "Topology Admit Handler" podUID="a889bc43-433c-4e8e-9b21-ad9046eaad57" podNamespace="kube-system" podName="coredns-5dd5756b68-7sr4f" Feb 9 18:30:40.658563 systemd[1]: Created slice kubepods-besteffort-pod2686f9a6_afe9_4cfd_bb35_4734db9b315f.slice. Feb 9 18:30:40.664832 systemd[1]: Created slice kubepods-burstable-pod08a1d60c_4f44_4461_a0b2_9e18871123c4.slice. Feb 9 18:30:40.671726 systemd[1]: Created slice kubepods-burstable-poda889bc43_433c_4e8e_9b21_ad9046eaad57.slice. Feb 9 18:30:40.694694 kubelet[2009]: I0209 18:30:40.694645 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-544fr\" (UniqueName: \"kubernetes.io/projected/a889bc43-433c-4e8e-9b21-ad9046eaad57-kube-api-access-544fr\") pod \"coredns-5dd5756b68-7sr4f\" (UID: \"a889bc43-433c-4e8e-9b21-ad9046eaad57\") " pod="kube-system/coredns-5dd5756b68-7sr4f" Feb 9 18:30:40.694694 kubelet[2009]: I0209 18:30:40.694701 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a889bc43-433c-4e8e-9b21-ad9046eaad57-config-volume\") pod \"coredns-5dd5756b68-7sr4f\" (UID: \"a889bc43-433c-4e8e-9b21-ad9046eaad57\") " pod="kube-system/coredns-5dd5756b68-7sr4f" Feb 9 18:30:40.695046 kubelet[2009]: I0209 18:30:40.694723 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7vhzw\" (UniqueName: \"kubernetes.io/projected/08a1d60c-4f44-4461-a0b2-9e18871123c4-kube-api-access-7vhzw\") pod \"coredns-5dd5756b68-glcd9\" (UID: \"08a1d60c-4f44-4461-a0b2-9e18871123c4\") " pod="kube-system/coredns-5dd5756b68-glcd9" Feb 9 18:30:40.695046 kubelet[2009]: I0209 18:30:40.694752 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/2686f9a6-afe9-4cfd-bb35-4734db9b315f-tigera-ca-bundle\") pod \"calico-kube-controllers-7ff54d4cbb-w85vs\" (UID: \"2686f9a6-afe9-4cfd-bb35-4734db9b315f\") " pod="calico-system/calico-kube-controllers-7ff54d4cbb-w85vs" Feb 9 18:30:40.695046 kubelet[2009]: I0209 18:30:40.694775 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/08a1d60c-4f44-4461-a0b2-9e18871123c4-config-volume\") pod \"coredns-5dd5756b68-glcd9\" (UID: \"08a1d60c-4f44-4461-a0b2-9e18871123c4\") " pod="kube-system/coredns-5dd5756b68-glcd9" Feb 9 18:30:40.695046 kubelet[2009]: I0209 18:30:40.694799 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rn5tb\" (UniqueName: \"kubernetes.io/projected/2686f9a6-afe9-4cfd-bb35-4734db9b315f-kube-api-access-rn5tb\") pod \"calico-kube-controllers-7ff54d4cbb-w85vs\" (UID: \"2686f9a6-afe9-4cfd-bb35-4734db9b315f\") " pod="calico-system/calico-kube-controllers-7ff54d4cbb-w85vs" Feb 9 18:30:40.755128 kubelet[2009]: E0209 18:30:40.755084 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:40.757602 env[1146]: time="2024-02-09T18:30:40.757539279Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\"" Feb 9 18:30:40.810028 systemd[1]: run-containerd-runc-k8s.io-ac7620029de8cacb02becdf686375ea503730abf939806a692e85e3d99fb5fb2-runc.ESWDvX.mount: Deactivated successfully. Feb 9 18:30:40.810111 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ac7620029de8cacb02becdf686375ea503730abf939806a692e85e3d99fb5fb2-rootfs.mount: Deactivated successfully. Feb 9 18:30:40.963703 env[1146]: time="2024-02-09T18:30:40.963639771Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7ff54d4cbb-w85vs,Uid:2686f9a6-afe9-4cfd-bb35-4734db9b315f,Namespace:calico-system,Attempt:0,}" Feb 9 18:30:40.968720 kubelet[2009]: E0209 18:30:40.968489 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:40.969898 env[1146]: time="2024-02-09T18:30:40.969849910Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-glcd9,Uid:08a1d60c-4f44-4461-a0b2-9e18871123c4,Namespace:kube-system,Attempt:0,}" Feb 9 18:30:40.974420 kubelet[2009]: E0209 18:30:40.974391 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:40.974944 env[1146]: time="2024-02-09T18:30:40.974915590Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-7sr4f,Uid:a889bc43-433c-4e8e-9b21-ad9046eaad57,Namespace:kube-system,Attempt:0,}" Feb 9 18:30:41.060250 env[1146]: time="2024-02-09T18:30:41.060173077Z" level=error msg="Failed to destroy network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.061122 env[1146]: time="2024-02-09T18:30:41.060618835Z" level=error msg="encountered an error cleaning up failed sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.061122 env[1146]: time="2024-02-09T18:30:41.060668999Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-glcd9,Uid:08a1d60c-4f44-4461-a0b2-9e18871123c4,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.061837 kubelet[2009]: E0209 18:30:41.061802 2009 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.061946 kubelet[2009]: E0209 18:30:41.061878 2009 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-glcd9" Feb 9 18:30:41.062084 kubelet[2009]: E0209 18:30:41.062065 2009 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-glcd9" Feb 9 18:30:41.062146 kubelet[2009]: E0209 18:30:41.062138 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-glcd9_kube-system(08a1d60c-4f44-4461-a0b2-9e18871123c4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-glcd9_kube-system(08a1d60c-4f44-4461-a0b2-9e18871123c4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-glcd9" podUID="08a1d60c-4f44-4461-a0b2-9e18871123c4" Feb 9 18:30:41.063869 env[1146]: time="2024-02-09T18:30:41.063832143Z" level=error msg="Failed to destroy network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.064493 env[1146]: time="2024-02-09T18:30:41.064456515Z" level=error msg="encountered an error cleaning up failed sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.064911 env[1146]: time="2024-02-09T18:30:41.064876470Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7ff54d4cbb-w85vs,Uid:2686f9a6-afe9-4cfd-bb35-4734db9b315f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.065100 env[1146]: time="2024-02-09T18:30:41.064756340Z" level=error msg="Failed to destroy network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.065324 kubelet[2009]: E0209 18:30:41.065298 2009 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.065389 kubelet[2009]: E0209 18:30:41.065342 2009 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7ff54d4cbb-w85vs" Feb 9 18:30:41.065389 kubelet[2009]: E0209 18:30:41.065370 2009 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7ff54d4cbb-w85vs" Feb 9 18:30:41.065468 kubelet[2009]: E0209 18:30:41.065447 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7ff54d4cbb-w85vs_calico-system(2686f9a6-afe9-4cfd-bb35-4734db9b315f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7ff54d4cbb-w85vs_calico-system(2686f9a6-afe9-4cfd-bb35-4734db9b315f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7ff54d4cbb-w85vs" podUID="2686f9a6-afe9-4cfd-bb35-4734db9b315f" Feb 9 18:30:41.066797 env[1146]: time="2024-02-09T18:30:41.066491085Z" level=error msg="encountered an error cleaning up failed sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.066797 env[1146]: time="2024-02-09T18:30:41.066546010Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-7sr4f,Uid:a889bc43-433c-4e8e-9b21-ad9046eaad57,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.067129 kubelet[2009]: E0209 18:30:41.066992 2009 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.067129 kubelet[2009]: E0209 18:30:41.067040 2009 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-7sr4f" Feb 9 18:30:41.067129 kubelet[2009]: E0209 18:30:41.067059 2009 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-7sr4f" Feb 9 18:30:41.067247 kubelet[2009]: E0209 18:30:41.067104 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-7sr4f_kube-system(a889bc43-433c-4e8e-9b21-ad9046eaad57)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-7sr4f_kube-system(a889bc43-433c-4e8e-9b21-ad9046eaad57)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-7sr4f" podUID="a889bc43-433c-4e8e-9b21-ad9046eaad57" Feb 9 18:30:41.695178 systemd[1]: Created slice kubepods-besteffort-pod29ec715c_b377_41b0_b3fb_4bbf5d6a19ba.slice. Feb 9 18:30:41.697605 env[1146]: time="2024-02-09T18:30:41.697566141Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zdcmm,Uid:29ec715c-b377-41b0-b3fb-4bbf5d6a19ba,Namespace:calico-system,Attempt:0,}" Feb 9 18:30:41.748194 env[1146]: time="2024-02-09T18:30:41.745055669Z" level=error msg="Failed to destroy network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.748194 env[1146]: time="2024-02-09T18:30:41.745419220Z" level=error msg="encountered an error cleaning up failed sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.748194 env[1146]: time="2024-02-09T18:30:41.745465544Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zdcmm,Uid:29ec715c-b377-41b0-b3fb-4bbf5d6a19ba,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.748506 kubelet[2009]: E0209 18:30:41.745661 2009 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.748506 kubelet[2009]: E0209 18:30:41.745706 2009 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zdcmm" Feb 9 18:30:41.748506 kubelet[2009]: E0209 18:30:41.745724 2009 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-zdcmm" Feb 9 18:30:41.748861 kubelet[2009]: E0209 18:30:41.745768 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-zdcmm_calico-system(29ec715c-b377-41b0-b3fb-4bbf5d6a19ba)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-zdcmm_calico-system(29ec715c-b377-41b0-b3fb-4bbf5d6a19ba)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zdcmm" podUID="29ec715c-b377-41b0-b3fb-4bbf5d6a19ba" Feb 9 18:30:41.757764 kubelet[2009]: I0209 18:30:41.757742 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:30:41.764493 env[1146]: time="2024-02-09T18:30:41.764455130Z" level=info msg="StopPodSandbox for \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\"" Feb 9 18:30:41.765700 kubelet[2009]: I0209 18:30:41.765665 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:30:41.767520 env[1146]: time="2024-02-09T18:30:41.767458221Z" level=info msg="StopPodSandbox for \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\"" Feb 9 18:30:41.769598 kubelet[2009]: I0209 18:30:41.769569 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:30:41.770223 env[1146]: time="2024-02-09T18:30:41.770190050Z" level=info msg="StopPodSandbox for \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\"" Feb 9 18:30:41.770693 kubelet[2009]: I0209 18:30:41.770675 2009 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:30:41.771318 env[1146]: time="2024-02-09T18:30:41.771053482Z" level=info msg="StopPodSandbox for \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\"" Feb 9 18:30:41.808719 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98-shm.mount: Deactivated successfully. Feb 9 18:30:41.808807 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743-shm.mount: Deactivated successfully. Feb 9 18:30:41.813151 env[1146]: time="2024-02-09T18:30:41.813049911Z" level=error msg="StopPodSandbox for \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\" failed" error="failed to destroy network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.813605 kubelet[2009]: E0209 18:30:41.813541 2009 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:30:41.813761 kubelet[2009]: E0209 18:30:41.813705 2009 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743"} Feb 9 18:30:41.813799 kubelet[2009]: E0209 18:30:41.813770 2009 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"2686f9a6-afe9-4cfd-bb35-4734db9b315f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 18:30:41.813859 kubelet[2009]: E0209 18:30:41.813817 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"2686f9a6-afe9-4cfd-bb35-4734db9b315f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7ff54d4cbb-w85vs" podUID="2686f9a6-afe9-4cfd-bb35-4734db9b315f" Feb 9 18:30:41.814909 env[1146]: time="2024-02-09T18:30:41.814865023Z" level=error msg="StopPodSandbox for \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\" failed" error="failed to destroy network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.815231 kubelet[2009]: E0209 18:30:41.815210 2009 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:30:41.815312 kubelet[2009]: E0209 18:30:41.815242 2009 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea"} Feb 9 18:30:41.815312 kubelet[2009]: E0209 18:30:41.815273 2009 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a889bc43-433c-4e8e-9b21-ad9046eaad57\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 18:30:41.815595 kubelet[2009]: E0209 18:30:41.815296 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a889bc43-433c-4e8e-9b21-ad9046eaad57\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-7sr4f" podUID="a889bc43-433c-4e8e-9b21-ad9046eaad57" Feb 9 18:30:41.823553 env[1146]: time="2024-02-09T18:30:41.823497424Z" level=error msg="StopPodSandbox for \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\" failed" error="failed to destroy network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.823894 kubelet[2009]: E0209 18:30:41.823872 2009 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:30:41.823967 kubelet[2009]: E0209 18:30:41.823910 2009 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc"} Feb 9 18:30:41.823967 kubelet[2009]: E0209 18:30:41.823942 2009 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 18:30:41.824050 kubelet[2009]: E0209 18:30:41.823968 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-zdcmm" podUID="29ec715c-b377-41b0-b3fb-4bbf5d6a19ba" Feb 9 18:30:41.834349 env[1146]: time="2024-02-09T18:30:41.834293246Z" level=error msg="StopPodSandbox for \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\" failed" error="failed to destroy network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Feb 9 18:30:41.834587 kubelet[2009]: E0209 18:30:41.834558 2009 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:30:41.834650 kubelet[2009]: E0209 18:30:41.834599 2009 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98"} Feb 9 18:30:41.834650 kubelet[2009]: E0209 18:30:41.834635 2009 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"08a1d60c-4f44-4461-a0b2-9e18871123c4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Feb 9 18:30:41.834754 kubelet[2009]: E0209 18:30:41.834661 2009 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"08a1d60c-4f44-4461-a0b2-9e18871123c4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-glcd9" podUID="08a1d60c-4f44-4461-a0b2-9e18871123c4" Feb 9 18:30:42.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.66:22-10.0.0.1:51260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:42.250361 systemd[1]: Started sshd@7-10.0.0.66:22-10.0.0.1:51260.service. Feb 9 18:30:42.292000 audit[2991]: USER_ACCT pid=2991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:42.292906 sshd[2991]: Accepted publickey for core from 10.0.0.1 port 51260 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:30:42.293000 audit[2991]: CRED_ACQ pid=2991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:42.293000 audit[2991]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc47d29e0 a2=3 a3=1 items=0 ppid=1 pid=2991 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:42.293000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:30:42.294233 sshd[2991]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:30:42.297903 systemd-logind[1135]: New session 8 of user core. Feb 9 18:30:42.298711 systemd[1]: Started session-8.scope. Feb 9 18:30:42.310000 audit[2991]: USER_START pid=2991 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:42.311000 audit[2993]: CRED_ACQ pid=2993 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:42.456867 sshd[2991]: pam_unix(sshd:session): session closed for user core Feb 9 18:30:42.456000 audit[2991]: USER_END pid=2991 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:42.456000 audit[2991]: CRED_DISP pid=2991 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:42.459745 systemd[1]: sshd@7-10.0.0.66:22-10.0.0.1:51260.service: Deactivated successfully. Feb 9 18:30:42.460485 systemd[1]: session-8.scope: Deactivated successfully. Feb 9 18:30:42.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.66:22-10.0.0.1:51260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:42.463123 systemd-logind[1135]: Session 8 logged out. Waiting for processes to exit. Feb 9 18:30:42.465240 systemd-logind[1135]: Removed session 8. Feb 9 18:30:45.926439 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount590918361.mount: Deactivated successfully. Feb 9 18:30:46.345959 env[1146]: time="2024-02-09T18:30:46.345694942Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:46.347193 env[1146]: time="2024-02-09T18:30:46.347161804Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:46.349073 env[1146]: time="2024-02-09T18:30:46.349043256Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:46.350373 env[1146]: time="2024-02-09T18:30:46.350345668Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:a45dffb21a0e9ca8962f36359a2ab776beeecd93843543c2fa1745d7bbb0f754,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:46.350851 env[1146]: time="2024-02-09T18:30:46.350815261Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.0\" returns image reference \"sha256:c445639cb28807ced09724016dc3b273b170b14d3b3d0c39b1affa1cc6b68774\"" Feb 9 18:30:46.364807 env[1146]: time="2024-02-09T18:30:46.364744837Z" level=info msg="CreateContainer within sandbox \"9fa948e2306d6b400b61231dda52fa544ad5fdded7db93fdb951c1da13a85268\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Feb 9 18:30:46.377751 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1717254200.mount: Deactivated successfully. Feb 9 18:30:46.384093 env[1146]: time="2024-02-09T18:30:46.384043150Z" level=info msg="CreateContainer within sandbox \"9fa948e2306d6b400b61231dda52fa544ad5fdded7db93fdb951c1da13a85268\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"2148e74cde1814bf79f03801751fafaa581646ac6a3fd20fc08bb717db2692cb\"" Feb 9 18:30:46.386329 env[1146]: time="2024-02-09T18:30:46.386241465Z" level=info msg="StartContainer for \"2148e74cde1814bf79f03801751fafaa581646ac6a3fd20fc08bb717db2692cb\"" Feb 9 18:30:46.410202 systemd[1]: Started cri-containerd-2148e74cde1814bf79f03801751fafaa581646ac6a3fd20fc08bb717db2692cb.scope. Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.456587 kernel: kauditd_printk_skb: 45 callbacks suppressed Feb 9 18:30:46.456670 kernel: audit: type=1400 audit(1707503446.453:1143): avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.456699 kernel: audit: type=1300 audit(1707503446.453:1143): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2492 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:46.453000 audit[3014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2492 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:46.459486 kernel: audit: type=1327 audit(1707503446.453:1143): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231343865373463646531383134626637396630333830313735316661 Feb 9 18:30:46.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231343865373463646531383134626637396630333830313735316661 Feb 9 18:30:46.462064 kernel: audit: type=1400 audit(1707503446.453:1144): avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.463549 kernel: audit: type=1400 audit(1707503446.453:1144): avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.465197 kernel: audit: type=1400 audit(1707503446.453:1144): avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.469468 kernel: audit: type=1400 audit(1707503446.453:1144): avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.471730 kernel: audit: type=1400 audit(1707503446.453:1144): avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.473722 kernel: audit: type=1400 audit(1707503446.453:1144): avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.473783 kernel: audit: type=1400 audit(1707503446.453:1144): avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit: BPF prog-id=145 op=LOAD Feb 9 18:30:46.453000 audit[3014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2492 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:46.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231343865373463646531383134626637396630333830313735316661 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.453000 audit: BPF prog-id=146 op=LOAD Feb 9 18:30:46.453000 audit[3014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2492 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:46.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231343865373463646531383134626637396630333830313735316661 Feb 9 18:30:46.455000 audit: BPF prog-id=146 op=UNLOAD Feb 9 18:30:46.455000 audit: BPF prog-id=145 op=UNLOAD Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { perfmon } for pid=3014 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit[3014]: AVC avc: denied { bpf } for pid=3014 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:46.455000 audit: BPF prog-id=147 op=LOAD Feb 9 18:30:46.455000 audit[3014]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2492 pid=3014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:46.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231343865373463646531383134626637396630333830313735316661 Feb 9 18:30:46.487998 env[1146]: time="2024-02-09T18:30:46.487941036Z" level=info msg="StartContainer for \"2148e74cde1814bf79f03801751fafaa581646ac6a3fd20fc08bb717db2692cb\" returns successfully" Feb 9 18:30:46.620337 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Feb 9 18:30:46.620464 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Feb 9 18:30:46.782964 kubelet[2009]: E0209 18:30:46.782924 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:46.796391 kubelet[2009]: I0209 18:30:46.796352 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-2jpvf" podStartSLOduration=1.580016556 podCreationTimestamp="2024-02-09 18:30:31 +0000 UTC" firstStartedPulling="2024-02-09 18:30:32.134805858 +0000 UTC m=+20.564003800" lastFinishedPulling="2024-02-09 18:30:46.351070438 +0000 UTC m=+34.780268420" observedRunningTime="2024-02-09 18:30:46.795421076 +0000 UTC m=+35.224619098" watchObservedRunningTime="2024-02-09 18:30:46.796281176 +0000 UTC m=+35.225479158" Feb 9 18:30:47.462267 systemd[1]: Started sshd@8-10.0.0.66:22-10.0.0.1:41414.service. Feb 9 18:30:47.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.66:22-10.0.0.1:41414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:47.502000 audit[3076]: USER_ACCT pid=3076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:47.503592 sshd[3076]: Accepted publickey for core from 10.0.0.1 port 41414 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:30:47.503000 audit[3076]: CRED_ACQ pid=3076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:47.503000 audit[3076]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd44ad740 a2=3 a3=1 items=0 ppid=1 pid=3076 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:47.503000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:30:47.505081 sshd[3076]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:30:47.508534 systemd-logind[1135]: New session 9 of user core. Feb 9 18:30:47.509454 systemd[1]: Started session-9.scope. Feb 9 18:30:47.512000 audit[3076]: USER_START pid=3076 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:47.513000 audit[3078]: CRED_ACQ pid=3078 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:47.638873 sshd[3076]: pam_unix(sshd:session): session closed for user core Feb 9 18:30:47.638000 audit[3076]: USER_END pid=3076 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:47.638000 audit[3076]: CRED_DISP pid=3076 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:47.641427 systemd[1]: sshd@8-10.0.0.66:22-10.0.0.1:41414.service: Deactivated successfully. Feb 9 18:30:47.