Apr 12 18:43:12.999936 kernel: Linux version 5.15.154-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Apr 12 17:19:00 -00 2024 Apr 12 18:43:12.999985 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=189121f7c8c0a24098d3bb1e040d34611f7c276be43815ff7fe409fce185edaf Apr 12 18:43:13.000013 kernel: BIOS-provided physical RAM map: Apr 12 18:43:13.000030 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Apr 12 18:43:13.000047 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Apr 12 18:43:13.000063 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Apr 12 18:43:13.000083 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007ffdcfff] usable Apr 12 18:43:13.000100 kernel: BIOS-e820: [mem 0x000000007ffdd000-0x000000007fffffff] reserved Apr 12 18:43:13.000119 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Apr 12 18:43:13.000135 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Apr 12 18:43:13.000151 kernel: NX (Execute Disable) protection: active Apr 12 18:43:13.000167 kernel: SMBIOS 2.8 present. Apr 12 18:43:13.000183 kernel: DMI: OpenStack Foundation OpenStack Nova, BIOS 1.15.0-1 04/01/2014 Apr 12 18:43:13.000199 kernel: Hypervisor detected: KVM Apr 12 18:43:13.000219 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Apr 12 18:43:13.000241 kernel: kvm-clock: cpu 0, msr 49191001, primary cpu clock Apr 12 18:43:13.000258 kernel: kvm-clock: using sched offset of 5485180972 cycles Apr 12 18:43:13.000277 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Apr 12 18:43:13.000295 kernel: tsc: Detected 1996.249 MHz processor Apr 12 18:43:13.000313 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Apr 12 18:43:13.000411 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Apr 12 18:43:13.000429 kernel: last_pfn = 0x7ffdd max_arch_pfn = 0x400000000 Apr 12 18:43:13.000448 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Apr 12 18:43:13.000474 kernel: ACPI: Early table checksum verification disabled Apr 12 18:43:13.000491 kernel: ACPI: RSDP 0x00000000000F5930 000014 (v00 BOCHS ) Apr 12 18:43:13.000509 kernel: ACPI: RSDT 0x000000007FFE1848 000030 (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:43:13.000527 kernel: ACPI: FACP 0x000000007FFE172C 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:43:13.000545 kernel: ACPI: DSDT 0x000000007FFE0040 0016EC (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:43:13.000563 kernel: ACPI: FACS 0x000000007FFE0000 000040 Apr 12 18:43:13.000580 kernel: ACPI: APIC 0x000000007FFE17A0 000080 (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:43:13.000598 kernel: ACPI: WAET 0x000000007FFE1820 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:43:13.000615 kernel: ACPI: Reserving FACP table memory at [mem 0x7ffe172c-0x7ffe179f] Apr 12 18:43:13.000638 kernel: ACPI: Reserving DSDT table memory at [mem 0x7ffe0040-0x7ffe172b] Apr 12 18:43:13.000656 kernel: ACPI: Reserving FACS table memory at [mem 0x7ffe0000-0x7ffe003f] Apr 12 18:43:13.000674 kernel: ACPI: Reserving APIC table memory at [mem 0x7ffe17a0-0x7ffe181f] Apr 12 18:43:13.000691 kernel: ACPI: Reserving WAET table memory at [mem 0x7ffe1820-0x7ffe1847] Apr 12 18:43:13.000709 kernel: No NUMA configuration found Apr 12 18:43:13.000726 kernel: Faking a node at [mem 0x0000000000000000-0x000000007ffdcfff] Apr 12 18:43:13.000743 kernel: NODE_DATA(0) allocated [mem 0x7ffd7000-0x7ffdcfff] Apr 12 18:43:13.000762 kernel: Zone ranges: Apr 12 18:43:13.000789 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Apr 12 18:43:13.000807 kernel: DMA32 [mem 0x0000000001000000-0x000000007ffdcfff] Apr 12 18:43:13.000825 kernel: Normal empty Apr 12 18:43:13.000844 kernel: Movable zone start for each node Apr 12 18:43:13.000862 kernel: Early memory node ranges Apr 12 18:43:13.000880 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Apr 12 18:43:13.000902 kernel: node 0: [mem 0x0000000000100000-0x000000007ffdcfff] Apr 12 18:43:13.000920 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007ffdcfff] Apr 12 18:43:13.000938 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Apr 12 18:43:13.000956 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Apr 12 18:43:13.000975 kernel: On node 0, zone DMA32: 35 pages in unavailable ranges Apr 12 18:43:13.000993 kernel: ACPI: PM-Timer IO Port: 0x608 Apr 12 18:43:13.001011 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Apr 12 18:43:13.001029 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Apr 12 18:43:13.001048 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Apr 12 18:43:13.001070 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Apr 12 18:43:13.001089 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Apr 12 18:43:13.001107 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Apr 12 18:43:13.001125 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Apr 12 18:43:13.001144 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Apr 12 18:43:13.001162 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Apr 12 18:43:13.001180 kernel: [mem 0x80000000-0xfeffbfff] available for PCI devices Apr 12 18:43:13.001198 kernel: Booting paravirtualized kernel on KVM Apr 12 18:43:13.001217 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Apr 12 18:43:13.001236 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Apr 12 18:43:13.001260 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u1048576 Apr 12 18:43:13.001279 kernel: pcpu-alloc: s188696 r8192 d32488 u1048576 alloc=1*2097152 Apr 12 18:43:13.001297 kernel: pcpu-alloc: [0] 0 1 Apr 12 18:43:13.001315 kernel: kvm-guest: stealtime: cpu 0, msr 7dc1c0c0 Apr 12 18:43:13.001452 kernel: kvm-guest: PV spinlocks disabled, no host support Apr 12 18:43:13.001471 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515805 Apr 12 18:43:13.001490 kernel: Policy zone: DMA32 Apr 12 18:43:13.001511 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=189121f7c8c0a24098d3bb1e040d34611f7c276be43815ff7fe409fce185edaf Apr 12 18:43:13.001537 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Apr 12 18:43:13.001555 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Apr 12 18:43:13.001574 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Apr 12 18:43:13.001593 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Apr 12 18:43:13.001612 kernel: Memory: 1973284K/2096620K available (12294K kernel code, 2275K rwdata, 13708K rodata, 47440K init, 4148K bss, 123076K reserved, 0K cma-reserved) Apr 12 18:43:13.001630 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Apr 12 18:43:13.001649 kernel: ftrace: allocating 34508 entries in 135 pages Apr 12 18:43:13.001667 kernel: ftrace: allocated 135 pages with 4 groups Apr 12 18:43:13.001690 kernel: rcu: Hierarchical RCU implementation. Apr 12 18:43:13.001710 kernel: rcu: RCU event tracing is enabled. Apr 12 18:43:13.001729 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Apr 12 18:43:13.001747 kernel: Rude variant of Tasks RCU enabled. Apr 12 18:43:13.001766 kernel: Tracing variant of Tasks RCU enabled. Apr 12 18:43:13.001785 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Apr 12 18:43:13.001803 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Apr 12 18:43:13.001822 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Apr 12 18:43:13.001840 kernel: Console: colour VGA+ 80x25 Apr 12 18:43:13.001861 kernel: printk: console [tty0] enabled Apr 12 18:43:13.001881 kernel: printk: console [ttyS0] enabled Apr 12 18:43:13.001899 kernel: ACPI: Core revision 20210730 Apr 12 18:43:13.001918 kernel: APIC: Switch to symmetric I/O mode setup Apr 12 18:43:13.001936 kernel: x2apic enabled Apr 12 18:43:13.001955 kernel: Switched APIC routing to physical x2apic. Apr 12 18:43:13.001973 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Apr 12 18:43:13.001991 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Apr 12 18:43:13.002010 kernel: Calibrating delay loop (skipped) preset value.. 3992.49 BogoMIPS (lpj=1996249) Apr 12 18:43:13.002029 kernel: Last level iTLB entries: 4KB 0, 2MB 0, 4MB 0 Apr 12 18:43:13.002051 kernel: Last level dTLB entries: 4KB 0, 2MB 0, 4MB 0, 1GB 0 Apr 12 18:43:13.002070 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Apr 12 18:43:13.002089 kernel: Spectre V2 : Mitigation: Retpolines Apr 12 18:43:13.002107 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Apr 12 18:43:13.002126 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Apr 12 18:43:13.002144 kernel: Speculative Store Bypass: Vulnerable Apr 12 18:43:13.002163 kernel: x86/fpu: x87 FPU will use FXSAVE Apr 12 18:43:13.002181 kernel: Freeing SMP alternatives memory: 32K Apr 12 18:43:13.002199 kernel: pid_max: default: 32768 minimum: 301 Apr 12 18:43:13.002221 kernel: LSM: Security Framework initializing Apr 12 18:43:13.002239 kernel: SELinux: Initializing. Apr 12 18:43:13.002258 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Apr 12 18:43:13.002277 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Apr 12 18:43:13.002296 kernel: smpboot: CPU0: AMD Intel Core i7 9xx (Nehalem Class Core i7) (family: 0x6, model: 0x1a, stepping: 0x3) Apr 12 18:43:13.002315 kernel: Performance Events: AMD PMU driver. Apr 12 18:43:13.002363 kernel: ... version: 0 Apr 12 18:43:13.002382 kernel: ... bit width: 48 Apr 12 18:43:13.002400 kernel: ... generic registers: 4 Apr 12 18:43:13.002436 kernel: ... value mask: 0000ffffffffffff Apr 12 18:43:13.002456 kernel: ... max period: 00007fffffffffff Apr 12 18:43:13.002478 kernel: ... fixed-purpose events: 0 Apr 12 18:43:13.002497 kernel: ... event mask: 000000000000000f Apr 12 18:43:13.002516 kernel: signal: max sigframe size: 1440 Apr 12 18:43:13.002535 kernel: rcu: Hierarchical SRCU implementation. Apr 12 18:43:13.002554 kernel: smp: Bringing up secondary CPUs ... Apr 12 18:43:13.002573 kernel: x86: Booting SMP configuration: Apr 12 18:43:13.002596 kernel: .... node #0, CPUs: #1 Apr 12 18:43:13.002615 kernel: kvm-clock: cpu 1, msr 49191041, secondary cpu clock Apr 12 18:43:13.002635 kernel: kvm-guest: stealtime: cpu 1, msr 7dd1c0c0 Apr 12 18:43:13.002654 kernel: smp: Brought up 1 node, 2 CPUs Apr 12 18:43:13.002673 kernel: smpboot: Max logical packages: 2 Apr 12 18:43:13.002692 kernel: smpboot: Total of 2 processors activated (7984.99 BogoMIPS) Apr 12 18:43:13.002711 kernel: devtmpfs: initialized Apr 12 18:43:13.002731 kernel: x86/mm: Memory block size: 128MB Apr 12 18:43:13.002750 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Apr 12 18:43:13.002774 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Apr 12 18:43:13.002794 kernel: pinctrl core: initialized pinctrl subsystem Apr 12 18:43:13.002813 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Apr 12 18:43:13.002832 kernel: audit: initializing netlink subsys (disabled) Apr 12 18:43:13.002852 kernel: audit: type=2000 audit(1712947392.697:1): state=initialized audit_enabled=0 res=1 Apr 12 18:43:13.002871 kernel: thermal_sys: Registered thermal governor 'step_wise' Apr 12 18:43:13.002890 kernel: thermal_sys: Registered thermal governor 'user_space' Apr 12 18:43:13.002909 kernel: cpuidle: using governor menu Apr 12 18:43:13.002928 kernel: ACPI: bus type PCI registered Apr 12 18:43:13.002952 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Apr 12 18:43:13.002972 kernel: dca service started, version 1.12.1 Apr 12 18:43:13.002992 kernel: PCI: Using configuration type 1 for base access Apr 12 18:43:13.003011 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Apr 12 18:43:13.003031 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Apr 12 18:43:13.003050 kernel: ACPI: Added _OSI(Module Device) Apr 12 18:43:13.003069 kernel: ACPI: Added _OSI(Processor Device) Apr 12 18:43:13.003088 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Apr 12 18:43:13.003107 kernel: ACPI: Added _OSI(Processor Aggregator Device) Apr 12 18:43:13.003130 kernel: ACPI: Added _OSI(Linux-Dell-Video) Apr 12 18:43:13.003149 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Apr 12 18:43:13.003168 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Apr 12 18:43:13.003187 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Apr 12 18:43:13.003206 kernel: ACPI: Interpreter enabled Apr 12 18:43:13.003226 kernel: ACPI: PM: (supports S0 S3 S5) Apr 12 18:43:13.003245 kernel: ACPI: Using IOAPIC for interrupt routing Apr 12 18:43:13.003265 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Apr 12 18:43:13.003284 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Apr 12 18:43:13.003310 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Apr 12 18:43:13.008605 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Apr 12 18:43:13.008766 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Apr 12 18:43:13.008790 kernel: acpiphp: Slot [3] registered Apr 12 18:43:13.008805 kernel: acpiphp: Slot [4] registered Apr 12 18:43:13.008821 kernel: acpiphp: Slot [5] registered Apr 12 18:43:13.008836 kernel: acpiphp: Slot [6] registered Apr 12 18:43:13.008856 kernel: acpiphp: Slot [7] registered Apr 12 18:43:13.008870 kernel: acpiphp: Slot [8] registered Apr 12 18:43:13.008885 kernel: acpiphp: Slot [9] registered Apr 12 18:43:13.008899 kernel: acpiphp: Slot [10] registered Apr 12 18:43:13.008913 kernel: acpiphp: Slot [11] registered Apr 12 18:43:13.008928 kernel: acpiphp: Slot [12] registered Apr 12 18:43:13.008942 kernel: acpiphp: Slot [13] registered Apr 12 18:43:13.008956 kernel: acpiphp: Slot [14] registered Apr 12 18:43:13.008971 kernel: acpiphp: Slot [15] registered Apr 12 18:43:13.008985 kernel: acpiphp: Slot [16] registered Apr 12 18:43:13.009003 kernel: acpiphp: Slot [17] registered Apr 12 18:43:13.009017 kernel: acpiphp: Slot [18] registered Apr 12 18:43:13.009031 kernel: acpiphp: Slot [19] registered Apr 12 18:43:13.009046 kernel: acpiphp: Slot [20] registered Apr 12 18:43:13.009060 kernel: acpiphp: Slot [21] registered Apr 12 18:43:13.009074 kernel: acpiphp: Slot [22] registered Apr 12 18:43:13.009088 kernel: acpiphp: Slot [23] registered Apr 12 18:43:13.009103 kernel: acpiphp: Slot [24] registered Apr 12 18:43:13.009117 kernel: acpiphp: Slot [25] registered Apr 12 18:43:13.009134 kernel: acpiphp: Slot [26] registered Apr 12 18:43:13.009148 kernel: acpiphp: Slot [27] registered Apr 12 18:43:13.009162 kernel: acpiphp: Slot [28] registered Apr 12 18:43:13.009177 kernel: acpiphp: Slot [29] registered Apr 12 18:43:13.009191 kernel: acpiphp: Slot [30] registered Apr 12 18:43:13.009205 kernel: acpiphp: Slot [31] registered Apr 12 18:43:13.009219 kernel: PCI host bridge to bus 0000:00 Apr 12 18:43:13.009427 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Apr 12 18:43:13.009570 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Apr 12 18:43:13.009715 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Apr 12 18:43:13.009850 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Apr 12 18:43:13.009984 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x17fffffff window] Apr 12 18:43:13.010116 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Apr 12 18:43:13.010292 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Apr 12 18:43:13.010522 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Apr 12 18:43:13.010705 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Apr 12 18:43:13.010861 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc120-0xc12f] Apr 12 18:43:13.011017 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Apr 12 18:43:13.011169 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Apr 12 18:43:13.011349 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Apr 12 18:43:13.011535 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Apr 12 18:43:13.011704 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Apr 12 18:43:13.011869 kernel: pci 0000:00:01.3: quirk: [io 0x0600-0x063f] claimed by PIIX4 ACPI Apr 12 18:43:13.012005 kernel: pci 0000:00:01.3: quirk: [io 0x0700-0x070f] claimed by PIIX4 SMB Apr 12 18:43:13.012111 kernel: pci 0000:00:02.0: [1af4:1050] type 00 class 0x030000 Apr 12 18:43:13.012198 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xfe000000-0xfe7fffff pref] Apr 12 18:43:13.012283 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xfe800000-0xfe803fff 64bit pref] Apr 12 18:43:13.013411 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfeb90000-0xfeb90fff] Apr 12 18:43:13.013502 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xfeb80000-0xfeb8ffff pref] Apr 12 18:43:13.013583 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Apr 12 18:43:13.013672 kernel: pci 0000:00:03.0: [1af4:1000] type 00 class 0x020000 Apr 12 18:43:13.013754 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc080-0xc0bf] Apr 12 18:43:13.013834 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfeb91000-0xfeb91fff] Apr 12 18:43:13.013915 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe804000-0xfe807fff 64bit pref] Apr 12 18:43:13.013994 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfeb00000-0xfeb7ffff pref] Apr 12 18:43:13.014092 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Apr 12 18:43:13.014175 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Apr 12 18:43:13.014257 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfeb92000-0xfeb92fff] Apr 12 18:43:13.015387 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe808000-0xfe80bfff 64bit pref] Apr 12 18:43:13.015498 kernel: pci 0000:00:05.0: [1af4:1002] type 00 class 0x00ff00 Apr 12 18:43:13.015581 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc0c0-0xc0ff] Apr 12 18:43:13.015661 kernel: pci 0000:00:05.0: reg 0x20: [mem 0xfe80c000-0xfe80ffff 64bit pref] Apr 12 18:43:13.015753 kernel: pci 0000:00:06.0: [1af4:1005] type 00 class 0x00ff00 Apr 12 18:43:13.015834 kernel: pci 0000:00:06.0: reg 0x10: [io 0xc100-0xc11f] Apr 12 18:43:13.015914 kernel: pci 0000:00:06.0: reg 