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.66:22-10.0.0.1:41414 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:47.642263 systemd[1]: session-9.scope: Deactivated successfully. Feb 9 18:30:47.642869 systemd-logind[1135]: Session 9 logged out. Waiting for processes to exit. Feb 9 18:30:47.643725 systemd-logind[1135]: Removed session 9. Feb 9 18:30:47.784897 kubelet[2009]: I0209 18:30:47.784804 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 18:30:47.787589 kubelet[2009]: E0209 18:30:47.786169 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:47.965000 audit[3142]: AVC avc: denied { write } for pid=3142 comm="tee" name="fd" dev="proc" ino=17329 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:30:47.965000 audit[3142]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe6e7998c a2=241 a3=1b6 items=1 ppid=3112 pid=3142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:47.965000 audit: CWD cwd="/etc/service/enabled/bird/log" Feb 9 18:30:47.965000 audit: PATH item=0 name="/dev/fd/63" inode=18826 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:30:47.965000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:30:47.969000 audit[3147]: AVC avc: denied { write } for pid=3147 comm="tee" name="fd" dev="proc" ino=19469 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:30:47.969000 audit[3147]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcfe6d97b a2=241 a3=1b6 items=1 ppid=3097 pid=3147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:47.969000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Feb 9 18:30:47.969000 audit: PATH item=0 name="/dev/fd/63" inode=17324 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:30:47.969000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:30:47.975000 audit[3160]: AVC avc: denied { write } for pid=3160 comm="tee" name="fd" dev="proc" ino=19478 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:30:47.975000 audit[3160]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe546398d a2=241 a3=1b6 items=1 ppid=3100 pid=3160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:47.975000 audit: CWD cwd="/etc/service/enabled/cni/log" Feb 9 18:30:47.975000 audit: PATH item=0 name="/dev/fd/63" inode=19473 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:30:47.975000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:30:47.975000 audit[3155]: AVC avc: denied { write } for pid=3155 comm="tee" name="fd" dev="proc" ino=17347 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:30:47.975000 audit[3155]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe6f4697c a2=241 a3=1b6 items=1 ppid=3098 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:47.975000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Feb 9 18:30:47.975000 audit: PATH item=0 name="/dev/fd/63" inode=18265 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:30:47.975000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:30:47.977000 audit[3161]: AVC avc: denied { write } for pid=3161 comm="tee" name="fd" dev="proc" ino=17351 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:30:47.978000 audit[3163]: AVC avc: denied { write } for pid=3163 comm="tee" name="fd" dev="proc" ino=17354 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:30:47.977000 audit[3161]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd310f98b a2=241 a3=1b6 items=1 ppid=3103 pid=3161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:47.978000 audit[3163]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcbe6398b a2=241 a3=1b6 items=1 ppid=3106 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:47.977000 audit: CWD cwd="/etc/service/enabled/confd/log" Feb 9 18:30:47.978000 audit: CWD cwd="/etc/service/enabled/bird6/log" Feb 9 18:30:47.977000 audit: PATH item=0 name="/dev/fd/63" inode=17343 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:30:47.978000 audit: PATH item=0 name="/dev/fd/63" inode=17344 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:30:47.978000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:30:47.977000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:30:47.998000 audit[3166]: AVC avc: denied { write } for pid=3166 comm="tee" name="fd" dev="proc" ino=19482 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Feb 9 18:30:47.998000 audit[3166]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc998398b a2=241 a3=1b6 items=1 ppid=3099 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:47.998000 audit: CWD cwd="/etc/service/enabled/felix/log" Feb 9 18:30:47.998000 audit: PATH item=0 name="/dev/fd/63" inode=18832 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Feb 9 18:30:47.998000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Feb 9 18:30:52.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.66:22-10.0.0.1:53560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:52.643851 systemd[1]: Started sshd@9-10.0.0.66:22-10.0.0.1:53560.service. Feb 9 18:30:52.644518 kernel: kauditd_printk_skb: 79 callbacks suppressed Feb 9 18:30:52.644557 kernel: audit: type=1130 audit(1707503452.643:1165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.66:22-10.0.0.1:53560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:52.688000 audit[3295]: USER_ACCT pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.688602 sshd[3295]: Accepted publickey for core from 10.0.0.1 port 53560 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:30:52.690088 sshd[3295]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:30:52.689000 audit[3295]: CRED_ACQ pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.692349 env[1146]: time="2024-02-09T18:30:52.692268544Z" level=info msg="StopPodSandbox for \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\"" Feb 9 18:30:52.692879 kernel: audit: type=1101 audit(1707503452.688:1166): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.692947 kernel: audit: type=1103 audit(1707503452.689:1167): pid=3295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.692976 kernel: audit: type=1006 audit(1707503452.689:1168): pid=3295 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Feb 9 18:30:52.689000 audit[3295]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9841d50 a2=3 a3=1 items=0 ppid=1 pid=3295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:52.696197 systemd-logind[1135]: New session 10 of user core. Feb 9 18:30:52.696632 systemd[1]: Started session-10.scope. Feb 9 18:30:52.697156 kernel: audit: type=1300 audit(1707503452.689:1168): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9841d50 a2=3 a3=1 items=0 ppid=1 pid=3295 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:52.689000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:30:52.698432 kernel: audit: type=1327 audit(1707503452.689:1168): proctitle=737368643A20636F7265205B707269765D Feb 9 18:30:52.701000 audit[3295]: USER_START pid=3295 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.702000 audit[3314]: CRED_ACQ pid=3314 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.706482 kernel: audit: type=1105 audit(1707503452.701:1169): pid=3295 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.706553 kernel: audit: type=1103 audit(1707503452.702:1170): pid=3314 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.832943 kubelet[2009]: I0209 18:30:52.832905 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 18:30:52.833825 kubelet[2009]: E0209 18:30:52.833789 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:52.864245 sshd[3295]: pam_unix(sshd:session): session closed for user core Feb 9 18:30:52.867000 audit[3295]: USER_END pid=3295 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.874541 kernel: audit: type=1106 audit(1707503452.867:1171): pid=3295 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.874851 kernel: audit: type=1130 audit(1707503452.868:1172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.66:22-10.0.0.1:53568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:52.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.66:22-10.0.0.1:53568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:52.869000 audit[3295]: CRED_DISP pid=3295 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.66:22-10.0.0.1:53560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:52.868826 systemd[1]: Started sshd@10-10.0.0.66:22-10.0.0.1:53568.service. Feb 9 18:30:52.874387 systemd[1]: sshd@9-10.0.0.66:22-10.0.0.1:53560.service: Deactivated successfully. Feb 9 18:30:52.875517 systemd[1]: session-10.scope: Deactivated successfully. Feb 9 18:30:52.876703 systemd-logind[1135]: Session 10 logged out. Waiting for processes to exit. Feb 9 18:30:52.879318 systemd-logind[1135]: Removed session 10. Feb 9 18:30:52.919000 audit[3344]: USER_ACCT pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.920566 sshd[3344]: Accepted publickey for core from 10.0.0.1 port 53568 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:30:52.921000 audit[3344]: CRED_ACQ pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.921000 audit[3344]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff0a9ac00 a2=3 a3=1 items=0 ppid=1 pid=3344 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:52.921000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:30:52.922568 sshd[3344]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:30:52.928093 systemd-logind[1135]: New session 11 of user core. Feb 9 18:30:52.929004 systemd[1]: Started session-11.scope. Feb 9 18:30:52.935000 audit[3344]: USER_START pid=3344 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:52.937000 audit[3365]: CRED_ACQ pid=3365 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:52.834 [INFO][3315] k8s.go 578: Cleaning up netns ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:52.842 [INFO][3315] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" iface="eth0" netns="/var/run/netns/cni-2ef782d5-2880-2f1b-7d1f-b78ed4ddd13f" Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:52.843 [INFO][3315] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" iface="eth0" netns="/var/run/netns/cni-2ef782d5-2880-2f1b-7d1f-b78ed4ddd13f" Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:52.843 [INFO][3315] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" iface="eth0" netns="/var/run/netns/cni-2ef782d5-2880-2f1b-7d1f-b78ed4ddd13f" Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:52.844 [INFO][3315] k8s.go 585: Releasing IP address(es) ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:52.844 [INFO][3315] utils.go 188: Calico CNI releasing IP address ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:53.029 [INFO][3339] ipam_plugin.go 415: Releasing address using handleID ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" HandleID="k8s-pod-network.5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:53.029 [INFO][3339] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:53.029 [INFO][3339] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:53.044 [WARNING][3339] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" HandleID="k8s-pod-network.5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:53.044 [INFO][3339] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" HandleID="k8s-pod-network.5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:53.047 [INFO][3339] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:30:53.050862 env[1146]: 2024-02-09 18:30:53.049 [INFO][3315] k8s.go 591: Teardown processing complete. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:30:53.052643 systemd[1]: run-netns-cni\x2d2ef782d5\x2d2880\x2d2f1b\x2d7d1f\x2db78ed4ddd13f.mount: Deactivated successfully. Feb 9 18:30:53.053067 env[1146]: time="2024-02-09T18:30:53.052896264Z" level=info msg="TearDown network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\" successfully" Feb 9 18:30:53.053129 env[1146]: time="2024-02-09T18:30:53.053089235Z" level=info msg="StopPodSandbox for \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\" returns successfully" Feb 9 18:30:53.053669 kubelet[2009]: E0209 18:30:53.053457 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:53.054089 env[1146]: time="2024-02-09T18:30:53.054060570Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-7sr4f,Uid:a889bc43-433c-4e8e-9b21-ad9046eaad57,Namespace:kube-system,Attempt:1,}" Feb 9 18:30:53.221065 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali995f9a9ae1d: link becomes ready Feb 9 18:30:53.218747 systemd-networkd[1054]: cali995f9a9ae1d: Link UP Feb 9 18:30:53.220167 systemd-networkd[1054]: cali995f9a9ae1d: Gained carrier Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.109 [INFO][3403] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.128 [INFO][3403] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5dd5756b68--7sr4f-eth0 coredns-5dd5756b68- kube-system a889bc43-433c-4e8e-9b21-ad9046eaad57 752 0 2024-02-09 18:30:26 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5dd5756b68-7sr4f eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali995f9a9ae1d [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Namespace="kube-system" Pod="coredns-5dd5756b68-7sr4f" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--7sr4f-" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.128 [INFO][3403] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Namespace="kube-system" Pod="coredns-5dd5756b68-7sr4f" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.155 [INFO][3416] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" HandleID="k8s-pod-network.8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.175 [INFO][3416] ipam_plugin.go 268: Auto assigning IP ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" HandleID="k8s-pod-network.8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400020f910), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5dd5756b68-7sr4f", "timestamp":"2024-02-09 18:30:53.155682192 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.175 [INFO][3416] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.175 [INFO][3416] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.175 [INFO][3416] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.177 [INFO][3416] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" host="localhost" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.185 [INFO][3416] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.188 [INFO][3416] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.193 [INFO][3416] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.199 [INFO][3416] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.199 [INFO][3416] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" host="localhost" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.202 [INFO][3416] ipam.go 1682: Creating new handle: k8s-pod-network.8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.206 [INFO][3416] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" host="localhost" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.210 [INFO][3416] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" host="localhost" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.210 [INFO][3416] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" host="localhost" Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.210 [INFO][3416] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:30:53.241079 env[1146]: 2024-02-09 18:30:53.210 [INFO][3416] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" HandleID="k8s-pod-network.8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.241779 env[1146]: 2024-02-09 18:30:53.213 [INFO][3403] k8s.go 385: Populated endpoint ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Namespace="kube-system" Pod="coredns-5dd5756b68-7sr4f" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--7sr4f-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"a889bc43-433c-4e8e-9b21-ad9046eaad57", ResourceVersion:"752", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5dd5756b68-7sr4f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali995f9a9ae1d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:30:53.241779 env[1146]: 2024-02-09 18:30:53.213 [INFO][3403] k8s.go 386: Calico CNI using IPs: [192.168.88.129/32] ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Namespace="kube-system" Pod="coredns-5dd5756b68-7sr4f" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.241779 env[1146]: 2024-02-09 18:30:53.213 [INFO][3403] dataplane_linux.go 68: Setting the host side veth name to cali995f9a9ae1d ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Namespace="kube-system" Pod="coredns-5dd5756b68-7sr4f" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.241779 env[1146]: 2024-02-09 18:30:53.218 [INFO][3403] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Namespace="kube-system" Pod="coredns-5dd5756b68-7sr4f" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.241779 env[1146]: 2024-02-09 18:30:53.219 [INFO][3403] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Namespace="kube-system" Pod="coredns-5dd5756b68-7sr4f" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--7sr4f-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"a889bc43-433c-4e8e-9b21-ad9046eaad57", ResourceVersion:"752", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d", Pod:"coredns-5dd5756b68-7sr4f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali995f9a9ae1d", MAC:"ee:c8:b6:e0:a4:b0", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:30:53.241779 env[1146]: 2024-02-09 18:30:53.236 [INFO][3403] k8s.go 491: Wrote updated endpoint to datastore ContainerID="8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d" Namespace="kube-system" Pod="coredns-5dd5756b68-7sr4f" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:30:53.257424 sshd[3344]: pam_unix(sshd:session): session closed for user core Feb 9 18:30:53.263000 audit[3344]: USER_END pid=3344 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:53.263000 audit[3344]: CRED_DISP pid=3344 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:53.263783 systemd[1]: Started sshd@11-10.0.0.66:22-10.0.0.1:53582.service. Feb 9 18:30:53.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.66:22-10.0.0.1:53582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:53.266050 systemd[1]: sshd@10-10.0.0.66:22-10.0.0.1:53568.service: Deactivated successfully. Feb 9 18:30:53.266000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.66:22-10.0.0.1:53568 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:53.268029 systemd[1]: session-11.scope: Deactivated successfully. Feb 9 18:30:53.270970 systemd-logind[1135]: Session 11 logged out. Waiting for processes to exit. Feb 9 18:30:53.278562 systemd-logind[1135]: Removed session 11. Feb 9 18:30:53.292447 env[1146]: time="2024-02-09T18:30:53.290332465Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:53.292447 env[1146]: time="2024-02-09T18:30:53.290382508Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:53.292447 env[1146]: time="2024-02-09T18:30:53.290392709Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:53.295120 env[1146]: time="2024-02-09T18:30:53.294745758Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d pid=3459 runtime=io.containerd.runc.v2 Feb 9 18:30:53.309000 audit[3444]: USER_ACCT pid=3444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:53.310449 sshd[3444]: Accepted publickey for core from 10.0.0.1 port 53582 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:30:53.311000 audit[3444]: CRED_ACQ pid=3444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:53.311000 audit[3444]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8722d20 a2=3 a3=1 items=0 ppid=1 pid=3444 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.311000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:30:53.311762 sshd[3444]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:30:53.315571 systemd[1]: Started cri-containerd-8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d.scope. Feb 9 18:30:53.320575 systemd-logind[1135]: New session 12 of user core. Feb 9 18:30:53.321490 systemd[1]: Started session-12.scope. Feb 9 18:30:53.327000 audit[3444]: USER_START pid=3444 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:53.328000 audit[3490]: CRED_ACQ pid=3490 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.341000 audit: BPF prog-id=148 op=LOAD Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3459 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636237663731333538613063656438396562323639353235663839 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3459 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636237663731333538613063656438396562323639353235663839 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit: BPF prog-id=149 op=LOAD Feb 9 18:30:53.342000 audit[3469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3459 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636237663731333538613063656438396562323639353235663839 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit: BPF prog-id=150 op=LOAD Feb 9 18:30:53.342000 audit[3469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3459 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636237663731333538613063656438396562323639353235663839 Feb 9 18:30:53.342000 audit: BPF prog-id=150 op=UNLOAD Feb 9 18:30:53.342000 audit: BPF prog-id=149 op=UNLOAD Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { perfmon } for pid=3469 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit[3469]: AVC avc: denied { bpf } for pid=3469 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.342000 audit: BPF prog-id=151 op=LOAD Feb 9 18:30:53.342000 audit[3469]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3459 pid=3469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.342000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3866636237663731333538613063656438396562323639353235663839 Feb 9 18:30:53.344237 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:30:53.372257 env[1146]: time="2024-02-09T18:30:53.372215956Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-7sr4f,Uid:a889bc43-433c-4e8e-9b21-ad9046eaad57,Namespace:kube-system,Attempt:1,} returns sandbox id \"8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d\"" Feb 9 18:30:53.373262 kubelet[2009]: E0209 18:30:53.373242 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:53.375691 env[1146]: time="2024-02-09T18:30:53.375657033Z" level=info msg="CreateContainer within sandbox \"8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 18:30:53.386416 env[1146]: time="2024-02-09T18:30:53.386366807Z" level=info msg="CreateContainer within sandbox \"8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"7013edabd3642ce99fc33494b4ae42bc5251836dd5232b4c26c58a5a52ce5d07\"" Feb 9 18:30:53.387286 env[1146]: time="2024-02-09T18:30:53.387247857Z" level=info msg="StartContainer for \"7013edabd3642ce99fc33494b4ae42bc5251836dd5232b4c26c58a5a52ce5d07\"" Feb 9 18:30:53.401880 systemd[1]: Started cri-containerd-7013edabd3642ce99fc33494b4ae42bc5251836dd5232b4c26c58a5a52ce5d07.scope. Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit: BPF prog-id=152 op=LOAD Feb 9 18:30:53.423000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[3522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3459 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730313365646162643336343263653939666333333439346234616534 Feb 9 18:30:53.423000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.423000 audit[3522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3459 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.423000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730313365646162643336343263653939666333333439346234616534 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit: BPF prog-id=153 op=LOAD Feb 9 18:30:53.424000 audit[3522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3459 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730313365646162643336343263653939666333333439346234616534 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit: BPF prog-id=154 op=LOAD Feb 9 18:30:53.424000 audit[3522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3459 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730313365646162643336343263653939666333333439346234616534 Feb 9 18:30:53.424000 audit: BPF prog-id=154 op=UNLOAD Feb 9 18:30:53.424000 audit: BPF prog-id=153 op=UNLOAD Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { perfmon } for pid=3522 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit[3522]: AVC avc: denied { bpf } for pid=3522 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:53.424000 audit: BPF prog-id=155 op=LOAD Feb 9 18:30:53.424000 audit[3522]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3459 pid=3522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.424000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730313365646162643336343263653939666333333439346234616534 Feb 9 18:30:53.451448 env[1146]: time="2024-02-09T18:30:53.451390531Z" level=info msg="StartContainer for \"7013edabd3642ce99fc33494b4ae42bc5251836dd5232b4c26c58a5a52ce5d07\" returns successfully" Feb 9 18:30:53.461074 sshd[3444]: pam_unix(sshd:session): session closed for user core Feb 9 18:30:53.461000 audit[3444]: USER_END pid=3444 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:53.461000 audit[3444]: CRED_DISP pid=3444 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:53.464241 systemd[1]: sshd@11-10.0.0.66:22-10.0.0.1:53582.service: Deactivated successfully. Feb 9 18:30:53.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.66:22-10.0.0.1:53582 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:53.464988 systemd[1]: session-12.scope: Deactivated successfully. Feb 9 18:30:53.465428 systemd-logind[1135]: Session 12 logged out. Waiting for processes to exit. Feb 9 18:30:53.466050 systemd-logind[1135]: Removed session 12. Feb 9 18:30:53.797152 kubelet[2009]: E0209 18:30:53.797104 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:53.808266 kubelet[2009]: I0209 18:30:53.808222 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-7sr4f" podStartSLOduration=27.808186571 podCreationTimestamp="2024-02-09 18:30:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:30:53.807458929 +0000 UTC m=+42.236656911" watchObservedRunningTime="2024-02-09 18:30:53.808186571 +0000 UTC m=+42.237384553" Feb 9 18:30:53.827000 audit[3555]: NETFILTER_CFG table=filter:95 family=2 entries=16 op=nft_register_rule pid=3555 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:53.827000 audit[3555]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5660 a0=3 a1=ffffd85656c0 a2=0 a3=ffff9e5a36c0 items=0 ppid=2159 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:53.828000 audit[3555]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=3555 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:53.828000 audit[3555]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2572 a0=3 a1=ffffd85656c0 a2=0 a3=ffff9e5a36c0 items=0 ppid=2159 pid=3555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.828000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:53.850000 audit[3557]: NETFILTER_CFG table=filter:97 family=2 entries=13 op=nft_register_rule pid=3557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:53.850000 audit[3557]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=fffff6394240 a2=0 a3=ffffa6d716c0 items=0 ppid=2159 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.850000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:53.853000 audit[3557]: NETFILTER_CFG table=nat:98 family=2 entries=33 op=nft_register_chain pid=3557 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:53.853000 audit[3557]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13060 a0=3 a1=fffff6394240 a2=0 a3=ffffa6d716c0 items=0 ppid=2159 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:53.853000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:54.408426 systemd-networkd[1054]: cali995f9a9ae1d: Gained IPv6LL Feb 9 18:30:54.689622 env[1146]: time="2024-02-09T18:30:54.689505129Z" level=info msg="StopPodSandbox for \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\"" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.731 [INFO][3601] k8s.go 578: Cleaning up netns ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.731 [INFO][3601] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" iface="eth0" netns="/var/run/netns/cni-344bde08-ce7e-88eb-6ec1-316d167ec244" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.731 [INFO][3601] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" iface="eth0" netns="/var/run/netns/cni-344bde08-ce7e-88eb-6ec1-316d167ec244" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.731 [INFO][3601] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" iface="eth0" netns="/var/run/netns/cni-344bde08-ce7e-88eb-6ec1-316d167ec244" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.731 [INFO][3601] k8s.go 585: Releasing IP address(es) ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.731 [INFO][3601] utils.go 188: Calico CNI releasing IP address ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.751 [INFO][3609] ipam_plugin.go 415: Releasing address using handleID ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" HandleID="k8s-pod-network.1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.751 [INFO][3609] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.751 [INFO][3609] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.760 [WARNING][3609] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" HandleID="k8s-pod-network.1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.760 [INFO][3609] ipam_plugin.go 443: Releasing address using workloadID ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" HandleID="k8s-pod-network.1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.761 [INFO][3609] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:30:54.765265 env[1146]: 2024-02-09 18:30:54.763 [INFO][3601] k8s.go 591: Teardown processing complete. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:30:54.765708 env[1146]: time="2024-02-09T18:30:54.765413411Z" level=info msg="TearDown network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\" successfully" Feb 9 18:30:54.765708 env[1146]: time="2024-02-09T18:30:54.765445533Z" level=info msg="StopPodSandbox for \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\" returns successfully" Feb 9 18:30:54.767096 systemd[1]: run-netns-cni\x2d344bde08\x2dce7e\x2d88eb\x2d6ec1\x2d316d167ec244.mount: Deactivated successfully. Feb 9 18:30:54.767503 kubelet[2009]: E0209 18:30:54.767471 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:54.768236 env[1146]: time="2024-02-09T18:30:54.767887349Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-glcd9,Uid:08a1d60c-4f44-4461-a0b2-9e18871123c4,Namespace:kube-system,Attempt:1,}" Feb 9 18:30:54.798852 kubelet[2009]: E0209 18:30:54.798823 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:54.888507 systemd-networkd[1054]: cali1e3fc685479: Link UP Feb 9 18:30:54.890318 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 18:30:54.890368 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1e3fc685479: link becomes ready Feb 9 18:30:54.890410 systemd-networkd[1054]: cali1e3fc685479: Gained carrier Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.809 [INFO][3616] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.821 [INFO][3616] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--5dd5756b68--glcd9-eth0 coredns-5dd5756b68- kube-system 08a1d60c-4f44-4461-a0b2-9e18871123c4 792 0 2024-02-09 18:30:26 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-5dd5756b68-glcd9 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali1e3fc685479 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Namespace="kube-system" Pod="coredns-5dd5756b68-glcd9" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--glcd9-" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.821 [INFO][3616] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Namespace="kube-system" Pod="coredns-5dd5756b68-glcd9" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.849 [INFO][3629] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" HandleID="k8s-pod-network.d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.860 [INFO][3629] ipam_plugin.go 268: Auto assigning IP ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" HandleID="k8s-pod-network.d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c4c0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-5dd5756b68-glcd9", "timestamp":"2024-02-09 18:30:54.849479428 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.860 [INFO][3629] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.860 [INFO][3629] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.860 [INFO][3629] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.862 [INFO][3629] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" host="localhost" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.866 [INFO][3629] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.869 [INFO][3629] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.870 [INFO][3629] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.872 [INFO][3629] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.872 [INFO][3629] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" host="localhost" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.874 [INFO][3629] ipam.go 1682: Creating new handle: k8s-pod-network.d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.879 [INFO][3629] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" host="localhost" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.883 [INFO][3629] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" host="localhost" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.883 [INFO][3629] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" host="localhost" Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.883 [INFO][3629] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:30:54.899622 env[1146]: 2024-02-09 18:30:54.883 [INFO][3629] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" HandleID="k8s-pod-network.d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.900164 env[1146]: 2024-02-09 18:30:54.885 [INFO][3616] k8s.go 385: Populated endpoint ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Namespace="kube-system" Pod="coredns-5dd5756b68-glcd9" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--glcd9-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"08a1d60c-4f44-4461-a0b2-9e18871123c4", ResourceVersion:"792", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-5dd5756b68-glcd9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1e3fc685479", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:30:54.900164 env[1146]: 2024-02-09 18:30:54.885 [INFO][3616] k8s.go 386: Calico CNI using IPs: [192.168.88.130/32] ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Namespace="kube-system" Pod="coredns-5dd5756b68-glcd9" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.900164 env[1146]: 2024-02-09 18:30:54.885 [INFO][3616] dataplane_linux.go 68: Setting the host side veth name to cali1e3fc685479 ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Namespace="kube-system" Pod="coredns-5dd5756b68-glcd9" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.900164 env[1146]: 2024-02-09 18:30:54.890 [INFO][3616] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Namespace="kube-system" Pod="coredns-5dd5756b68-glcd9" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.900164 env[1146]: 2024-02-09 18:30:54.891 [INFO][3616] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Namespace="kube-system" Pod="coredns-5dd5756b68-glcd9" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--glcd9-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"08a1d60c-4f44-4461-a0b2-9e18871123c4", ResourceVersion:"792", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea", Pod:"coredns-5dd5756b68-glcd9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1e3fc685479", MAC:"0a:ac:25:72:f6:7b", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:30:54.900164 env[1146]: 2024-02-09 18:30:54.897 [INFO][3616] k8s.go 491: Wrote updated endpoint to datastore ContainerID="d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea" Namespace="kube-system" Pod="coredns-5dd5756b68-glcd9" WorkloadEndpoint="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:30:54.910566 env[1146]: time="2024-02-09T18:30:54.910492278Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:54.910566 env[1146]: time="2024-02-09T18:30:54.910540360Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:54.910566 env[1146]: time="2024-02-09T18:30:54.910551041Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:54.910809 env[1146]: time="2024-02-09T18:30:54.910745332Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea pid=3655 runtime=io.containerd.runc.v2 Feb 9 18:30:54.928878 systemd[1]: run-containerd-runc-k8s.io-d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea-runc.FRTgqR.mount: Deactivated successfully. Feb 9 18:30:54.930471 systemd[1]: Started cri-containerd-d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea.scope. Feb 9 18:30:54.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit: BPF prog-id=156 op=LOAD Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3655 pid=3666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:54.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666630316235313261373237613738326230353638356266393038 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3655 pid=3666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:54.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666630316235313261373237613738326230353638356266393038 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit: BPF prog-id=157 op=LOAD Feb 9 18:30:54.948000 audit[3666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3655 pid=3666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:54.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666630316235313261373237613738326230353638356266393038 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit: BPF prog-id=158 op=LOAD Feb 9 18:30:54.948000 audit[3666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3655 pid=3666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:54.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666630316235313261373237613738326230353638356266393038 Feb 9 18:30:54.948000 audit: BPF prog-id=158 op=UNLOAD Feb 9 18:30:54.948000 audit: BPF prog-id=157 op=UNLOAD Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { perfmon } for pid=3666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit[3666]: AVC avc: denied { bpf } for pid=3666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:54.948000 audit: BPF prog-id=159 op=LOAD Feb 9 18:30:54.948000 audit[3666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3655 pid=3666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:54.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431666630316235313261373237613738326230353638356266393038 Feb 9 18:30:54.951194 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:30:54.967619 env[1146]: time="2024-02-09T18:30:54.967578188Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-glcd9,Uid:08a1d60c-4f44-4461-a0b2-9e18871123c4,Namespace:kube-system,Attempt:1,} returns sandbox id \"d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea\"" Feb 9 18:30:54.968200 kubelet[2009]: E0209 18:30:54.968161 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:54.971390 env[1146]: time="2024-02-09T18:30:54.971359039Z" level=info msg="CreateContainer within sandbox \"d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Feb 9 18:30:54.985294 env[1146]: time="2024-02-09T18:30:54.985261016Z" level=info msg="CreateContainer within sandbox \"d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"01a1ea2d01a8797d6423ecca6070b90f9bd6c5c4b97dbb6b966735178943d9a0\"" Feb 9 18:30:54.985809 env[1146]: time="2024-02-09T18:30:54.985786285Z" level=info msg="StartContainer for \"01a1ea2d01a8797d6423ecca6070b90f9bd6c5c4b97dbb6b966735178943d9a0\"" Feb 9 18:30:55.002331 systemd[1]: Started cri-containerd-01a1ea2d01a8797d6423ecca6070b90f9bd6c5c4b97dbb6b966735178943d9a0.scope. Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit: BPF prog-id=160 op=LOAD Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3655 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:55.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031613165613264303161383739376436343233656363613630373062 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3655 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:55.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031613165613264303161383739376436343233656363613630373062 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.023000 audit: BPF prog-id=161 op=LOAD Feb 9 18:30:55.023000 audit[3701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3655 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:55.023000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031613165613264303161383739376436343233656363613630373062 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit: BPF prog-id=162 op=LOAD Feb 9 18:30:55.024000 audit[3701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3655 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:55.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031613165613264303161383739376436343233656363613630373062 Feb 9 18:30:55.024000 audit: BPF prog-id=162 op=UNLOAD Feb 9 18:30:55.024000 audit: BPF prog-id=161 op=UNLOAD Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { perfmon } for pid=3701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit[3701]: AVC avc: denied { bpf } for pid=3701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:55.024000 audit: BPF prog-id=163 op=LOAD Feb 9 18:30:55.024000 audit[3701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3655 pid=3701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:55.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031613165613264303161383739376436343233656363613630373062 Feb 9 18:30:55.039033 env[1146]: time="2024-02-09T18:30:55.037961311Z" level=info msg="StartContainer for \"01a1ea2d01a8797d6423ecca6070b90f9bd6c5c4b97dbb6b966735178943d9a0\" returns successfully" Feb 9 18:30:55.801874 kubelet[2009]: E0209 18:30:55.801836 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:55.802579 kubelet[2009]: E0209 18:30:55.802551 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:55.812890 kubelet[2009]: I0209 18:30:55.812666 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-glcd9" podStartSLOduration=29.81263322 podCreationTimestamp="2024-02-09 18:30:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-02-09 18:30:55.811333829 +0000 UTC m=+44.240531811" watchObservedRunningTime="2024-02-09 18:30:55.81263322 +0000 UTC m=+44.241831202" Feb 9 18:30:55.823000 audit[3757]: NETFILTER_CFG table=filter:99 family=2 entries=10 op=nft_register_rule pid=3757 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:55.823000 audit[3757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffd6d0c9d0 a2=0 a3=ffff80a046c0 items=0 ppid=2159 pid=3757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:55.823000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:55.828000 audit[3757]: NETFILTER_CFG table=nat:100 family=2 entries=42 op=nft_register_rule pid=3757 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:55.828000 audit[3757]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=13060 a0=3 a1=ffffd6d0c9d0 a2=0 a3=ffff80a046c0 items=0 ppid=2159 pid=3757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:55.828000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:55.833000 audit[3759]: NETFILTER_CFG table=filter:101 family=2 entries=10 op=nft_register_rule pid=3759 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:55.833000 audit[3759]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffd284d6b0 a2=0 a3=ffff89e366c0 items=0 ppid=2159 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:55.833000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:55.845000 audit[3759]: NETFILTER_CFG table=nat:102 family=2 entries=54 op=nft_register_chain pid=3759 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:55.845000 audit[3759]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18724 a0=3 a1=ffffd284d6b0 a2=0 a3=ffff89e366c0 items=0 ppid=2159 pid=3759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:55.845000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:55.944443 systemd-networkd[1054]: cali1e3fc685479: Gained IPv6LL Feb 9 18:30:56.689898 env[1146]: time="2024-02-09T18:30:56.689841113Z" level=info msg="StopPodSandbox for \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\"" Feb 9 18:30:56.690295 env[1146]: time="2024-02-09T18:30:56.690023242Z" level=info msg="StopPodSandbox for \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\"" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.737 [INFO][3828] k8s.go 578: Cleaning up netns ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.737 [INFO][3828] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" iface="eth0" netns="/var/run/netns/cni-7a7ef1b5-a396-5bd9-c7f0-f383ffdc6728" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.737 [INFO][3828] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" iface="eth0" netns="/var/run/netns/cni-7a7ef1b5-a396-5bd9-c7f0-f383ffdc6728" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.737 [INFO][3828] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" iface="eth0" netns="/var/run/netns/cni-7a7ef1b5-a396-5bd9-c7f0-f383ffdc6728" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.737 [INFO][3828] k8s.go 585: Releasing IP address(es) ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.737 [INFO][3828] utils.go 188: Calico CNI releasing IP address ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.763 [INFO][3843] ipam_plugin.go 415: Releasing address using handleID ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" HandleID="k8s-pod-network.5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.766 [INFO][3843] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.766 [INFO][3843] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.776 [WARNING][3843] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" HandleID="k8s-pod-network.5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.776 [INFO][3843] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" HandleID="k8s-pod-network.5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.778 [INFO][3843] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:30:56.781612 env[1146]: 2024-02-09 18:30:56.780 [INFO][3828] k8s.go 591: Teardown processing complete. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:30:56.784187 env[1146]: time="2024-02-09T18:30:56.783842886Z" level=info msg="TearDown network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\" successfully" Feb 9 18:30:56.784187 env[1146]: time="2024-02-09T18:30:56.783888208Z" level=info msg="StopPodSandbox for \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\" returns successfully" Feb 9 18:30:56.783519 systemd[1]: run-netns-cni\x2d7a7ef1b5\x2da396\x2d5bd9\x2dc7f0\x2df383ffdc6728.mount: Deactivated successfully. Feb 9 18:30:56.785670 env[1146]: time="2024-02-09T18:30:56.785628581Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7ff54d4cbb-w85vs,Uid:2686f9a6-afe9-4cfd-bb35-4734db9b315f,Namespace:calico-system,Attempt:1,}" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.744 [INFO][3833] k8s.go 578: Cleaning up netns ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.744 [INFO][3833] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" iface="eth0" netns="/var/run/netns/cni-f775b9bb-b7e0-7c8d-d0e4-7fc2899fee46" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.745 [INFO][3833] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" iface="eth0" netns="/var/run/netns/cni-f775b9bb-b7e0-7c8d-d0e4-7fc2899fee46" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.745 [INFO][3833] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" iface="eth0" netns="/var/run/netns/cni-f775b9bb-b7e0-7c8d-d0e4-7fc2899fee46" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.745 [INFO][3833] k8s.go 585: Releasing IP address(es) ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.745 [INFO][3833] utils.go 188: Calico CNI releasing IP address ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.775 [INFO][3849] ipam_plugin.go 415: Releasing address using handleID ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" HandleID="k8s-pod-network.d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.775 [INFO][3849] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.778 [INFO][3849] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.788 [WARNING][3849] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" HandleID="k8s-pod-network.d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.788 [INFO][3849] ipam_plugin.go 443: Releasing address using workloadID ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" HandleID="k8s-pod-network.d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.790 [INFO][3849] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:30:56.793685 env[1146]: 2024-02-09 18:30:56.791 [INFO][3833] k8s.go 591: Teardown processing complete. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:30:56.796583 env[1146]: time="2024-02-09T18:30:56.794374047Z" level=info msg="TearDown network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\" successfully" Feb 9 18:30:56.796583 env[1146]: time="2024-02-09T18:30:56.794404129Z" level=info msg="StopPodSandbox for \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\" returns successfully" Feb 9 18:30:56.795812 systemd[1]: run-netns-cni\x2df775b9bb\x2db7e0\x2d7c8d\x2dd0e4\x2d7fc2899fee46.mount: Deactivated successfully. Feb 9 18:30:56.797136 env[1146]: time="2024-02-09T18:30:56.797084832Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zdcmm,Uid:29ec715c-b377-41b0-b3fb-4bbf5d6a19ba,Namespace:calico-system,Attempt:1,}" Feb 9 18:30:56.803920 kubelet[2009]: E0209 18:30:56.803847 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:56.931226 systemd-networkd[1054]: calif87bc5e6279: Link UP Feb 9 18:30:56.932583 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 18:30:56.932657 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif87bc5e6279: link becomes ready Feb 9 18:30:56.932669 systemd-networkd[1054]: calif87bc5e6279: Gained carrier Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.833 [INFO][3860] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.850 [INFO][3860] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0 calico-kube-controllers-7ff54d4cbb- calico-system 2686f9a6-afe9-4cfd-bb35-4734db9b315f 833 0 2024-02-09 18:30:31 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7ff54d4cbb projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7ff54d4cbb-w85vs eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calif87bc5e6279 [] []}} ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Namespace="calico-system" Pod="calico-kube-controllers-7ff54d4cbb-w85vs" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.850 [INFO][3860] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Namespace="calico-system" Pod="calico-kube-controllers-7ff54d4cbb-w85vs" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.884 [INFO][3885] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" HandleID="k8s-pod-network.87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.896 [INFO][3885] ipam_plugin.go 268: Auto assigning IP ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" HandleID="k8s-pod-network.87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000265980), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7ff54d4cbb-w85vs", "timestamp":"2024-02-09 18:30:56.884918476 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.896 [INFO][3885] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.896 [INFO][3885] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.896 [INFO][3885] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.898 [INFO][3885] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" host="localhost" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.902 [INFO][3885] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.906 [INFO][3885] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.912 [INFO][3885] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.917 [INFO][3885] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.917 [INFO][3885] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" host="localhost" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.919 [INFO][3885] ipam.go 1682: Creating new handle: k8s-pod-network.87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840 Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.922 [INFO][3885] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" host="localhost" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.926 [INFO][3885] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" host="localhost" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.926 [INFO][3885] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" host="localhost" Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.926 [INFO][3885] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:30:56.949952 env[1146]: 2024-02-09 18:30:56.926 [INFO][3885] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" HandleID="k8s-pod-network.87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.950553 env[1146]: 2024-02-09 18:30:56.929 [INFO][3860] k8s.go 385: Populated endpoint ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Namespace="calico-system" Pod="calico-kube-controllers-7ff54d4cbb-w85vs" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0", GenerateName:"calico-kube-controllers-7ff54d4cbb-", Namespace:"calico-system", SelfLink:"", UID:"2686f9a6-afe9-4cfd-bb35-4734db9b315f", ResourceVersion:"833", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7ff54d4cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7ff54d4cbb-w85vs", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif87bc5e6279", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:30:56.950553 env[1146]: 2024-02-09 18:30:56.929 [INFO][3860] k8s.go 386: Calico CNI using IPs: [192.168.88.131/32] ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Namespace="calico-system" Pod="calico-kube-controllers-7ff54d4cbb-w85vs" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.950553 env[1146]: 2024-02-09 18:30:56.929 [INFO][3860] dataplane_linux.go 68: Setting the host side veth name to calif87bc5e6279 ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Namespace="calico-system" Pod="calico-kube-controllers-7ff54d4cbb-w85vs" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.950553 env[1146]: 2024-02-09 18:30:56.934 [INFO][3860] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Namespace="calico-system" Pod="calico-kube-controllers-7ff54d4cbb-w85vs" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.950553 env[1146]: 2024-02-09 18:30:56.937 [INFO][3860] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Namespace="calico-system" Pod="calico-kube-controllers-7ff54d4cbb-w85vs" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0", GenerateName:"calico-kube-controllers-7ff54d4cbb-", Namespace:"calico-system", SelfLink:"", UID:"2686f9a6-afe9-4cfd-bb35-4734db9b315f", ResourceVersion:"833", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7ff54d4cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840", Pod:"calico-kube-controllers-7ff54d4cbb-w85vs", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif87bc5e6279", MAC:"3a:63:97:26:2a:9b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:30:56.950553 env[1146]: 2024-02-09 18:30:56.947 [INFO][3860] k8s.go 491: Wrote updated endpoint to datastore ContainerID="87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840" Namespace="calico-system" Pod="calico-kube-controllers-7ff54d4cbb-w85vs" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:30:56.963350 env[1146]: time="2024-02-09T18:30:56.963264814Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:56.963548 env[1146]: time="2024-02-09T18:30:56.963416422Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:56.963548 env[1146]: time="2024-02-09T18:30:56.963446384Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:56.964348 env[1146]: time="2024-02-09T18:30:56.964240186Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840 pid=3921 runtime=io.containerd.runc.v2 Feb 9 18:30:56.973373 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calieff666a9ef3: link becomes ready Feb 9 18:30:56.972932 systemd-networkd[1054]: calieff666a9ef3: Link UP Feb 9 18:30:56.973071 systemd-networkd[1054]: calieff666a9ef3: Gained carrier Feb 9 18:30:56.985048 systemd[1]: run-containerd-runc-k8s.io-87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840-runc.v2Huz2.mount: Deactivated successfully. Feb 9 18:30:56.989100 systemd[1]: Started cri-containerd-87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840.scope. Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.835 [INFO][3870] utils.go 100: File /var/lib/calico/mtu does not exist Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.873 [INFO][3870] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--zdcmm-eth0 csi-node-driver- calico-system 29ec715c-b377-41b0-b3fb-4bbf5d6a19ba 834 0 2024-02-09 18:30:31 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:676488fcc9 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-zdcmm eth0 default [] [] [kns.calico-system ksa.calico-system.default] calieff666a9ef3 [] []}} ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Namespace="calico-system" Pod="csi-node-driver-zdcmm" WorkloadEndpoint="localhost-k8s-csi--node--driver--zdcmm-" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.873 [INFO][3870] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Namespace="calico-system" Pod="csi-node-driver-zdcmm" WorkloadEndpoint="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.904 [INFO][3892] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" HandleID="k8s-pod-network.28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.920 [INFO][3892] ipam_plugin.go 268: Auto assigning IP ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" HandleID="k8s-pod-network.28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40004bff90), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-zdcmm", "timestamp":"2024-02-09 18:30:56.904804097 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.920 [INFO][3892] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.926 [INFO][3892] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.927 [INFO][3892] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.931 [INFO][3892] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" host="localhost" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.939 [INFO][3892] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.947 [INFO][3892] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.952 [INFO][3892] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.954 [INFO][3892] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.954 [INFO][3892] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" host="localhost" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.956 [INFO][3892] ipam.go 1682: Creating new handle: k8s-pod-network.28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2 Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.959 [INFO][3892] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" host="localhost" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.964 [INFO][3892] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" host="localhost" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.964 [INFO][3892] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" host="localhost" Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.964 [INFO][3892] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:30:56.991804 env[1146]: 2024-02-09 18:30:56.964 [INFO][3892] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" HandleID="k8s-pod-network.28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:56.992540 env[1146]: 2024-02-09 18:30:56.970 [INFO][3870] k8s.go 385: Populated endpoint ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Namespace="calico-system" Pod="csi-node-driver-zdcmm" WorkloadEndpoint="localhost-k8s-csi--node--driver--zdcmm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zdcmm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba", ResourceVersion:"834", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-zdcmm", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calieff666a9ef3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:30:56.992540 env[1146]: 2024-02-09 18:30:56.970 [INFO][3870] k8s.go 386: Calico CNI using IPs: [192.168.88.132/32] ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Namespace="calico-system" Pod="csi-node-driver-zdcmm" WorkloadEndpoint="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:56.992540 env[1146]: 2024-02-09 18:30:56.970 [INFO][3870] dataplane_linux.go 68: Setting the host side veth name to calieff666a9ef3 ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Namespace="calico-system" Pod="csi-node-driver-zdcmm" WorkloadEndpoint="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:56.992540 env[1146]: 2024-02-09 18:30:56.972 [INFO][3870] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Namespace="calico-system" Pod="csi-node-driver-zdcmm" WorkloadEndpoint="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:56.992540 env[1146]: 2024-02-09 18:30:56.973 [INFO][3870] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Namespace="calico-system" Pod="csi-node-driver-zdcmm" WorkloadEndpoint="localhost-k8s-csi--node--driver--zdcmm-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zdcmm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba", ResourceVersion:"834", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2", Pod:"csi-node-driver-zdcmm", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calieff666a9ef3", MAC:"22:7d:73:28:29:0a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:30:56.992540 env[1146]: 2024-02-09 18:30:56.981 [INFO][3870] k8s.go 491: Wrote updated endpoint to datastore ContainerID="28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2" Namespace="calico-system" Pod="csi-node-driver-zdcmm" WorkloadEndpoint="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:30:57.009641 env[1146]: time="2024-02-09T18:30:57.005994806Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:30:57.009641 env[1146]: time="2024-02-09T18:30:57.006062970Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:30:57.009641 env[1146]: time="2024-02-09T18:30:57.006090011Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:30:57.009641 env[1146]: time="2024-02-09T18:30:57.006289662Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2 pid=3964 runtime=io.containerd.runc.v2 Feb 9 18:30:57.028128 systemd[1]: Started cri-containerd-28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2.scope. Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.035000 audit: BPF prog-id=164 op=LOAD Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3921 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636438653764306437643834353138373035346133366130326535 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3921 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636438653764306437643834353138373035346133366130326535 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.036000 audit: BPF prog-id=165 op=LOAD Feb 9 18:30:57.036000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3921 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.036000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636438653764306437643834353138373035346133366130326535 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit: BPF prog-id=166 op=LOAD Feb 9 18:30:57.037000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3921 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636438653764306437643834353138373035346133366130326535 Feb 9 18:30:57.037000 audit: BPF prog-id=166 op=UNLOAD Feb 9 18:30:57.037000 audit: BPF prog-id=165 op=UNLOAD Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { perfmon } for pid=3931 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit[3931]: AVC avc: denied { bpf } for pid=3931 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.037000 audit: BPF prog-id=167 op=LOAD Feb 9 18:30:57.037000 audit[3931]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3921 pid=3931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.037000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3837636438653764306437643834353138373035346133366130326535 Feb 9 18:30:57.039341 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.040000 audit: BPF prog-id=168 op=LOAD Feb 9 18:30:57.041000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.041000 audit[3979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3964 pid=3979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238623666613832336539616233613234316565313238306430393136 Feb 9 18:30:57.041000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.041000 audit[3979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3964 pid=3979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238623666613832336539616233613234316565313238306430393136 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit: BPF prog-id=169 op=LOAD Feb 9 18:30:57.042000 audit[3979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3964 pid=3979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238623666613832336539616233613234316565313238306430393136 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.042000 audit: BPF prog-id=170 op=LOAD Feb 9 18:30:57.042000 audit[3979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3964 pid=3979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238623666613832336539616233613234316565313238306430393136 Feb 9 18:30:57.043000 audit: BPF prog-id=170 op=UNLOAD Feb 9 18:30:57.043000 audit: BPF prog-id=169 op=UNLOAD Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { perfmon } for pid=3979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit[3979]: AVC avc: denied { bpf } for pid=3979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:57.043000 audit: BPF prog-id=171 op=LOAD Feb 9 18:30:57.043000 audit[3979]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3964 pid=3979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238623666613832336539616233613234316565313238306430393136 Feb 9 18:30:57.044779 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:30:57.058105 env[1146]: time="2024-02-09T18:30:57.057238160Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-zdcmm,Uid:29ec715c-b377-41b0-b3fb-4bbf5d6a19ba,Namespace:calico-system,Attempt:1,} returns sandbox id \"28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2\"" Feb 9 18:30:57.060034 env[1146]: time="2024-02-09T18:30:57.059996424Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7ff54d4cbb-w85vs,Uid:2686f9a6-afe9-4cfd-bb35-4734db9b315f,Namespace:calico-system,Attempt:1,} returns sandbox id \"87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840\"" Feb 9 18:30:57.061154 env[1146]: time="2024-02-09T18:30:57.061110242Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\"" Feb 9 18:30:57.298071 kubelet[2009]: I0209 18:30:57.297870 2009 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Feb 9 18:30:57.298872 kubelet[2009]: E0209 18:30:57.298527 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:57.326000 audit[4009]: NETFILTER_CFG table=filter:103 family=2 entries=9 op=nft_register_rule pid=4009 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:57.326000 audit[4009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=fffff0567590 a2=0 a3=ffffa72b76c0 items=0 ppid=2159 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.326000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:57.327000 audit[4009]: NETFILTER_CFG table=nat:104 family=2 entries=25 op=nft_register_chain pid=4009 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:30:57.327000 audit[4009]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8252 a0=3 a1=fffff0567590 a2=0 a3=ffffa72b76c0 items=0 ppid=2159 pid=4009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:57.327000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:30:57.808451 kubelet[2009]: E0209 18:30:57.808334 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:57.808451 kubelet[2009]: E0209 18:30:57.808387 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:30:58.120437 systemd-networkd[1054]: calif87bc5e6279: Gained IPv6LL Feb 9 18:30:58.155932 env[1146]: time="2024-02-09T18:30:58.155889150Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:58.157346 env[1146]: time="2024-02-09T18:30:58.157314423Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:58.158721 env[1146]: time="2024-02-09T18:30:58.158692693Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:58.159955 env[1146]: time="2024-02-09T18:30:58.159925996Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:2b9021393c17e87ba8a3c89f5b3719941812f4e4751caa0b71eb2233bff48738,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:30:58.160481 env[1146]: time="2024-02-09T18:30:58.160453063Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.0\" returns image reference \"sha256:4b71e7439e0eba34a97844591560a009f37e8e6c17a386a34d416c1cc872dee8\"" Feb 9 18:30:58.163536 env[1146]: time="2024-02-09T18:30:58.163495178Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\"" Feb 9 18:30:58.165292 env[1146]: time="2024-02-09T18:30:58.165245788Z" level=info msg="CreateContainer within sandbox \"28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Feb 9 18:30:58.176074 env[1146]: time="2024-02-09T18:30:58.176039579Z" level=info msg="CreateContainer within sandbox \"28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"a1c8007c7ff23d5f291d7ce18531d7acc23c347d4ae48eac2a6e0605c456a71c\"" Feb 9 18:30:58.176601 env[1146]: time="2024-02-09T18:30:58.176577767Z" level=info msg="StartContainer for \"a1c8007c7ff23d5f291d7ce18531d7acc23c347d4ae48eac2a6e0605c456a71c\"" Feb 9 18:30:58.197337 systemd[1]: Started cri-containerd-a1c8007c7ff23d5f291d7ce18531d7acc23c347d4ae48eac2a6e0605c456a71c.scope. Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234928 kernel: kauditd_printk_skb: 395 callbacks suppressed Feb 9 18:30:58.234998 kernel: audit: type=1400 audit(1707503458.231:1310): avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.235027 kernel: audit: type=1300 audit(1707503458.231:1310): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3964 pid=4063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.231000 audit[4063]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3964 pid=4063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633830303763376666323364356632393164376365313835333164 Feb 9 18:30:58.240135 kernel: audit: type=1327 audit(1707503458.231:1310): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633830303763376666323364356632393164376365313835333164 Feb 9 18:30:58.240181 kernel: audit: type=1400 audit(1707503458.231:1311): avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.243574 kernel: audit: type=1400 audit(1707503458.231:1311): avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.245525 kernel: audit: type=1400 audit(1707503458.231:1311): avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.245565 kernel: audit: type=1400 audit(1707503458.231:1311): avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.247290 kernel: audit: type=1400 audit(1707503458.231:1311): avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.251152 kernel: audit: type=1400 audit(1707503458.231:1311): avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.251200 kernel: audit: type=1400 audit(1707503458.231:1311): avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit: BPF prog-id=172 op=LOAD Feb 9 18:30:58.231000 audit[4063]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3964 pid=4063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633830303763376666323364356632393164376365313835333164 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.231000 audit: BPF prog-id=173 op=LOAD Feb 9 18:30:58.231000 audit[4063]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3964 pid=4063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.231000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633830303763376666323364356632393164376365313835333164 Feb 9 18:30:58.234000 audit: BPF prog-id=173 op=UNLOAD Feb 9 18:30:58.234000 audit: BPF prog-id=172 op=UNLOAD Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { perfmon } for pid=4063 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit[4063]: AVC avc: denied { bpf } for pid=4063 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.234000 audit: BPF prog-id=174 op=LOAD Feb 9 18:30:58.234000 audit[4063]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3964 pid=4063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.234000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131633830303763376666323364356632393164376365313835333164 Feb 9 18:30:58.280892 env[1146]: time="2024-02-09T18:30:58.280753169Z" level=info msg="StartContainer for \"a1c8007c7ff23d5f291d7ce18531d7acc23c347d4ae48eac2a6e0605c456a71c\" returns successfully" Feb 9 18:30:58.466118 systemd[1]: Started sshd@12-10.0.0.66:22-10.0.0.1:53594.service. Feb 9 18:30:58.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.66:22-10.0.0.1:53594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit: BPF prog-id=175 op=LOAD Feb 9 18:30:58.467000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc04b7128 a2=70 a3=0 items=0 ppid=4091 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.467000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 18:30:58.467000 audit: BPF prog-id=175 op=UNLOAD Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.467000 audit: BPF prog-id=176 op=LOAD Feb 9 18:30:58.467000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc04b7128 a2=70 a3=4a174c items=0 ppid=4091 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.467000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 18:30:58.468000 audit: BPF prog-id=176 op=UNLOAD Feb 9 18:30:58.468000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.468000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffc04b7158 a2=70 a3=164a879f items=0 ppid=4091 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.468000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { perfmon } for pid=4136 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit[4136]: AVC avc: denied { bpf } for pid=4136 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.469000 audit: BPF prog-id=177 op=LOAD Feb 9 18:30:58.469000 audit[4136]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=5 a1=ffffc04b70a8 a2=70 a3=164a87b9 items=0 ppid=4091 pid=4136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.469000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Feb 9 18:30:58.472000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.472000 audit[4140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffffb3f3c18 a2=70 a3=0 items=0 ppid=4091 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.472000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 18:30:58.472000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:30:58.472000 audit[4140]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffffb3f3af8 a2=70 a3=2 items=0 ppid=4091 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.472000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Feb 9 18:30:58.478000 audit: BPF prog-id=177 op=UNLOAD Feb 9 18:30:58.517000 audit[4135]: USER_ACCT pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:58.519653 sshd[4135]: Accepted publickey for core from 10.0.0.1 port 53594 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:30:58.519000 audit[4135]: CRED_ACQ pid=4135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:58.519000 audit[4135]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3490c70 a2=3 a3=1 items=0 ppid=1 pid=4135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.519000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:30:58.521378 sshd[4135]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:30:58.521000 audit[4171]: NETFILTER_CFG table=mangle:105 family=2 entries=19 op=nft_register_chain pid=4171 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:30:58.521000 audit[4171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6800 a0=3 a1=ffffd7a3a480 a2=0 a3=ffffad611fa8 items=0 ppid=4091 pid=4171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.521000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:30:58.525336 systemd-logind[1135]: New session 13 of user core. Feb 9 18:30:58.526156 systemd[1]: Started session-13.scope. Feb 9 18:30:58.527000 audit[4173]: NETFILTER_CFG table=nat:106 family=2 entries=16 op=nft_register_chain pid=4173 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:30:58.527000 audit[4173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5188 a0=3 a1=ffffdaac4320 a2=0 a3=ffff8464dfa8 items=0 ppid=4091 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.527000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:30:58.529000 audit[4135]: USER_START pid=4135 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:58.531000 audit[4180]: CRED_ACQ pid=4180 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:58.531000 audit[4172]: NETFILTER_CFG table=raw:107 family=2 entries=19 op=nft_register_chain pid=4172 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:30:58.531000 audit[4172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6132 a0=3 a1=ffffeecdddb0 a2=0 a3=ffffa9753fa8 items=0 ppid=4091 pid=4172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.531000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:30:58.533000 audit[4177]: NETFILTER_CFG table=filter:108 family=2 entries=151 op=nft_register_chain pid=4177 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:30:58.533000 audit[4177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=83968 a0=3 a1=ffffe20a8b20 a2=0 a3=ffff95b4ffa8 items=0 ppid=4091 pid=4177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:30:58.533000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:30:58.644899 sshd[4135]: pam_unix(sshd:session): session closed for user core Feb 9 18:30:58.644000 audit[4135]: USER_END pid=4135 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:58.644000 audit[4135]: CRED_DISP pid=4135 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:30:58.647558 systemd[1]: sshd@12-10.0.0.66:22-10.0.0.1:53594.service: Deactivated successfully. Feb 9 18:30:58.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.66:22-10.0.0.1:53594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:30:58.648425 systemd[1]: session-13.scope: Deactivated successfully. Feb 9 18:30:58.648927 systemd-logind[1135]: Session 13 logged out. Waiting for processes to exit. Feb 9 18:30:58.649554 systemd-logind[1135]: Removed session 13. Feb 9 18:30:58.760422 systemd-networkd[1054]: calieff666a9ef3: Gained IPv6LL Feb 9 18:30:58.914392 systemd[1]: run-containerd-runc-k8s.io-a1c8007c7ff23d5f291d7ce18531d7acc23c347d4ae48eac2a6e0605c456a71c-runc.L3lk8F.mount: Deactivated successfully. Feb 9 18:30:59.372804 systemd-networkd[1054]: vxlan.calico: Link UP Feb 9 18:30:59.372813 systemd-networkd[1054]: vxlan.calico: Gained carrier Feb 9 18:31:00.044248 env[1146]: time="2024-02-09T18:31:00.044205236Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:00.045607 env[1146]: time="2024-02-09T18:31:00.045575303Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:00.047381 env[1146]: time="2024-02-09T18:31:00.047356351Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:00.048770 env[1146]: time="2024-02-09T18:31:00.048743179Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:e264ab1fb2f1ae90dd1d84e226d11d2eb4350e74ac27de4c65f29f5aadba5bb1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:00.049164 env[1146]: time="2024-02-09T18:31:00.049135158Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.0\" returns image reference \"sha256:094645649618376e48b5ec13a94a164d53dbdf819b7ab644f080b751f24560c8\"" Feb 9 18:31:00.049721 env[1146]: time="2024-02-09T18:31:00.049699146Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\"" Feb 9 18:31:00.062766 env[1146]: time="2024-02-09T18:31:00.062733626Z" level=info msg="CreateContainer within sandbox \"87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Feb 9 18:31:00.072993 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2316734197.mount: Deactivated successfully. Feb 9 18:31:00.075919 env[1146]: time="2024-02-09T18:31:00.075849750Z" level=info msg="CreateContainer within sandbox \"87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"56eb5ab895a9ad56bba3a4d1c2ce644a6c26a1978f001901e12e4b83ced66e59\"" Feb 9 18:31:00.076568 env[1146]: time="2024-02-09T18:31:00.076539864Z" level=info msg="StartContainer for \"56eb5ab895a9ad56bba3a4d1c2ce644a6c26a1978f001901e12e4b83ced66e59\"" Feb 9 18:31:00.092109 systemd[1]: Started cri-containerd-56eb5ab895a9ad56bba3a4d1c2ce644a6c26a1978f001901e12e4b83ced66e59.scope. Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit: BPF prog-id=178 op=LOAD Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3921 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:00.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536656235616238393561396164353662626133613464316332636536 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3921 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:00.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536656235616238393561396164353662626133613464316332636536 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit: BPF prog-id=179 op=LOAD Feb 9 18:31:00.132000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3921 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:00.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536656235616238393561396164353662626133613464316332636536 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit: BPF prog-id=180 op=LOAD Feb 9 18:31:00.132000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3921 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:00.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536656235616238393561396164353662626133613464316332636536 Feb 9 18:31:00.132000 audit: BPF prog-id=180 op=UNLOAD Feb 9 18:31:00.132000 audit: BPF prog-id=179 op=UNLOAD Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:00.132000 audit: BPF prog-id=181 op=LOAD Feb 9 18:31:00.132000 audit[4205]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3921 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:00.132000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536656235616238393561396164353662626133613464316332636536 Feb 9 18:31:00.162403 env[1146]: time="2024-02-09T18:31:00.158509330Z" level=info msg="StartContainer for \"56eb5ab895a9ad56bba3a4d1c2ce644a6c26a1978f001901e12e4b83ced66e59\" returns successfully" Feb 9 18:31:00.826162 kubelet[2009]: I0209 18:31:00.826116 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7ff54d4cbb-w85vs" podStartSLOduration=26.839056616 podCreationTimestamp="2024-02-09 18:30:31 +0000 UTC" firstStartedPulling="2024-02-09 18:30:57.062497994 +0000 UTC m=+45.491695976" lastFinishedPulling="2024-02-09 18:31:00.049523097 +0000 UTC m=+48.478721079" observedRunningTime="2024-02-09 18:31:00.825017107 +0000 UTC m=+49.254215089" watchObservedRunningTime="2024-02-09 18:31:00.826081719 +0000 UTC m=+49.255279701" Feb 9 18:31:01.256460 systemd-networkd[1054]: vxlan.calico: Gained IPv6LL Feb 9 18:31:01.504274 env[1146]: time="2024-02-09T18:31:01.504194616Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:01.506163 env[1146]: time="2024-02-09T18:31:01.506133469Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:01.507981 env[1146]: time="2024-02-09T18:31:01.507778068Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:01.508859 env[1146]: time="2024-02-09T18:31:01.508829599Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:45a7aba6020a7cf7b866cb8a8d481b30c97e9b3407e1459aaa65a5b4cc06633a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:01.509513 env[1146]: time="2024-02-09T18:31:01.509468830Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.0\" returns image reference \"sha256:9dbda087e98c46610fb8629cf530f1fe49eee4b17d2afe455664ca446ec39d43\"" Feb 9 18:31:01.511914 env[1146]: time="2024-02-09T18:31:01.511881346Z" level=info msg="CreateContainer within sandbox \"28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Feb 9 18:31:01.523392 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1340389936.mount: Deactivated successfully. Feb 9 18:31:01.526513 env[1146]: time="2024-02-09T18:31:01.526479410Z" level=info msg="CreateContainer within sandbox \"28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"c3df4027970841600ea823ed038f4223806a6511eadffce3a9582238b26e76ea\"" Feb 9 18:31:01.528213 env[1146]: time="2024-02-09T18:31:01.528181012Z" level=info msg="StartContainer for \"c3df4027970841600ea823ed038f4223806a6511eadffce3a9582238b26e76ea\"" Feb 9 18:31:01.543711 systemd[1]: Started cri-containerd-c3df4027970841600ea823ed038f4223806a6511eadffce3a9582238b26e76ea.scope. Feb 9 18:31:01.584000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.584000 audit[4264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3964 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:01.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333646634303237393730383431363030656138323365643033386634 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit: BPF prog-id=182 op=LOAD Feb 9 18:31:01.585000 audit[4264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3964 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:01.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333646634303237393730383431363030656138323365643033386634 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.585000 audit: BPF prog-id=183 op=LOAD Feb 9 18:31:01.585000 audit[4264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3964 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:01.585000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333646634303237393730383431363030656138323365643033386634 Feb 9 18:31:01.586000 audit: BPF prog-id=183 op=UNLOAD Feb 9 18:31:01.586000 audit: BPF prog-id=182 op=UNLOAD Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { perfmon } for pid=4264 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit[4264]: AVC avc: denied { bpf } for pid=4264 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:01.586000 audit: BPF prog-id=184 op=LOAD Feb 9 18:31:01.586000 audit[4264]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3964 pid=4264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:01.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333646634303237393730383431363030656138323365643033386634 Feb 9 18:31:01.607495 env[1146]: time="2024-02-09T18:31:01.607430594Z" level=info msg="StartContainer for \"c3df4027970841600ea823ed038f4223806a6511eadffce3a9582238b26e76ea\" returns successfully" Feb 9 18:31:01.749086 kubelet[2009]: I0209 18:31:01.749056 2009 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Feb 9 18:31:01.749394 kubelet[2009]: I0209 18:31:01.749376 2009 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Feb 9 18:31:01.837818 kubelet[2009]: I0209 18:31:01.836141 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-zdcmm" podStartSLOduration=26.387129802 podCreationTimestamp="2024-02-09 18:30:31 +0000 UTC" firstStartedPulling="2024-02-09 18:30:57.060764464 +0000 UTC m=+45.489962446" lastFinishedPulling="2024-02-09 18:31:01.509737603 +0000 UTC m=+49.938935585" observedRunningTime="2024-02-09 18:31:01.835789646 +0000 UTC m=+50.264987628" watchObservedRunningTime="2024-02-09 18:31:01.836102941 +0000 UTC m=+50.265300883" Feb 9 18:31:03.651675 systemd[1]: Started sshd@13-10.0.0.66:22-10.0.0.1:34954.service. Feb 9 18:31:03.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.66:22-10.0.0.1:34954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:03.652477 kernel: kauditd_printk_skb: 205 callbacks suppressed Feb 9 18:31:03.652550 kernel: audit: type=1130 audit(1707503463.650:1362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.66:22-10.0.0.1:34954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:03.698000 audit[4306]: USER_ACCT pid=4306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.700152 sshd[4306]: Accepted publickey for core from 10.0.0.1 port 34954 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:03.701000 audit[4306]: CRED_ACQ pid=4306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.705277 kernel: audit: type=1101 audit(1707503463.698:1363): pid=4306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.705364 kernel: audit: type=1103 audit(1707503463.701:1364): pid=4306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.705390 kernel: audit: type=1006 audit(1707503463.701:1365): pid=4306 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Feb 9 18:31:03.705489 sshd[4306]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:03.701000 audit[4306]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe69aa660 a2=3 a3=1 items=0 ppid=1 pid=4306 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:03.709284 kernel: audit: type=1300 audit(1707503463.701:1365): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe69aa660 a2=3 a3=1 items=0 ppid=1 pid=4306 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:03.709368 kernel: audit: type=1327 audit(1707503463.701:1365): proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:03.701000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:03.709462 systemd-logind[1135]: New session 14 of user core. Feb 9 18:31:03.710193 systemd[1]: Started session-14.scope. Feb 9 18:31:03.712000 audit[4306]: USER_START pid=4306 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.714000 audit[4308]: CRED_ACQ pid=4308 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.719059 kernel: audit: type=1105 audit(1707503463.712:1366): pid=4306 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.719120 kernel: audit: type=1103 audit(1707503463.714:1367): pid=4308 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.834240 sshd[4306]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:03.833000 audit[4306]: USER_END pid=4306 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.836454 systemd[1]: session-14.scope: Deactivated successfully. Feb 9 18:31:03.837032 systemd-logind[1135]: Session 14 logged out. Waiting for processes to exit. Feb 9 18:31:03.837151 systemd[1]: sshd@13-10.0.0.66:22-10.0.0.1:34954.service: Deactivated successfully. Feb 9 18:31:03.833000 audit[4306]: CRED_DISP pid=4306 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.838263 systemd-logind[1135]: Removed session 14. Feb 9 18:31:03.840134 kernel: audit: type=1106 audit(1707503463.833:1368): pid=4306 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.840220 kernel: audit: type=1104 audit(1707503463.833:1369): pid=4306 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:03.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.66:22-10.0.0.1:34954 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:08.186000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.186000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.186000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002733680 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:31:08.186000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:31:08.186000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4000d03520 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:31:08.186000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:31:08.672000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.676659 kernel: kauditd_printk_skb: 7 callbacks suppressed Feb 9 18:31:08.676745 kernel: audit: type=1400 audit(1707503468.672:1373): avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.676770 kernel: audit: type=1400 audit(1707503468.672:1374): avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.672000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.678973 kernel: audit: type=1400 audit(1707503468.672:1375): avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.672000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.672000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4013966b70 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:31:08.684665 kernel: audit: type=1300 audit(1707503468.672:1373): arch=c00000b7 syscall=27 success=no exit=-13 a0=74 a1=4013966b70 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:31:08.672000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010f51110 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:31:08.687710 kernel: audit: type=1300 audit(1707503468.672:1375): arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4010f51110 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:31:08.687761 kernel: audit: type=1327 audit(1707503468.672:1373): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:31:08.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:31:08.690113 kernel: audit: type=1327 audit(1707503468.672:1375): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:31:08.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:31:08.672000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=40133460e0 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:31:08.695208 kernel: audit: type=1300 audit(1707503468.672:1374): arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=40133460e0 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:31:08.695246 kernel: audit: type=1327 audit(1707503468.672:1374): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:31:08.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:31:08.678000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.699807 kernel: audit: type=1400 audit(1707503468.678:1376): avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.678000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4011b56480 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:31:08.678000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:31:08.680000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.680000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=72 a1=4013966ba0 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:31:08.680000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:31:08.680000 audit[1898]: AVC avc: denied { watch } for pid=1898 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:08.680000 audit[1898]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=73 a1=4013601820 a2=fc6 a3=0 items=0 ppid=1735 pid=1898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c103,c548 key=(null) Feb 9 18:31:08.680000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3636002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Feb 9 18:31:08.838728 systemd[1]: Started sshd@14-10.0.0.66:22-10.0.0.1:34960.service. Feb 9 18:31:08.