0x20: [mem 0xfe810000-0xfe813fff 64bit pref] Apr 12 18:43:13.015926 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Apr 12 18:43:13.015934 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Apr 12 18:43:13.015942 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Apr 12 18:43:13.015950 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Apr 12 18:43:13.015958 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Apr 12 18:43:13.015969 kernel: iommu: Default domain type: Translated Apr 12 18:43:13.015977 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Apr 12 18:43:13.016057 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Apr 12 18:43:13.016137 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Apr 12 18:43:13.016217 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Apr 12 18:43:13.016229 kernel: vgaarb: loaded Apr 12 18:43:13.016237 kernel: pps_core: LinuxPPS API ver. 1 registered Apr 12 18:43:13.016245 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Apr 12 18:43:13.016253 kernel: PTP clock support registered Apr 12 18:43:13.016264 kernel: PCI: Using ACPI for IRQ routing Apr 12 18:43:13.016272 kernel: PCI: pci_cache_line_size set to 64 bytes Apr 12 18:43:13.016280 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Apr 12 18:43:13.016288 kernel: e820: reserve RAM buffer [mem 0x7ffdd000-0x7fffffff] Apr 12 18:43:13.016296 kernel: clocksource: Switched to clocksource kvm-clock Apr 12 18:43:13.016306 kernel: VFS: Disk quotas dquot_6.6.0 Apr 12 18:43:13.016329 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Apr 12 18:43:13.017361 kernel: pnp: PnP ACPI init Apr 12 18:43:13.017453 kernel: pnp 00:03: [dma 2] Apr 12 18:43:13.017472 kernel: pnp: PnP ACPI: found 5 devices Apr 12 18:43:13.017481 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Apr 12 18:43:13.017489 kernel: NET: Registered PF_INET protocol family Apr 12 18:43:13.017497 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Apr 12 18:43:13.017505 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Apr 12 18:43:13.017513 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Apr 12 18:43:13.017521 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Apr 12 18:43:13.017529 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Apr 12 18:43:13.017539 kernel: TCP: Hash tables configured (established 16384 bind 16384) Apr 12 18:43:13.017547 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Apr 12 18:43:13.017555 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Apr 12 18:43:13.017563 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Apr 12 18:43:13.017571 kernel: NET: Registered PF_XDP protocol family Apr 12 18:43:13.017644 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Apr 12 18:43:13.017715 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Apr 12 18:43:13.017787 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Apr 12 18:43:13.017857 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Apr 12 18:43:13.017932 kernel: pci_bus 0000:00: resource 8 [mem 0x100000000-0x17fffffff window] Apr 12 18:43:13.018014 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Apr 12 18:43:13.018095 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Apr 12 18:43:13.018175 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Apr 12 18:43:13.018187 kernel: PCI: CLS 0 bytes, default 64 Apr 12 18:43:13.018195 kernel: Initialise system trusted keyrings Apr 12 18:43:13.018203 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Apr 12 18:43:13.018214 kernel: Key type asymmetric registered Apr 12 18:43:13.018222 kernel: Asymmetric key parser 'x509' registered Apr 12 18:43:13.018230 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Apr 12 18:43:13.018238 kernel: io scheduler mq-deadline registered Apr 12 18:43:13.018245 kernel: io scheduler kyber registered Apr 12 18:43:13.018253 kernel: io scheduler bfq registered Apr 12 18:43:13.018261 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Apr 12 18:43:13.018269 kernel: ACPI: \_SB_.LNKB: Enabled at IRQ 10 Apr 12 18:43:13.018277 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Apr 12 18:43:13.018285 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Apr 12 18:43:13.018296 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Apr 12 18:43:13.018304 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Apr 12 18:43:13.018312 kernel: 00:00: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Apr 12 18:43:13.018335 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Apr 12 18:43:13.018344 kernel: random: crng init done Apr 12 18:43:13.018351 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Apr 12 18:43:13.018360 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Apr 12 18:43:13.018368 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Apr 12 18:43:13.018469 kernel: rtc_cmos 00:04: RTC can wake from S4 Apr 12 18:43:13.018552 kernel: rtc_cmos 00:04: registered as rtc0 Apr 12 18:43:13.018625 kernel: rtc_cmos 00:04: setting system clock to 2024-04-12T18:43:12 UTC (1712947392) Apr 12 18:43:13.018698 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram Apr 12 18:43:13.018709 kernel: NET: Registered PF_INET6 protocol family Apr 12 18:43:13.018717 kernel: Segment Routing with IPv6 Apr 12 18:43:13.018725 kernel: In-situ OAM (IOAM) with IPv6 Apr 12 18:43:13.018733 kernel: NET: Registered PF_PACKET protocol family Apr 12 18:43:13.018741 kernel: Key type dns_resolver registered Apr 12 18:43:13.018751 kernel: IPI shorthand broadcast: enabled Apr 12 18:43:13.018759 kernel: sched_clock: Marking stable (660591237, 122786578)->(809593512, -26215697) Apr 12 18:43:13.018767 kernel: registered taskstats version 1 Apr 12 18:43:13.018775 kernel: Loading compiled-in X.509 certificates Apr 12 18:43:13.018783 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.154-flatcar: 1fa140a38fc6bd27c8b56127e4d1eb4f665c7ec4' Apr 12 18:43:13.018791 kernel: Key type .fscrypt