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.66:22-10.0.0.1:34960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:08.879000 audit[4329]: USER_ACCT pid=4329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:08.881214 sshd[4329]: Accepted publickey for core from 10.0.0.1 port 34960 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:08.882000 audit[4329]: CRED_ACQ pid=4329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:08.882000 audit[4329]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc5ba9650 a2=3 a3=1 items=0 ppid=1 pid=4329 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:08.882000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:08.884178 sshd[4329]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:08.887658 systemd-logind[1135]: New session 15 of user core. Feb 9 18:31:08.888516 systemd[1]: Started session-15.scope. Feb 9 18:31:08.890000 audit[4329]: USER_START pid=4329 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:08.891000 audit[4331]: CRED_ACQ pid=4331 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:09.024147 sshd[4329]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:09.025000 audit[4329]: USER_END pid=4329 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:09.025000 audit[4329]: CRED_DISP pid=4329 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:09.027919 systemd[1]: sshd@14-10.0.0.66:22-10.0.0.1:34960.service: Deactivated successfully. Feb 9 18:31:09.028695 systemd[1]: session-15.scope: Deactivated successfully. Feb 9 18:31:09.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.66:22-10.0.0.1:34960 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:09.029189 systemd-logind[1135]: Session 15 logged out. Waiting for processes to exit. Feb 9 18:31:09.029889 systemd-logind[1135]: Removed session 15. Feb 9 18:31:11.670697 env[1146]: time="2024-02-09T18:31:11.670610211Z" level=info msg="StopPodSandbox for \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\"" Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.705 [WARNING][4358] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0", GenerateName:"calico-kube-controllers-7ff54d4cbb-", Namespace:"calico-system", SelfLink:"", UID:"2686f9a6-afe9-4cfd-bb35-4734db9b315f", ResourceVersion:"879", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7ff54d4cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840", Pod:"calico-kube-controllers-7ff54d4cbb-w85vs", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif87bc5e6279", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.705 [INFO][4358] k8s.go 578: Cleaning up netns ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.705 [INFO][4358] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" iface="eth0" netns="" Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.705 [INFO][4358] k8s.go 585: Releasing IP address(es) ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.705 [INFO][4358] utils.go 188: Calico CNI releasing IP address ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.725 [INFO][4367] ipam_plugin.go 415: Releasing address using handleID ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" HandleID="k8s-pod-network.5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.725 [INFO][4367] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.725 [INFO][4367] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.736 [WARNING][4367] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" HandleID="k8s-pod-network.5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.736 [INFO][4367] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" HandleID="k8s-pod-network.5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.737 [INFO][4367] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:31:11.746425 env[1146]: 2024-02-09 18:31:11.739 [INFO][4358] k8s.go 591: Teardown processing complete. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:31:11.746911 env[1146]: time="2024-02-09T18:31:11.746412503Z" level=info msg="TearDown network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\" successfully" Feb 9 18:31:11.746911 env[1146]: time="2024-02-09T18:31:11.746465625Z" level=info msg="StopPodSandbox for \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\" returns successfully" Feb 9 18:31:11.746911 env[1146]: time="2024-02-09T18:31:11.746870162Z" level=info msg="RemovePodSandbox for \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\"" Feb 9 18:31:11.746981 env[1146]: time="2024-02-09T18:31:11.746908004Z" level=info msg="Forcibly stopping sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\"" Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.784 [WARNING][4390] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0", GenerateName:"calico-kube-controllers-7ff54d4cbb-", Namespace:"calico-system", SelfLink:"", UID:"2686f9a6-afe9-4cfd-bb35-4734db9b315f", ResourceVersion:"879", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7ff54d4cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"87cd8e7d0d7d845187054a36a02e50c27f240a0a58229f69fbf65bb78599d840", Pod:"calico-kube-controllers-7ff54d4cbb-w85vs", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif87bc5e6279", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.785 [INFO][4390] k8s.go 578: Cleaning up netns ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.785 [INFO][4390] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" iface="eth0" netns="" Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.785 [INFO][4390] k8s.go 585: Releasing IP address(es) ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.785 [INFO][4390] utils.go 188: Calico CNI releasing IP address ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.800 [INFO][4398] ipam_plugin.go 415: Releasing address using handleID ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" HandleID="k8s-pod-network.5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.800 [INFO][4398] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.801 [INFO][4398] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.809 [WARNING][4398] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" HandleID="k8s-pod-network.5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.809 [INFO][4398] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" HandleID="k8s-pod-network.5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Workload="localhost-k8s-calico--kube--controllers--7ff54d4cbb--w85vs-eth0" Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.811 [INFO][4398] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:31:11.814078 env[1146]: 2024-02-09 18:31:11.812 [INFO][4390] k8s.go 591: Teardown processing complete. ContainerID="5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743" Feb 9 18:31:11.814491 env[1146]: time="2024-02-09T18:31:11.814104216Z" level=info msg="TearDown network for sandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\" successfully" Feb 9 18:31:11.822127 env[1146]: time="2024-02-09T18:31:11.822083510Z" level=info msg="RemovePodSandbox \"5670ab110456b2c19515b4c4b17472d934b29fd32d63ecce3a97c0cc69822743\" returns successfully" Feb 9 18:31:11.822639 env[1146]: time="2024-02-09T18:31:11.822600451Z" level=info msg="StopPodSandbox for \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\"" Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.857 [WARNING][4422] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--glcd9-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"08a1d60c-4f44-4461-a0b2-9e18871123c4", ResourceVersion:"821", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea", Pod:"coredns-5dd5756b68-glcd9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1e3fc685479", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.857 [INFO][4422] k8s.go 578: Cleaning up netns ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.857 [INFO][4422] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" iface="eth0" netns="" Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.857 [INFO][4422] k8s.go 585: Releasing IP address(es) ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.857 [INFO][4422] utils.go 188: Calico CNI releasing IP address ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.880 [INFO][4429] ipam_plugin.go 415: Releasing address using handleID ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" HandleID="k8s-pod-network.1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.880 [INFO][4429] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.880 [INFO][4429] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.889 [WARNING][4429] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" HandleID="k8s-pod-network.1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.889 [INFO][4429] ipam_plugin.go 443: Releasing address using workloadID ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" HandleID="k8s-pod-network.1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.891 [INFO][4429] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:31:11.894220 env[1146]: 2024-02-09 18:31:11.892 [INFO][4422] k8s.go 591: Teardown processing complete. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:31:11.894753 env[1146]: time="2024-02-09T18:31:11.894247089Z" level=info msg="TearDown network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\" successfully" Feb 9 18:31:11.894753 env[1146]: time="2024-02-09T18:31:11.894286091Z" level=info msg="StopPodSandbox for \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\" returns successfully" Feb 9 18:31:11.894753 env[1146]: time="2024-02-09T18:31:11.894738910Z" level=info msg="RemovePodSandbox for \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\"" Feb 9 18:31:11.894822 env[1146]: time="2024-02-09T18:31:11.894771551Z" level=info msg="Forcibly stopping sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\"" Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.926 [WARNING][4455] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--glcd9-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"08a1d60c-4f44-4461-a0b2-9e18871123c4", ResourceVersion:"821", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d1ff01b512a727a782b05685bf90827307f803732fbc8ea1d6f73aaa299380ea", Pod:"coredns-5dd5756b68-glcd9", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1e3fc685479", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.926 [INFO][4455] k8s.go 578: Cleaning up netns ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.926 [INFO][4455] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" iface="eth0" netns="" Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.927 [INFO][4455] k8s.go 585: Releasing IP address(es) ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.927 [INFO][4455] utils.go 188: Calico CNI releasing IP address ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.943 [INFO][4463] ipam_plugin.go 415: Releasing address using handleID ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" HandleID="k8s-pod-network.1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.943 [INFO][4463] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.943 [INFO][4463] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.952 [WARNING][4463] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" HandleID="k8s-pod-network.1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.952 [INFO][4463] ipam_plugin.go 443: Releasing address using workloadID ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" HandleID="k8s-pod-network.1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Workload="localhost-k8s-coredns--5dd5756b68--glcd9-eth0" Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.953 [INFO][4463] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:31:11.956472 env[1146]: 2024-02-09 18:31:11.955 [INFO][4455] k8s.go 591: Teardown processing complete. ContainerID="1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98" Feb 9 18:31:11.956472 env[1146]: time="2024-02-09T18:31:11.956436332Z" level=info msg="TearDown network for sandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\" successfully" Feb 9 18:31:11.961448 env[1146]: time="2024-02-09T18:31:11.961417580Z" level=info msg="RemovePodSandbox \"1e90e5cc91690e05c32ca95e0412aca417f627f37c71e363768ddcc6d3836b98\" returns successfully" Feb 9 18:31:11.961897 env[1146]: time="2024-02-09T18:31:11.961872639Z" level=info msg="StopPodSandbox for \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\"" Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:11.994 [WARNING][4485] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zdcmm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba", ResourceVersion:"890", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2", Pod:"csi-node-driver-zdcmm", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calieff666a9ef3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:11.994 [INFO][4485] k8s.go 578: Cleaning up netns ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:11.994 [INFO][4485] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" iface="eth0" netns="" Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:11.994 [INFO][4485] k8s.go 585: Releasing IP address(es) ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:11.994 [INFO][4485] utils.go 188: Calico CNI releasing IP address ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:12.011 [INFO][4492] ipam_plugin.go 415: Releasing address using handleID ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" HandleID="k8s-pod-network.d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:12.011 [INFO][4492] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:12.011 [INFO][4492] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:12.019 [WARNING][4492] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" HandleID="k8s-pod-network.d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:12.019 [INFO][4492] ipam_plugin.go 443: Releasing address using workloadID ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" HandleID="k8s-pod-network.d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:12.021 [INFO][4492] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:31:12.024103 env[1146]: 2024-02-09 18:31:12.022 [INFO][4485] k8s.go 591: Teardown processing complete. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:31:12.024526 env[1146]: time="2024-02-09T18:31:12.024123674Z" level=info msg="TearDown network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\" successfully" Feb 9 18:31:12.024526 env[1146]: time="2024-02-09T18:31:12.024160555Z" level=info msg="StopPodSandbox for \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\" returns successfully" Feb 9 18:31:12.024783 env[1146]: time="2024-02-09T18:31:12.024757100Z" level=info msg="RemovePodSandbox for \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\"" Feb 9 18:31:12.024898 env[1146]: time="2024-02-09T18:31:12.024862705Z" level=info msg="Forcibly stopping sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\"" Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.060 [WARNING][4515] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--zdcmm-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"29ec715c-b377-41b0-b3fb-4bbf5d6a19ba", ResourceVersion:"890", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"676488fcc9", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"28b6fa823e9ab3a241ee1280d0916ac3028241d601d174b64a3c531d32c42ca2", Pod:"csi-node-driver-zdcmm", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calieff666a9ef3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.060 [INFO][4515] k8s.go 578: Cleaning up netns ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.060 [INFO][4515] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" iface="eth0" netns="" Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.060 [INFO][4515] k8s.go 585: Releasing IP address(es) ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.060 [INFO][4515] utils.go 188: Calico CNI releasing IP address ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.077 [INFO][4523] ipam_plugin.go 415: Releasing address using handleID ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" HandleID="k8s-pod-network.d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.077 [INFO][4523] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.077 [INFO][4523] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.088 [WARNING][4523] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" HandleID="k8s-pod-network.d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.088 [INFO][4523] ipam_plugin.go 443: Releasing address using workloadID ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" HandleID="k8s-pod-network.d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Workload="localhost-k8s-csi--node--driver--zdcmm-eth0" Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.089 [INFO][4523] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:31:12.092226 env[1146]: 2024-02-09 18:31:12.091 [INFO][4515] k8s.go 591: Teardown processing complete. ContainerID="d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc" Feb 9 18:31:12.092642 env[1146]: time="2024-02-09T18:31:12.092264135Z" level=info msg="TearDown network for sandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\" successfully" Feb 9 18:31:12.094909 env[1146]: time="2024-02-09T18:31:12.094865323Z" level=info msg="RemovePodSandbox \"d521ecec888f7a18dd1a714f32975821b6578b8cea9cf8c31e0df9ea0a67bfbc\" returns successfully" Feb 9 18:31:12.095367 env[1146]: time="2024-02-09T18:31:12.095341183Z" level=info msg="StopPodSandbox for \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\"" Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.128 [WARNING][4546] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--7sr4f-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"a889bc43-433c-4e8e-9b21-ad9046eaad57", ResourceVersion:"782", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d", Pod:"coredns-5dd5756b68-7sr4f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali995f9a9ae1d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.128 [INFO][4546] k8s.go 578: Cleaning up netns ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.128 [INFO][4546] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" iface="eth0" netns="" Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.128 [INFO][4546] k8s.go 585: Releasing IP address(es) ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.128 [INFO][4546] utils.go 188: Calico CNI releasing IP address ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.145 [INFO][4553] ipam_plugin.go 415: Releasing address using handleID ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" HandleID="k8s-pod-network.5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.145 [INFO][4553] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.145 [INFO][4553] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.158 [WARNING][4553] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" HandleID="k8s-pod-network.5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.158 [INFO][4553] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" HandleID="k8s-pod-network.5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.160 [INFO][4553] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:31:12.164069 env[1146]: 2024-02-09 18:31:12.162 [INFO][4546] k8s.go 591: Teardown processing complete. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:31:12.166351 env[1146]: time="2024-02-09T18:31:12.164084789Z" level=info msg="TearDown network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\" successfully" Feb 9 18:31:12.166351 env[1146]: time="2024-02-09T18:31:12.164114910Z" level=info msg="StopPodSandbox for \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\" returns successfully" Feb 9 18:31:12.166351 env[1146]: time="2024-02-09T18:31:12.164673093Z" level=info msg="RemovePodSandbox for \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\"" Feb 9 18:31:12.166351 env[1146]: time="2024-02-09T18:31:12.164709415Z" level=info msg="Forcibly stopping sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\"" Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.195 [WARNING][4576] k8s.go 542: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--5dd5756b68--7sr4f-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"a889bc43-433c-4e8e-9b21-ad9046eaad57", ResourceVersion:"782", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 30, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8fcb7f71358a0ced89eb269525f89aa549867648472cd09ea5f3984c01fd791d", Pod:"coredns-5dd5756b68-7sr4f", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali995f9a9ae1d", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.195 [INFO][4576] k8s.go 578: Cleaning up netns ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.195 [INFO][4576] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" iface="eth0" netns="" Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.195 [INFO][4576] k8s.go 585: Releasing IP address(es) ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.195 [INFO][4576] utils.go 188: Calico CNI releasing IP address ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.216 [INFO][4583] ipam_plugin.go 415: Releasing address using handleID ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" HandleID="k8s-pod-network.5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.216 [INFO][4583] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.216 [INFO][4583] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.225 [WARNING][4583] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" HandleID="k8s-pod-network.5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.225 [INFO][4583] ipam_plugin.go 443: Releasing address using workloadID ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" HandleID="k8s-pod-network.5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Workload="localhost-k8s-coredns--5dd5756b68--7sr4f-eth0" Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.226 [INFO][4583] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:31:12.229278 env[1146]: 2024-02-09 18:31:12.227 [INFO][4576] k8s.go 591: Teardown processing complete. ContainerID="5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea" Feb 9 18:31:12.231403 env[1146]: time="2024-02-09T18:31:12.229256087Z" level=info msg="TearDown network for sandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\" successfully" Feb 9 18:31:12.234142 env[1146]: time="2024-02-09T18:31:12.234111569Z" level=info msg="RemovePodSandbox \"5056821c2e662eec7d1c362c078449cbf2bf634be3b7387b8eb339bf51a3c1ea\" returns successfully" Feb 9 18:31:13.657000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:13.657000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:13.657000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000cf5060 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:31:13.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:31:13.657000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:13.657000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=d a1=4000d037e0 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:31:13.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:31:13.657000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001262620 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:31:13.657000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:31:13.658000 audit[1900]: AVC avc: denied { watch } for pid=1900 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Feb 9 18:31:13.658000 audit[1900]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000cf5080 a2=fc6 a3=0 items=0 ppid=1730 pid=1900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c212,c342 key=(null) Feb 9 18:31:13.658000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Feb 9 18:31:14.029417 systemd[1]: Started sshd@15-10.0.0.66:22-10.0.0.1:35990.service. Feb 9 18:31:14.