registered Apr 12 18:43:13.018798 kernel: Key type fscrypt-provisioning registered Apr 12 18:43:13.018806 kernel: ima: No TPM chip found, activating TPM-bypass! Apr 12 18:43:13.018817 kernel: ima: Allocated hash algorithm: sha1 Apr 12 18:43:13.018824 kernel: ima: No architecture policies found Apr 12 18:43:13.018832 kernel: Freeing unused kernel image (initmem) memory: 47440K Apr 12 18:43:13.018840 kernel: Write protecting the kernel read-only data: 28672k Apr 12 18:43:13.018848 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Apr 12 18:43:13.018856 kernel: Freeing unused kernel image (rodata/data gap) memory: 628K Apr 12 18:43:13.018864 kernel: Run /init as init process Apr 12 18:43:13.018872 kernel: with arguments: Apr 12 18:43:13.018879 kernel: /init Apr 12 18:43:13.018890 kernel: with environment: Apr 12 18:43:13.018899 kernel: HOME=/ Apr 12 18:43:13.018906 kernel: TERM=linux Apr 12 18:43:13.018914 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Apr 12 18:43:13.018925 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Apr 12 18:43:13.018936 systemd[1]: Detected virtualization kvm. Apr 12 18:43:13.018944 systemd[1]: Detected architecture x86-64. Apr 12 18:43:13.018953 systemd[1]: Running in initrd. Apr 12 18:43:13.018964 systemd[1]: No hostname configured, using default hostname. Apr 12 18:43:13.018972 systemd[1]: Hostname set to . Apr 12 18:43:13.018981 systemd[1]: Initializing machine ID from VM UUID. Apr 12 18:43:13.018990 systemd[1]: Queued start job for default target initrd.target. Apr 12 18:43:13.018998 systemd[1]: Started systemd-ask-password-console.path. Apr 12 18:43:13.019007 systemd[1]: Reached target cryptsetup.target. Apr 12 18:43:13.019015 systemd[1]: Reached target paths.target. Apr 12 18:43:13.019023 systemd[1]: Reached target slices.target. Apr 12 18:43:13.019034 systemd[1]: Reached target swap.target. Apr 12 18:43:13.019042 systemd[1]: Reached target timers.target. Apr 12 18:43:13.019051 systemd[1]: Listening on iscsid.socket. Apr 12 18:43:13.019059 systemd[1]: Listening on iscsiuio.socket. Apr 12 18:43:13.019068 systemd[1]: Listening on systemd-journald-audit.socket. Apr 12 18:43:13.019076 systemd[1]: Listening on systemd-journald-dev-log.socket. Apr 12 18:43:13.019085 systemd[1]: Listening on systemd-journald.socket. Apr 12 18:43:13.019095 systemd[1]: Listening on systemd-networkd.socket. Apr 12 18:43:13.019103 systemd[1]: Listening on systemd-udevd-control.socket. Apr 12 18:43:13.019112 systemd[1]: Listening on systemd-udevd-kernel.socket. Apr 12 18:43:13.019120 systemd[1]: Reached target sockets.target. Apr 12 18:43:13.019129 systemd[1]: Starting kmod-static-nodes.service... Apr 12 18:43:13.019150 systemd[1]: Finished network-cleanup.service. Apr 12 18:43:13.019162 systemd[1]: Starting systemd-fsck-usr.service... Apr 12 18:43:13.019172 systemd[1]: Starting systemd-journald.service... Apr 12 18:43:13.019180 systemd[1]: Starting systemd-modules-load.service... Apr 12 18:43:13.019189 systemd[1]: Starting systemd-resolved.service... Apr 12 18:43:13.019198 systemd[1]: Starting systemd-vconsole-setup.service... Apr 12 18:43:13.019206 systemd[1]: Finished kmod-static-nodes.service. Apr 12 18:43:13.019215 systemd[1]: Finished systemd-fsck-usr.service. Apr 12 18:43:13.019227 systemd-journald[185]: Journal started Apr 12 18:43:13.019270 systemd-journald[185]: Runtime Journal (/run/log/journal/e7b5e0af35714ffeb24a18c5286283ea) is 4.9M, max 39.5M, 34.5M free. Apr 12 18:43:12.984804 systemd-modules-load[186]: Inserted module 'overlay' Apr 12 18:43:13.047670 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Apr 12 18:43:13.033891 systemd-resolved[187]: Positive Trust Anchors: Apr 12 18:43:13.053344 systemd[1]: Started systemd-journald.service. Apr 12 18:43:13.053375 kernel: audit: type=1130 audit(1712947393.047:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.033901 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Apr 12 18:43:13.033937 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Apr 12 18:43:13.068055 kernel: Bridge firewalling registered Apr 12 18:43:13.068074 kernel: audit: type=1130 audit(1712947393.057:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.068086 kernel: audit: type=1130 audit(1712947393.058:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.036649 systemd-resolved[187]: Defaulting to hostname 'linux'. Apr 12 18:43:13.054806 systemd-modules-load[186]: Inserted module 'br_netfilter' Apr 12 18:43:13.058065 systemd[1]: Started systemd-resolved.service. Apr 12 18:43:13.061879 systemd[1]: Finished systemd-vconsole-setup.service. Apr 12 18:43:13.062465 systemd[1]: Reached target nss-lookup.target. Apr 12 18:43:13.079560 kernel: audit: type=1130 audit(1712947393.061:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.061000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.066955 systemd[1]: Starting dracut-cmdline-ask.service... Apr 12 18:43:13.069423 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Apr 12 18:43:13.079297 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Apr 12 18:43:13.085667 kernel: audit: type=1130 audit(1712947393.081:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.081000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.093202 kernel: SCSI subsystem initialized Apr 12 18:43:13.088881 systemd[1]: Finished dracut-cmdline-ask.service. Apr 12 18:43:13.090229 systemd[1]: Starting dracut-cmdline.service... Apr 12 18:43:13.