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.66:22-10.0.0.1:35990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:14.032793 kernel: kauditd_printk_skb: 31 callbacks suppressed Feb 9 18:31:14.032865 kernel: audit: type=1130 audit(1707503474.029:1392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.66:22-10.0.0.1:35990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:14.071000 audit[4592]: USER_ACCT pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.071777 sshd[4592]: Accepted publickey for core from 10.0.0.1 port 35990 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:14.073243 sshd[4592]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:14.072000 audit[4592]: CRED_ACQ pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.076239 kernel: audit: type=1101 audit(1707503474.071:1393): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.076277 kernel: audit: type=1103 audit(1707503474.072:1394): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.077743 kernel: audit: type=1006 audit(1707503474.072:1395): pid=4592 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Feb 9 18:31:14.077802 kernel: audit: type=1300 audit(1707503474.072:1395): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6c55240 a2=3 a3=1 items=0 ppid=1 pid=4592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:14.072000 audit[4592]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6c55240 a2=3 a3=1 items=0 ppid=1 pid=4592 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:14.079545 systemd-logind[1135]: New session 16 of user core. Feb 9 18:31:14.079580 systemd[1]: Started session-16.scope. Feb 9 18:31:14.072000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:14.080983 kernel: audit: type=1327 audit(1707503474.072:1395): proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:14.083000 audit[4592]: USER_START pid=4592 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.084000 audit[4594]: CRED_ACQ pid=4594 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.088048 kernel: audit: type=1105 audit(1707503474.083:1396): pid=4592 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.088093 kernel: audit: type=1103 audit(1707503474.084:1397): pid=4594 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.207585 sshd[4592]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:14.208000 audit[4592]: USER_END pid=4592 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.208000 audit[4592]: CRED_DISP pid=4592 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.211524 systemd[1]: Started sshd@16-10.0.0.66:22-10.0.0.1:35994.service. Feb 9 18:31:14.212527 systemd-logind[1135]: Session 16 logged out. Waiting for processes to exit. Feb 9 18:31:14.212720 systemd[1]: sshd@15-10.0.0.66:22-10.0.0.1:35990.service: Deactivated successfully. Feb 9 18:31:14.213418 systemd[1]: session-16.scope: Deactivated successfully. Feb 9 18:31:14.213531 kernel: audit: type=1106 audit(1707503474.208:1398): pid=4592 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.213563 kernel: audit: type=1104 audit(1707503474.208:1399): pid=4592 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.66:22-10.0.0.1:35994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:14.212000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.66:22-10.0.0.1:35990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:14.214153 systemd-logind[1135]: Removed session 16. Feb 9 18:31:14.250000 audit[4604]: USER_ACCT pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.250804 sshd[4604]: Accepted publickey for core from 10.0.0.1 port 35994 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:14.251000 audit[4604]: CRED_ACQ pid=4604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.251000 audit[4604]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc9368910 a2=3 a3=1 items=0 ppid=1 pid=4604 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:14.251000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:14.252279 sshd[4604]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:14.255978 systemd-logind[1135]: New session 17 of user core. Feb 9 18:31:14.256601 systemd[1]: Started session-17.scope. Feb 9 18:31:14.259000 audit[4604]: USER_START pid=4604 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.260000 audit[4607]: CRED_ACQ pid=4607 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.480796 sshd[4604]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:14.481000 audit[4604]: USER_END pid=4604 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.482000 audit[4604]: CRED_DISP pid=4604 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.484642 systemd[1]: Started sshd@17-10.0.0.66:22-10.0.0.1:35996.service. Feb 9 18:31:14.484000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.66:22-10.0.0.1:35996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:14.485607 systemd[1]: sshd@16-10.0.0.66:22-10.0.0.1:35994.service: Deactivated successfully. Feb 9 18:31:14.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.66:22-10.0.0.1:35994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:14.486282 systemd[1]: session-17.scope: Deactivated successfully. Feb 9 18:31:14.487736 systemd-logind[1135]: Session 17 logged out. Waiting for processes to exit. Feb 9 18:31:14.489820 systemd-logind[1135]: Removed session 17. Feb 9 18:31:14.524000 audit[4616]: USER_ACCT pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.524837 sshd[4616]: Accepted publickey for core from 10.0.0.1 port 35996 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:14.525000 audit[4616]: CRED_ACQ pid=4616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.525000 audit[4616]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffa48ebc0 a2=3 a3=1 items=0 ppid=1 pid=4616 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:14.525000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:14.526164 sshd[4616]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:14.529495 systemd-logind[1135]: New session 18 of user core. Feb 9 18:31:14.530413 systemd[1]: Started session-18.scope. Feb 9 18:31:14.533000 audit[4616]: USER_START pid=4616 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:14.534000 audit[4619]: CRED_ACQ pid=4619 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.305000 audit[4631]: NETFILTER_CFG table=filter:109 family=2 entries=20 op=nft_register_rule pid=4631 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:15.305000 audit[4631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11292 a0=3 a1=ffffedb0a780 a2=0 a3=ffffb83456c0 items=0 ppid=2159 pid=4631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:15.305000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:15.306000 audit[4631]: NETFILTER_CFG table=nat:110 family=2 entries=20 op=nft_register_rule pid=4631 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:15.306000 audit[4631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffedb0a780 a2=0 a3=ffffb83456c0 items=0 ppid=2159 pid=4631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:15.306000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:15.317000 audit[4633]: NETFILTER_CFG table=filter:111 family=2 entries=32 op=nft_register_rule pid=4633 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:15.317000 audit[4633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11292 a0=3 a1=ffffe0a62490 a2=0 a3=ffffa155e6c0 items=0 ppid=2159 pid=4633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:15.317000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:15.318000 audit[4633]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=4633 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:15.318000 audit[4633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5484 a0=3 a1=ffffe0a62490 a2=0 a3=ffffa155e6c0 items=0 ppid=2159 pid=4633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:15.318000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:15.323934 sshd[4616]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:15.327717 systemd[1]: Started sshd@18-10.0.0.66:22-10.0.0.1:36012.service. Feb 9 18:31:15.327000 audit[4616]: USER_END pid=4616 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.327000 audit[4616]: CRED_DISP pid=4616 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.327000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.66:22-10.0.0.1:36012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:15.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.66:22-10.0.0.1:35996 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:15.329126 systemd[1]: sshd@17-10.0.0.66:22-10.0.0.1:35996.service: Deactivated successfully. Feb 9 18:31:15.329873 systemd[1]: session-18.scope: Deactivated successfully. Feb 9 18:31:15.330705 systemd-logind[1135]: Session 18 logged out. Waiting for processes to exit. Feb 9 18:31:15.331752 systemd-logind[1135]: Removed session 18. Feb 9 18:31:15.366000 audit[4635]: USER_ACCT pid=4635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.367338 sshd[4635]: Accepted publickey for core from 10.0.0.1 port 36012 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:15.367000 audit[4635]: CRED_ACQ pid=4635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.367000 audit[4635]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffce52aed0 a2=3 a3=1 items=0 ppid=1 pid=4635 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:15.367000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:15.368624 sshd[4635]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:15.372727 systemd[1]: Started session-19.scope. Feb 9 18:31:15.373065 systemd-logind[1135]: New session 19 of user core. Feb 9 18:31:15.376000 audit[4635]: USER_START pid=4635 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.377000 audit[4638]: CRED_ACQ pid=4638 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.66:22-10.0.0.1:36022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:15.651000 audit[4635]: USER_END pid=4635 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.651000 audit[4635]: CRED_DISP pid=4635 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.648530 sshd[4635]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:15.651196 systemd[1]: Started sshd@19-10.0.0.66:22-10.0.0.1:36022.service. Feb 9 18:31:15.653547 systemd[1]: sshd@18-10.0.0.66:22-10.0.0.1:36012.service: Deactivated successfully. Feb 9 18:31:15.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.66:22-10.0.0.1:36012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:15.654254 systemd[1]: session-19.scope: Deactivated successfully. Feb 9 18:31:15.654906 systemd-logind[1135]: Session 19 logged out. Waiting for processes to exit. Feb 9 18:31:15.656449 systemd-logind[1135]: Removed session 19. Feb 9 18:31:15.695000 audit[4647]: USER_ACCT pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.696182 sshd[4647]: Accepted publickey for core from 10.0.0.1 port 36022 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:15.696000 audit[4647]: CRED_ACQ pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.696000 audit[4647]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd71fe5e0 a2=3 a3=1 items=0 ppid=1 pid=4647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:15.696000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:15.697282 sshd[4647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:15.700776 systemd-logind[1135]: New session 20 of user core. Feb 9 18:31:15.701744 systemd[1]: Started session-20.scope. Feb 9 18:31:15.704000 audit[4647]: USER_START pid=4647 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.706000 audit[4650]: CRED_ACQ pid=4650 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.816985 sshd[4647]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:15.817000 audit[4647]: USER_END pid=4647 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.817000 audit[4647]: CRED_DISP pid=4647 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:15.819778 systemd-logind[1135]: Session 20 logged out. Waiting for processes to exit. Feb 9 18:31:15.819957 systemd[1]: session-20.scope: Deactivated successfully. Feb 9 18:31:15.820851 systemd-logind[1135]: Removed session 20. Feb 9 18:31:15.821079 systemd[1]: sshd@19-10.0.0.66:22-10.0.0.1:36022.service: Deactivated successfully. Feb 9 18:31:15.820000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.66:22-10.0.0.1:36022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:19.777000 audit[4670]: NETFILTER_CFG table=filter:113 family=2 entries=20 op=nft_register_rule pid=4670 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:19.778756 kernel: kauditd_printk_skb: 57 callbacks suppressed Feb 9 18:31:19.778812 kernel: audit: type=1325 audit(1707503479.777:1441): table=filter:113 family=2 entries=20 op=nft_register_rule pid=4670 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:19.777000 audit[4670]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffe305cc40 a2=0 a3=ffff906686c0 items=0 ppid=2159 pid=4670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:19.782874 kernel: audit: type=1300 audit(1707503479.777:1441): arch=c00000b7 syscall=211 success=yes exit=2844 a0=3 a1=ffffe305cc40 a2=0 a3=ffff906686c0 items=0 ppid=2159 pid=4670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:19.782910 kernel: audit: type=1327 audit(1707503479.777:1441): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:19.777000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:19.780000 audit[4670]: NETFILTER_CFG table=nat:114 family=2 entries=104 op=nft_register_chain pid=4670 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:19.780000 audit[4670]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=47436 a0=3 a1=ffffe305cc40 a2=0 a3=ffff906686c0 items=0 ppid=2159 pid=4670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:19.789861 kernel: audit: type=1325 audit(1707503479.780:1442): table=nat:114 family=2 entries=104 op=nft_register_chain pid=4670 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:19.789925 kernel: audit: type=1300 audit(1707503479.780:1442): arch=c00000b7 syscall=211 success=yes exit=47436 a0=3 a1=ffffe305cc40 a2=0 a3=ffff906686c0 items=0 ppid=2159 pid=4670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:19.789955 kernel: audit: type=1327 audit(1707503479.780:1442): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:19.780000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:20.822351 systemd[1]: Started sshd@20-10.0.0.66:22-10.0.0.1:36030.service. Feb 9 18:31:20.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.66:22-10.0.0.1:36030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:20.825338 kernel: audit: type=1130 audit(1707503480.822:1443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.66:22-10.0.0.1:36030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:20.859000 audit[4673]: USER_ACCT pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:20.859910 sshd[4673]: Accepted publickey for core from 10.0.0.1 port 36030 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:20.861608 sshd[4673]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:20.860000 audit[4673]: CRED_ACQ pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:20.864197 kernel: audit: type=1101 audit(1707503480.859:1444): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:20.864243 kernel: audit: type=1103 audit(1707503480.860:1445): pid=4673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:20.864262 kernel: audit: type=1006 audit(1707503480.861:1446): pid=4673 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Feb 9 18:31:20.861000 audit[4673]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffebd5dda0 a2=3 a3=1 items=0 ppid=1 pid=4673 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:20.861000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:20.869413 systemd[1]: Started session-21.scope. Feb 9 18:31:20.869568 systemd-logind[1135]: New session 21 of user core. Feb 9 18:31:20.873000 audit[4673]: USER_START pid=4673 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:20.874000 audit[4675]: CRED_ACQ pid=4675 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:20.984340 sshd[4673]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:20.985000 audit[4673]: USER_END pid=4673 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:20.985000 audit[4673]: CRED_DISP pid=4673 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:20.987359 systemd[1]: sshd@20-10.0.0.66:22-10.0.0.1:36030.service: Deactivated successfully. Feb 9 18:31:20.987000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.66:22-10.0.0.1:36030 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:20.988278 systemd[1]: session-21.scope: Deactivated successfully. Feb 9 18:31:20.988836 systemd-logind[1135]: Session 21 logged out. Waiting for processes to exit. Feb 9 18:31:20.989471 systemd-logind[1135]: Removed session 21. Feb 9 18:31:22.902385 kubelet[2009]: E0209 18:31:22.902252 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:31:25.988906 systemd[1]: Started sshd@21-10.0.0.66:22-10.0.0.1:47266.service. Feb 9 18:31:25.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.66:22-10.0.0.1:47266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:25.989771 kernel: kauditd_printk_skb: 7 callbacks suppressed Feb 9 18:31:25.989829 kernel: audit: type=1130 audit(1707503485.988:1452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.66:22-10.0.0.1:47266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:26.025000 audit[4708]: USER_ACCT pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.026504 sshd[4708]: Accepted publickey for core from 10.0.0.1 port 47266 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:26.028112 sshd[4708]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:26.027000 audit[4708]: CRED_ACQ pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.030794 kernel: audit: type=1101 audit(1707503486.025:1453): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.030831 kernel: audit: type=1103 audit(1707503486.027:1454): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.032292 kernel: audit: type=1006 audit(1707503486.027:1455): pid=4708 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Feb 9 18:31:26.032366 kernel: audit: type=1300 audit(1707503486.027:1455): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeef82cc0 a2=3 a3=1 items=0 ppid=1 pid=4708 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:26.027000 audit[4708]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeef82cc0 a2=3 a3=1 items=0 ppid=1 pid=4708 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:26.027000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:26.035551 kernel: audit: type=1327 audit(1707503486.027:1455): proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:26.038347 systemd-logind[1135]: New session 22 of user core. Feb 9 18:31:26.038822 systemd[1]: Started session-22.scope. Feb 9 18:31:26.043000 audit[4708]: USER_START pid=4708 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.046000 audit[4710]: CRED_ACQ pid=4710 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.048808 kernel: audit: type=1105 audit(1707503486.043:1456): pid=4708 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.048847 kernel: audit: type=1103 audit(1707503486.046:1457): pid=4710 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.163549 sshd[4708]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:26.164000 audit[4708]: USER_END pid=4708 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.165914 systemd[1]: sshd@21-10.0.0.66:22-10.0.0.1:47266.service: Deactivated successfully. Feb 9 18:31:26.166876 systemd[1]: session-22.scope: Deactivated successfully. Feb 9 18:31:26.164000 audit[4708]: CRED_DISP pid=4708 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.167920 systemd-logind[1135]: Session 22 logged out. Waiting for processes to exit. Feb 9 18:31:26.168641 systemd-logind[1135]: Removed session 22. Feb 9 18:31:26.168955 kernel: audit: type=1106 audit(1707503486.164:1458): pid=4708 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.169004 kernel: audit: type=1104 audit(1707503486.164:1459): pid=4708 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:26.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.66:22-10.0.0.1:47266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:28.634098 systemd[1]: run-containerd-runc-k8s.io-56eb5ab895a9ad56bba3a4d1c2ce644a6c26a1978f001901e12e4b83ced66e59-runc.KgbCxm.mount: Deactivated successfully. Feb 9 18:31:28.689186 kubelet[2009]: E0209 18:31:28.689153 2009 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Feb 9 18:31:29.629138 systemd[1]: run-containerd-runc-k8s.io-56eb5ab895a9ad56bba3a4d1c2ce644a6c26a1978f001901e12e4b83ced66e59-runc.hZELgE.mount: Deactivated successfully. Feb 9 18:31:30.773493 kubelet[2009]: I0209 18:31:30.773437 2009 topology_manager.go:215] "Topology Admit Handler" podUID="4819d2a8-ce1d-4cf2-af52-fbe99ddec193" podNamespace="calico-apiserver" podName="calico-apiserver-7cf6b8989-n9774" Feb 9 18:31:30.779811 systemd[1]: Created slice kubepods-besteffort-pod4819d2a8_ce1d_4cf2_af52_fbe99ddec193.slice. Feb 9 18:31:30.789000 audit[4763]: NETFILTER_CFG table=filter:115 family=2 entries=9 op=nft_register_rule pid=4763 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:30.789000 audit[4763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffef787470 a2=0 a3=ffff853166c0 items=0 ppid=2159 pid=4763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:30.789000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:30.792000 audit[4763]: NETFILTER_CFG table=nat:116 family=2 entries=44 op=nft_register_rule pid=4763 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:30.792000 audit[4763]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffef787470 a2=0 a3=ffff853166c0 items=0 ppid=2159 pid=4763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:30.792000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:30.801000 audit[4765]: NETFILTER_CFG table=filter:117 family=2 entries=10 op=nft_register_rule pid=4765 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:30.801000 audit[4765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffcacd6730 a2=0 a3=ffffa50b66c0 items=0 ppid=2159 pid=4765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:30.801000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:30.803000 audit[4765]: NETFILTER_CFG table=nat:118 family=2 entries=44 op=nft_register_rule pid=4765 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:30.803000 audit[4765]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffcacd6730 a2=0 a3=ffffa50b66c0 items=0 ppid=2159 pid=4765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:30.803000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:30.868715 kubelet[2009]: I0209 18:31:30.868671 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/4819d2a8-ce1d-4cf2-af52-fbe99ddec193-calico-apiserver-certs\") pod \"calico-apiserver-7cf6b8989-n9774\" (UID: \"4819d2a8-ce1d-4cf2-af52-fbe99ddec193\") " pod="calico-apiserver/calico-apiserver-7cf6b8989-n9774" Feb 9 18:31:30.868715 kubelet[2009]: I0209 18:31:30.868719 2009 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-5l52k\" (UniqueName: \"kubernetes.io/projected/4819d2a8-ce1d-4cf2-af52-fbe99ddec193-kube-api-access-5l52k\") pod \"calico-apiserver-7cf6b8989-n9774\" (UID: \"4819d2a8-ce1d-4cf2-af52-fbe99ddec193\") " pod="calico-apiserver/calico-apiserver-7cf6b8989-n9774" Feb 9 18:31:30.969666 kubelet[2009]: E0209 18:31:30.969625 2009 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Feb 9 18:31:30.969821 kubelet[2009]: E0209 18:31:30.969721 2009 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/4819d2a8-ce1d-4cf2-af52-fbe99ddec193-calico-apiserver-certs podName:4819d2a8-ce1d-4cf2-af52-fbe99ddec193 nodeName:}" failed. No retries permitted until 2024-02-09 18:31:31.469702665 +0000 UTC m=+79.898900647 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/4819d2a8-ce1d-4cf2-af52-fbe99ddec193-calico-apiserver-certs") pod "calico-apiserver-7cf6b8989-n9774" (UID: "4819d2a8-ce1d-4cf2-af52-fbe99ddec193") : secret "calico-apiserver-certs" not found Feb 9 18:31:31.168494 systemd[1]: Started sshd@22-10.0.0.66:22-10.0.0.1:47278.service. Feb 9 18:31:31.