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.098468 kernel: audit: type=1130 audit(1712947393.089:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.103378 dracut-cmdline[202]: dracut-dracut-053 Apr 12 18:43:13.106458 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Apr 12 18:43:13.106484 kernel: device-mapper: uevent: version 1.0.3 Apr 12 18:43:13.106495 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Apr 12 18:43:13.106736 dracut-cmdline[202]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=openstack verity.usrhash=189121f7c8c0a24098d3bb1e040d34611f7c276be43815ff7fe409fce185edaf Apr 12 18:43:13.112146 systemd-modules-load[186]: Inserted module 'dm_multipath' Apr 12 18:43:13.113000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.113270 systemd[1]: Finished systemd-modules-load.service. Apr 12 18:43:13.118416 kernel: audit: type=1130 audit(1712947393.113:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.118881 systemd[1]: Starting systemd-sysctl.service... Apr 12 18:43:13.128297 systemd[1]: Finished systemd-sysctl.service. Apr 12 18:43:13.132557 kernel: audit: type=1130 audit(1712947393.128:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.188366 kernel: Loading iSCSI transport class v2.0-870. Apr 12 18:43:13.209351 kernel: iscsi: registered transport (tcp) Apr 12 18:43:13.235458 kernel: iscsi: registered transport (qla4xxx) Apr 12 18:43:13.235525 kernel: QLogic iSCSI HBA Driver Apr 12 18:43:13.284415 systemd[1]: Finished dracut-cmdline.service. Apr 12 18:43:13.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.286915 systemd[1]: Starting dracut-pre-udev.service... Apr 12 18:43:13.291418 kernel: audit: type=1130 audit(1712947393.285:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.372459 kernel: raid6: sse2x4 gen() 9024 MB/s Apr 12 18:43:13.389423 kernel: raid6: sse2x4 xor() 4923 MB/s Apr 12 18:43:13.406427 kernel: raid6: sse2x2 gen() 13059 MB/s Apr 12 18:43:13.423439 kernel: raid6: sse2x2 xor() 8804 MB/s Apr 12 18:43:13.440417 kernel: raid6: sse2x1 gen() 11104 MB/s Apr 12 18:43:13.458355 kernel: raid6: sse2x1 xor() 6665 MB/s Apr 12 18:43:13.458428 kernel: raid6: using algorithm sse2x2 gen() 13059 MB/s Apr 12 18:43:13.458456 kernel: raid6: .... xor() 8804 MB/s, rmw enabled Apr 12 18:43:13.459379 kernel: raid6: using ssse3x2 recovery algorithm Apr 12 18:43:13.474416 kernel: xor: measuring software checksum speed Apr 12 18:43:13.477028 kernel: prefetch64-sse : 18289 MB/sec Apr 12 18:43:13.477075 kernel: generic_sse : 16672 MB/sec Apr 12 18:43:13.477101 kernel: xor: using function: prefetch64-sse (18289 MB/sec) Apr 12 18:43:13.592385 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Apr 12 18:43:13.609469 systemd[1]: Finished dracut-pre-udev.service. Apr 12 18:43:13.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.612000 audit: BPF prog-id=7 op=LOAD Apr 12 18:43:13.612000 audit: BPF prog-id=8 op=LOAD Apr 12 18:43:13.613373 systemd[1]: Starting systemd-udevd.service... Apr 12 18:43:13.631465 systemd-udevd[386]: Using default interface naming scheme 'v252'. Apr 12 18:43:13.645000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.645044 systemd[1]: Started systemd-udevd.service. Apr 12 18:43:13.646469 systemd[1]: Starting dracut-pre-trigger.service... Apr 12 18:43:13.663080 dracut-pre-trigger[389]: rd.md=0: removing MD RAID activation Apr 12 18:43:13.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.721277 systemd[1]: Finished dracut-pre-trigger.service. Apr 12 18:43:13.723802 systemd[1]: Starting systemd-udev-trigger.service... Apr 12 18:43:13.762461 systemd[1]: Finished systemd-udev-trigger.service. Apr 12 18:43:13.764000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:13.842350 kernel: virtio_blk virtio2: [vda] 41943040 512-byte logical blocks (21.5 GB/20.0 GiB) Apr 12 18:43:13.852359 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Apr 12 18:43:13.852387 kernel: GPT:17805311 != 41943039 Apr 12 18:43:13.852398 kernel: GPT:Alternate GPT header not at the end of the disk. Apr 12 18:43:13.852408 kernel: GPT:17805311 != 41943039 Apr 12 18:43:13.852418 kernel: GPT: Use GNU Parted to correct GPT errors. Apr 12 18:43:13.852428 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Apr 12 18:43:13.871352 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (434) Apr 12 18:43:13.883082 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Apr 12 18:43:13.931442 kernel: libata version 3.00 loaded. Apr 12 18:43:13.931467 kernel: ata_piix 0000:00:01.1: version 2.13 Apr 12 18:43:13.931617 kernel: scsi host0: ata_piix Apr 12 18:43:13.931730 kernel: scsi host1: ata_piix Apr 12 18:43:13.931837 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc120 irq 14 Apr 12 18:43:13.931849 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc128 irq 15 Apr 12 18:43:13.935146 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Apr 12 18:43:13.936276 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Apr 12 18:43:13.941558 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Apr 12 18:43:13.946405 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Apr 12 18:43:13.949298 systemd[1]: Starting disk-uuid.service... Apr 12 18:43:13.959957 disk-uuid[461]: Primary Header is updated. Apr 12 18:43:13.959957 disk-uuid[461]: Secondary Entries is updated. Apr 12 18:43:13.959957 disk-uuid[461]: Secondary Header is updated. Apr 12 18:43:13.970360 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Apr 12 18:43:13.979389 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Apr 12 18:43:14.987374 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Apr 12 18:43:14.987731 disk-uuid[462]: The operation has completed successfully. Apr 12 18:43:15.056084 systemd[1]: disk-uuid.service: Deactivated successfully. Apr 12 18:43:15.057674 systemd[1]: Finished disk-uuid.service. Apr 12 18:43:15.