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.66:22-10.0.0.1:47278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:31.169425 kernel: kauditd_printk_skb: 13 callbacks suppressed Feb 9 18:31:31.169465 kernel: audit: type=1130 audit(1707503491.167:1465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.66:22-10.0.0.1:47278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:31.204000 audit[4768]: USER_ACCT pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.206231 sshd[4768]: Accepted publickey for core from 10.0.0.1 port 47278 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:31.207842 sshd[4768]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:31.206000 audit[4768]: CRED_ACQ pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.210786 kernel: audit: type=1101 audit(1707503491.204:1466): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.210840 kernel: audit: type=1103 audit(1707503491.206:1467): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.210870 kernel: audit: type=1006 audit(1707503491.206:1468): pid=4768 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Feb 9 18:31:31.206000 audit[4768]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb170f50 a2=3 a3=1 items=0 ppid=1 pid=4768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:31.214825 kernel: audit: type=1300 audit(1707503491.206:1468): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffb170f50 a2=3 a3=1 items=0 ppid=1 pid=4768 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:31.206000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:31.215871 kernel: audit: type=1327 audit(1707503491.206:1468): proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:31.218039 systemd-logind[1135]: New session 23 of user core. Feb 9 18:31:31.218590 systemd[1]: Started session-23.scope. Feb 9 18:31:31.221000 audit[4768]: USER_START pid=4768 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.222000 audit[4770]: CRED_ACQ pid=4770 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.227321 kernel: audit: type=1105 audit(1707503491.221:1469): pid=4768 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.227369 kernel: audit: type=1103 audit(1707503491.222:1470): pid=4770 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.327050 sshd[4768]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:31.326000 audit[4768]: USER_END pid=4768 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.329472 systemd[1]: sshd@22-10.0.0.66:22-10.0.0.1:47278.service: Deactivated successfully. Feb 9 18:31:31.330323 systemd[1]: session-23.scope: Deactivated successfully. Feb 9 18:31:31.326000 audit[4768]: CRED_DISP pid=4768 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.332677 kernel: audit: type=1106 audit(1707503491.326:1471): pid=4768 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.332731 kernel: audit: type=1104 audit(1707503491.326:1472): pid=4768 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:31.328000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.66:22-10.0.0.1:47278 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:31.333195 systemd-logind[1135]: Session 23 logged out. Waiting for processes to exit. Feb 9 18:31:31.333888 systemd-logind[1135]: Removed session 23. Feb 9 18:31:31.682664 env[1146]: time="2024-02-09T18:31:31.682602824Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cf6b8989-n9774,Uid:4819d2a8-ce1d-4cf2-af52-fbe99ddec193,Namespace:calico-apiserver,Attempt:0,}" Feb 9 18:31:31.813425 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Feb 9 18:31:31.813523 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliefefcdef349: link becomes ready Feb 9 18:31:31.812209 systemd-networkd[1054]: caliefefcdef349: Link UP Feb 9 18:31:31.813266 systemd-networkd[1054]: caliefefcdef349: Gained carrier Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.728 [INFO][4781] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0 calico-apiserver-7cf6b8989- calico-apiserver 4819d2a8-ce1d-4cf2-af52-fbe99ddec193 1079 0 2024-02-09 18:31:30 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7cf6b8989 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7cf6b8989-n9774 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliefefcdef349 [] []}} ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Namespace="calico-apiserver" Pod="calico-apiserver-7cf6b8989-n9774" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cf6b8989--n9774-" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.728 [INFO][4781] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Namespace="calico-apiserver" Pod="calico-apiserver-7cf6b8989-n9774" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.765 [INFO][4796] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" HandleID="k8s-pod-network.560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Workload="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.777 [INFO][4796] ipam_plugin.go 268: Auto assigning IP ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" HandleID="k8s-pod-network.560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Workload="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000633390), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7cf6b8989-n9774", "timestamp":"2024-02-09 18:31:31.765117801 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.778 [INFO][4796] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.778 [INFO][4796] ipam_plugin.go 371: Acquired host-wide IPAM lock. Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.778 [INFO][4796] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.782 [INFO][4796] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" host="localhost" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.788 [INFO][4796] ipam.go 372: Looking up existing affinities for host host="localhost" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.792 [INFO][4796] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.794 [INFO][4796] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.796 [INFO][4796] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.796 [INFO][4796] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" host="localhost" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.798 [INFO][4796] ipam.go 1682: Creating new handle: k8s-pod-network.560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4 Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.802 [INFO][4796] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" host="localhost" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.807 [INFO][4796] ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" host="localhost" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.807 [INFO][4796] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" host="localhost" Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.807 [INFO][4796] ipam_plugin.go 377: Released host-wide IPAM lock. Feb 9 18:31:31.828157 env[1146]: 2024-02-09 18:31:31.807 [INFO][4796] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" HandleID="k8s-pod-network.560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Workload="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" Feb 9 18:31:31.828777 env[1146]: 2024-02-09 18:31:31.810 [INFO][4781] k8s.go 385: Populated endpoint ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Namespace="calico-apiserver" Pod="calico-apiserver-7cf6b8989-n9774" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0", GenerateName:"calico-apiserver-7cf6b8989-", Namespace:"calico-apiserver", SelfLink:"", UID:"4819d2a8-ce1d-4cf2-af52-fbe99ddec193", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 31, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cf6b8989", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7cf6b8989-n9774", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliefefcdef349", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:31.828777 env[1146]: 2024-02-09 18:31:31.810 [INFO][4781] k8s.go 386: Calico CNI using IPs: [192.168.88.133/32] ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Namespace="calico-apiserver" Pod="calico-apiserver-7cf6b8989-n9774" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" Feb 9 18:31:31.828777 env[1146]: 2024-02-09 18:31:31.810 [INFO][4781] dataplane_linux.go 68: Setting the host side veth name to caliefefcdef349 ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Namespace="calico-apiserver" Pod="calico-apiserver-7cf6b8989-n9774" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" Feb 9 18:31:31.828777 env[1146]: 2024-02-09 18:31:31.814 [INFO][4781] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Namespace="calico-apiserver" Pod="calico-apiserver-7cf6b8989-n9774" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" Feb 9 18:31:31.828777 env[1146]: 2024-02-09 18:31:31.814 [INFO][4781] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Namespace="calico-apiserver" Pod="calico-apiserver-7cf6b8989-n9774" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0", GenerateName:"calico-apiserver-7cf6b8989-", Namespace:"calico-apiserver", SelfLink:"", UID:"4819d2a8-ce1d-4cf2-af52-fbe99ddec193", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2024, time.February, 9, 18, 31, 30, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7cf6b8989", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4", Pod:"calico-apiserver-7cf6b8989-n9774", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliefefcdef349", MAC:"ba:ad:b2:5f:7c:75", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Feb 9 18:31:31.828777 env[1146]: 2024-02-09 18:31:31.826 [INFO][4781] k8s.go 491: Wrote updated endpoint to datastore ContainerID="560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4" Namespace="calico-apiserver" Pod="calico-apiserver-7cf6b8989-n9774" WorkloadEndpoint="localhost-k8s-calico--apiserver--7cf6b8989--n9774-eth0" Feb 9 18:31:31.840000 audit[4829]: NETFILTER_CFG table=filter:119 family=2 entries=65 op=nft_register_chain pid=4829 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Feb 9 18:31:31.840000 audit[4829]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=32144 a0=3 a1=fffffc982780 a2=0 a3=ffff9826afa8 items=0 ppid=4091 pid=4829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:31.840000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Feb 9 18:31:31.843530 env[1146]: time="2024-02-09T18:31:31.843326727Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Feb 9 18:31:31.843530 env[1146]: time="2024-02-09T18:31:31.843367367Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Feb 9 18:31:31.843530 env[1146]: time="2024-02-09T18:31:31.843377847Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Feb 9 18:31:31.843817 env[1146]: time="2024-02-09T18:31:31.843781084Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4 pid=4834 runtime=io.containerd.runc.v2 Feb 9 18:31:31.854826 systemd[1]: Started cri-containerd-560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4.scope. Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit: BPF prog-id=185 op=LOAD Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4834 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:31.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536303535316633653132656565313163303964313366636533363939 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4834 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:31.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536303535316633653132656565313163303964313366636533363939 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit: BPF prog-id=186 op=LOAD Feb 9 18:31:31.874000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4834 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:31.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536303535316633653132656565313163303964313366636533363939 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit: BPF prog-id=187 op=LOAD Feb 9 18:31:31.874000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4834 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:31.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536303535316633653132656565313163303964313366636533363939 Feb 9 18:31:31.874000 audit: BPF prog-id=187 op=UNLOAD Feb 9 18:31:31.874000 audit: BPF prog-id=186 op=UNLOAD Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { perfmon } for pid=4843 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit[4843]: AVC avc: denied { bpf } for pid=4843 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:31.874000 audit: BPF prog-id=188 op=LOAD Feb 9 18:31:31.874000 audit[4843]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4834 pid=4843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:31.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536303535316633653132656565313163303964313366636533363939 Feb 9 18:31:31.877011 systemd-resolved[1091]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Feb 9 18:31:31.898488 env[1146]: time="2024-02-09T18:31:31.898449537Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7cf6b8989-n9774,Uid:4819d2a8-ce1d-4cf2-af52-fbe99ddec193,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4\"" Feb 9 18:31:31.900353 env[1146]: time="2024-02-09T18:31:31.900280564Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\"" Feb 9 18:31:32.872471 systemd-networkd[1054]: caliefefcdef349: Gained IPv6LL Feb 9 18:31:34.234033 env[1146]: time="2024-02-09T18:31:34.233993069Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:34.236259 env[1146]: time="2024-02-09T18:31:34.236216940Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:34.237715 env[1146]: time="2024-02-09T18:31:34.237688535Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:34.239024 env[1146]: time="2024-02-09T18:31:34.238983050Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:5ff0bdc8d0b2e9d7819703b18867f60f9153ed01da81e2bbfa22002abec9dc26,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Feb 9 18:31:34.239505 env[1146]: time="2024-02-09T18:31:34.239481448Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.0\" returns image reference \"sha256:24494ef6c7de0e2dcf21ad9fb6c94801c53f120443e256a5e1b54eccd57058a9\"" Feb 9 18:31:34.241693 env[1146]: time="2024-02-09T18:31:34.241667079Z" level=info msg="CreateContainer within sandbox \"560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Feb 9 18:31:34.253844 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1776708354.mount: Deactivated successfully. Feb 9 18:31:34.255395 env[1146]: time="2024-02-09T18:31:34.255353666Z" level=info msg="CreateContainer within sandbox \"560551f3e12eee11c09d13fce3699242576fd5cbfd75453b8e658b7ae4ddaaa4\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"96c488629dcc6001f90e6a965594db6184a67af51f261bf9d0ca9e594284f151\"" Feb 9 18:31:34.255779 env[1146]: time="2024-02-09T18:31:34.255756785Z" level=info msg="StartContainer for \"96c488629dcc6001f90e6a965594db6184a67af51f261bf9d0ca9e594284f151\"" Feb 9 18:31:34.274044 systemd[1]: Started cri-containerd-96c488629dcc6001f90e6a965594db6184a67af51f261bf9d0ca9e594284f151.scope. Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.293000 audit: BPF prog-id=189 op=LOAD Feb 9 18:31:34.294000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.294000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4834 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:34.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936633438383632396463633630303166393065366139363535393464 Feb 9 18:31:34.294000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.294000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4834 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:34.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936633438383632396463633630303166393065366139363535393464 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit: BPF prog-id=190 op=LOAD Feb 9 18:31:34.295000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4834 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:34.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936633438383632396463633630303166393065366139363535393464 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.295000 audit: BPF prog-id=191 op=LOAD Feb 9 18:31:34.295000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4834 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:34.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936633438383632396463633630303166393065366139363535393464 Feb 9 18:31:34.296000 audit: BPF prog-id=191 op=UNLOAD Feb 9 18:31:34.296000 audit: BPF prog-id=190 op=UNLOAD Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { perfmon } for pid=4876 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit[4876]: AVC avc: denied { bpf } for pid=4876 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Feb 9 18:31:34.296000 audit: BPF prog-id=192 op=LOAD Feb 9 18:31:34.296000 audit[4876]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4834 pid=4876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:34.296000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936633438383632396463633630303166393065366139363535393464 Feb 9 18:31:34.322153 env[1146]: time="2024-02-09T18:31:34.319348578Z" level=info msg="StartContainer for \"96c488629dcc6001f90e6a965594db6184a67af51f261bf9d0ca9e594284f151\" returns successfully" Feb 9 18:31:34.803000 audit[4909]: NETFILTER_CFG table=filter:120 family=2 entries=10 op=nft_register_rule pid=4909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:34.803000 audit[4909]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffcab772b0 a2=0 a3=ffff8097e6c0 items=0 ppid=2159 pid=4909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:34.803000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:34.804000 audit[4909]: NETFILTER_CFG table=nat:121 family=2 entries=44 op=nft_register_rule pid=4909 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:34.804000 audit[4909]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffcab772b0 a2=0 a3=ffff8097e6c0 items=0 ppid=2159 pid=4909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:34.804000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:34.900081 kubelet[2009]: I0209 18:31:34.900030 2009 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7cf6b8989-n9774" podStartSLOduration=2.559765051 podCreationTimestamp="2024-02-09 18:31:30 +0000 UTC" firstStartedPulling="2024-02-09 18:31:31.900009286 +0000 UTC m=+80.329207268" lastFinishedPulling="2024-02-09 18:31:34.240229565 +0000 UTC m=+82.669427547" observedRunningTime="2024-02-09 18:31:34.8971983 +0000 UTC m=+83.326396602" watchObservedRunningTime="2024-02-09 18:31:34.89998533 +0000 UTC m=+83.329183272" Feb 9 18:31:34.913000 audit[4911]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=4911 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:34.913000 audit[4911]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3548 a0=3 a1=ffffe40cf260 a2=0 a3=ffffa03196c0 items=0 ppid=2159 pid=4911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:34.913000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:34.914000 audit[4911]: NETFILTER_CFG table=nat:123 family=2 entries=44 op=nft_register_rule pid=4911 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Feb 9 18:31:34.914000 audit[4911]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14220 a0=3 a1=ffffe40cf260 a2=0 a3=ffffa03196c0 items=0 ppid=2159 pid=4911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:34.914000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Feb 9 18:31:36.196000 audit[4887]: AVC avc: denied { watch } for pid=4887 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_18_31_31.2025505242/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c515 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c515 tclass=file permissive=0 Feb 9 18:31:36.200590 kernel: kauditd_printk_skb: 130 callbacks suppressed Feb 9 18:31:36.200702 kernel: audit: type=1400 audit(1707503496.196:1515): avc: denied { watch } for pid=4887 comm="apiserver" path="/calico-apiserver-certs/..2024_02_09_18_31_31.2025505242/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c515 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c515 tclass=file permissive=0 Feb 9 18:31:36.200729 kernel: audit: type=1300 audit(1707503496.196:1515): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d1cf80 a2=fc6 a3=0 items=0 ppid=4834 pid=4887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c515 key=(null) Feb 9 18:31:36.196000 audit[4887]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000d1cf80 a2=fc6 a3=0 items=0 ppid=4834 pid=4887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c515 key=(null) Feb 9 18:31:36.196000 audit: PROCTITLE proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 9 18:31:36.205780 kernel: audit: type=1327 audit(1707503496.196:1515): proctitle=2E2F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C Feb 9 18:31:36.331621 systemd[1]: Started sshd@23-10.0.0.66:22-10.0.0.1:34286.service. Feb 9 18:31:36.330000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.66:22-10.0.0.1:34286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:36.334318 kernel: audit: type=1130 audit(1707503496.330:1516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.66:22-10.0.0.1:34286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:36.372000 audit[4914]: USER_ACCT pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:36.376439 sshd[4914]: Accepted publickey for core from 10.0.0.1 port 34286 ssh2: RSA SHA256:+mjqzBx0jAExxLmXQAd9A2jZt2TW46e6NSOiRFb14I8 Feb 9 18:31:36.377327 kernel: audit: type=1101 audit(1707503496.372:1517): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:36.377390 kernel: audit: type=1103 audit(1707503496.375:1518): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:36.375000 audit[4914]: CRED_ACQ pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:36.378041 sshd[4914]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Feb 9 18:31:36.380850 kernel: audit: type=1006 audit(1707503496.376:1519): pid=4914 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Feb 9 18:31:36.380897 kernel: audit: type=1300 audit(1707503496.376:1519): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfe68b20 a2=3 a3=1 items=0 ppid=1 pid=4914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:36.376000 audit[4914]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffdfe68b20 a2=3 a3=1 items=0 ppid=1 pid=4914 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Feb 9 18:31:36.381795 systemd-logind[1135]: New session 24 of user core. Feb 9 18:31:36.382602 systemd[1]: Started session-24.scope. Feb 9 18:31:36.383200 kernel: audit: type=1327 audit(1707503496.376:1519): proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:36.376000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Feb 9 18:31:36.385000 audit[4914]: USER_START pid=4914 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:36.386000 audit[4916]: CRED_ACQ pid=4916 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:36.390329 kernel: audit: type=1105 audit(1707503496.385:1520): pid=4914 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:36.499860 sshd[4914]: pam_unix(sshd:session): session closed for user core Feb 9 18:31:36.499000 audit[4914]: USER_END pid=4914 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:36.500000 audit[4914]: CRED_DISP pid=4914 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Feb 9 18:31:36.503186 systemd-logind[1135]: Session 24 logged out. Waiting for processes to exit. Feb 9 18:31:36.503420 systemd[1]: sshd@23-10.0.0.66:22-10.0.0.1:34286.service: Deactivated successfully. Feb 9 18:31:36.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.66:22-10.0.0.1:34286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Feb 9 18:31:36.504151 systemd[1]: session-24.scope: Deactivated successfully. Feb 9 18:31:36.504733 systemd-logind[1135]: Removed session 24.