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.085499 systemd[1]: Starting verity-setup.service... Apr 12 18:43:15.115433 kernel: device-mapper: verity: sha256 using implementation "sha256-ssse3" Apr 12 18:43:15.207842 systemd[1]: Found device dev-mapper-usr.device. Apr 12 18:43:15.211198 systemd[1]: Mounting sysusr-usr.mount... Apr 12 18:43:15.212795 systemd[1]: Finished verity-setup.service. Apr 12 18:43:15.215000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.372352 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Apr 12 18:43:15.373285 systemd[1]: Mounted sysusr-usr.mount. Apr 12 18:43:15.374668 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Apr 12 18:43:15.376285 systemd[1]: Starting ignition-setup.service... Apr 12 18:43:15.379430 systemd[1]: Starting parse-ip-for-networkd.service... Apr 12 18:43:15.395790 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Apr 12 18:43:15.395869 kernel: BTRFS info (device vda6): using free space tree Apr 12 18:43:15.395882 kernel: BTRFS info (device vda6): has skinny extents Apr 12 18:43:15.413463 systemd[1]: mnt-oem.mount: Deactivated successfully. Apr 12 18:43:15.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.429091 systemd[1]: Finished ignition-setup.service. Apr 12 18:43:15.430686 systemd[1]: Starting ignition-fetch-offline.service... Apr 12 18:43:15.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.527000 audit: BPF prog-id=9 op=LOAD Apr 12 18:43:15.526071 systemd[1]: Finished parse-ip-for-networkd.service. Apr 12 18:43:15.530676 systemd[1]: Starting systemd-networkd.service... Apr 12 18:43:15.557466 systemd-networkd[634]: lo: Link UP Apr 12 18:43:15.557481 systemd-networkd[634]: lo: Gained carrier Apr 12 18:43:15.557967 systemd-networkd[634]: Enumeration completed Apr 12 18:43:15.558202 systemd-networkd[634]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Apr 12 18:43:15.559499 systemd-networkd[634]: eth0: Link UP Apr 12 18:43:15.559504 systemd-networkd[634]: eth0: Gained carrier Apr 12 18:43:15.560533 systemd[1]: Started systemd-networkd.service. Apr 12 18:43:15.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.562360 systemd[1]: Reached target network.target. Apr 12 18:43:15.563949 systemd[1]: Starting iscsiuio.service... Apr 12 18:43:15.573049 systemd[1]: Started iscsiuio.service. Apr 12 18:43:15.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.574441 systemd[1]: Starting iscsid.service... Apr 12 18:43:15.576798 systemd-networkd[634]: eth0: DHCPv4 address 172.24.4.238/24, gateway 172.24.4.1 acquired from 172.24.4.1 Apr 12 18:43:15.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.582167 iscsid[640]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Apr 12 18:43:15.582167 iscsid[640]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Apr 12 18:43:15.582167 iscsid[640]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Apr 12 18:43:15.582167 iscsid[640]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Apr 12 18:43:15.582167 iscsid[640]: If using hardware iscsi like qla4xxx this message can be ignored. Apr 12 18:43:15.582167 iscsid[640]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Apr 12 18:43:15.582167 iscsid[640]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Apr 12 18:43:15.579377 systemd[1]: Started iscsid.service. Apr 12 18:43:15.582962 systemd[1]: Starting dracut-initqueue.service... Apr 12 18:43:15.593515 systemd[1]: Finished dracut-initqueue.service. Apr 12 18:43:15.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.595197 systemd[1]: Reached target remote-fs-pre.target. Apr 12 18:43:15.595701 systemd[1]: Reached target remote-cryptsetup.target. Apr 12 18:43:15.596797 systemd[1]: Reached target remote-fs.target. Apr 12 18:43:15.599594 systemd[1]: Starting dracut-pre-mount.service... Apr 12 18:43:15.609551 systemd[1]: Finished dracut-pre-mount.service. Apr 12 18:43:15.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.712085 ignition[549]: Ignition 2.14.0 Apr 12 18:43:15.712116 ignition[549]: Stage: fetch-offline Apr 12 18:43:15.712226 ignition[549]: reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:43:15.712377 ignition[549]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Apr 12 18:43:15.714560 ignition[549]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Apr 12 18:43:15.714787 ignition[549]: parsed url from cmdline: "" Apr 12 18:43:15.717982 systemd[1]: Finished ignition-fetch-offline.service. Apr 12 18:43:15.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:15.714800 ignition[549]: no config URL provided Apr 12 18:43:15.714813 ignition[549]: reading system config file "/usr/lib/ignition/user.ign" Apr 12 18:43:15.721820 systemd[1]: Starting ignition-fetch.service... Apr 12 18:43:15.714833 ignition[549]: no config at "/usr/lib/ignition/user.ign" Apr 12 18:43:15.714847 ignition[549]: failed to fetch config: resource requires networking Apr 12 18:43:15.715852 ignition[549]: Ignition finished successfully Apr 12 18:43:15.740936 ignition[655]: Ignition 2.14.0 Apr 12 18:43:15.740964 ignition[655]: Stage: fetch Apr 12 18:43:15.741200 ignition[655]: reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:43:15.741245 ignition[655]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Apr 12 18:43:15.743538 ignition[655]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Apr 12 18:43:15.743761 ignition[655]: parsed url from cmdline: "" Apr 12 18:43:15.743771 ignition[655]: no config URL provided Apr 12 18:43:15.743784 ignition[655]: reading system config file "/usr/lib/ignition/user.ign" Apr 12 18:43:15.743804 ignition[655]: no config at "/usr/lib/ignition/user.ign" Apr 12 18:43:15.749223 ignition[655]: config drive ("/dev/disk/by-label/config-2") not found. Waiting... Apr 12 18:43:15.749289 ignition[655]: GET http://169.254.169.254/openstack/latest/user_data: attempt #1 Apr 12 18:43:15.749548 ignition[655]: config drive ("/dev/disk/by-label/CONFIG-2") not found. Waiting... Apr 12 18:43:15.963064 ignition[655]: GET result: OK Apr 12 18:43:15.963428 ignition[655]: parsing config with SHA512: 4c37ce49ac5d043fac29c9a61a0c4d0040a8ab9aa499a112b1acf76b9ceeb704d73b5ad6718ce9cbb53fefd4255d516744ec95d0724a0c7e618a9def359cb3ca Apr 12 18:43:16.081028 unknown[655]: fetched base config from "system" Apr 12 18:43:16.081065 unknown[655]: fetched base config from "system" Apr 12 18:43:16.081082 unknown[655]: fetched user config from "openstack" Apr 12 18:43:16.082720 ignition[655]: fetch: fetch complete Apr 12 18:43:16.082733 ignition[655]: fetch: fetch passed Apr 12 18:43:16.086355 systemd[1]: Finished ignition-fetch.service. Apr 12 18:43:16.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:16.082827 ignition[655]: Ignition finished successfully Apr 12 18:43:16.090625 systemd[1]: Starting ignition-kargs.service... Apr 12 18:43:16.113534 ignition[661]: Ignition 2.14.0 Apr 12 18:43:16.113561 ignition[661]: Stage: kargs Apr 12 18:43:16.113817 ignition[661]: reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:43:16.113863 ignition[661]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Apr 12 18:43:16.116151 ignition[661]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Apr 12 18:43:16.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:16.128862 systemd[1]: Finished ignition-kargs.service. Apr 12 18:43:16.119738 ignition[661]: kargs: kargs passed Apr 12 18:43:16.119834 ignition[661]: Ignition finished successfully Apr 12 18:43:16.133136 systemd[1]: Starting ignition-disks.service... Apr 12 18:43:16.140033 ignition[667]: Ignition 2.14.0 Apr 12 18:43:16.140047 ignition[667]: Stage: disks Apr 12 18:43:16.140163 ignition[667]: reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:43:16.140186 ignition[667]: parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Apr 12 18:43:16.141130 ignition[667]: no config dir at "/usr/lib/ignition/base.platform.d/openstack" Apr 12 18:43:16.147183 ignition[667]: disks: disks passed Apr 12 18:43:16.147258 ignition[667]: Ignition finished successfully Apr 12 18:43:16.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:16.148622 systemd[1]: Finished ignition-disks.service. Apr 12 18:43:16.150009 systemd[1]: Reached target initrd-root-device.target. Apr 12 18:43:16.151468 systemd[1]: Reached target local-fs-pre.target. Apr 12 18:43:16.152925 systemd[1]: Reached target local-fs.target. Apr 12 18:43:16.154429 systemd[1]: Reached target sysinit.target. Apr 12 18:43:16.155832 systemd[1]: Reached target basic.target. Apr 12 18:43:16.159085 systemd[1]: Starting systemd-fsck-root.service... Apr 12 18:43:16.177606 systemd-fsck[675]: ROOT: clean, 612/1628000 files, 124056/1617920 blocks Apr 12 18:43:16.191733 systemd[1]: Finished systemd-fsck-root.service. Apr 12 18:43:16.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:16.193764 systemd[1]: Mounting sysroot.mount... Apr 12 18:43:16.211410 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Apr 12 18:43:16.211064 systemd[1]: Mounted sysroot.mount. Apr 12 18:43:16.211599 systemd[1]: Reached target initrd-root-fs.target. Apr 12 18:43:16.213496 systemd[1]: Mounting sysroot-usr.mount... Apr 12 18:43:16.215178 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Apr 12 18:43:16.216391 systemd[1]: Starting flatcar-openstack-hostname.service... Apr 12 18:43:16.224280 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Apr 12 18:43:16.226505 systemd[1]: Reached target ignition-diskful.target. Apr 12 18:43:16.234170 systemd[1]: Mounted sysroot-usr.mount. Apr 12 18:43:16.237624 systemd[1]: Starting initrd-setup-root.service... Apr 12 18:43:16.250086 systemd[1]: Mounting sysroot-usr-share-oem.mount... Apr 12 18:43:16.261433 initrd-setup-root[687]: cut: /sysroot/etc/passwd: No such file or directory Apr 12 18:43:16.278616 initrd-setup-root[695]: cut: /sysroot/etc/group: No such file or directory Apr 12 18:43:16.283636 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (685) Apr 12 18:43:16.287368 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Apr 12 18:43:16.287447 kernel: BTRFS info (device vda6): using free space tree Apr 12 18:43:16.287475 kernel: BTRFS info (device vda6): has skinny extents Apr 12 18:43:16.290691 initrd-setup-root[703]: cut: /sysroot/etc/shadow: No such file or directory Apr 12 18:43:16.300479 initrd-setup-root[727]: cut: /sysroot/etc/gshadow: No such file or directory Apr 12 18:43:16.307766 systemd[1]: Mounted sysroot-usr-share-oem.mount. Apr 12 18:43:16.376000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:16.376029 systemd[1]: Finished initrd-setup-root.service. Apr 12 18:43:16.377989 systemd[1]: Starting ignition-mount.service... Apr 12 18:43:16.379665 systemd[1]: Starting sysroot-boot.service... Apr 12 18:43:16.393955 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Apr 12 18:43:16.394074 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Apr 12 18:43:16.435336 ignition[751]: INFO : Ignition 2.14.0 Apr 12 18:43:16.435336 ignition[751]: INFO : Stage: mount Apr 12 18:43:16.435336 ignition[751]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:43:16.435336 ignition[751]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Apr 12 18:43:16.435336 ignition[751]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Apr 12 18:43:16.441446 ignition[751]: INFO : mount: mount passed Apr 12 18:43:16.441446 ignition[751]: INFO : Ignition finished successfully Apr 12 18:43:16.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:16.443463 systemd[1]: Finished ignition-mount.service. Apr 12 18:43:16.449438 coreos-metadata[681]: Apr 12 18:43:16.449 INFO Fetching http://169.254.169.254/latest/meta-data/hostname: Attempt #1 Apr 12 18:43:16.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:16.457381 systemd[1]: Finished sysroot-boot.service. Apr 12 18:43:16.466170 coreos-metadata[681]: Apr 12 18:43:16.466 INFO Fetch successful Apr 12 18:43:16.466853 coreos-metadata[681]: Apr 12 18:43:16.466 INFO wrote hostname ci-3510-3-3-9-b9e221dcee.novalocal to /sysroot/etc/hostname Apr 12 18:43:16.470888 systemd[1]: flatcar-openstack-hostname.service: Deactivated successfully. Apr 12 18:43:16.471011 systemd[1]: Finished flatcar-openstack-hostname.service. Apr 12 18:43:16.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:16.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=flatcar-openstack-hostname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:43:16.473225 systemd[1]: Starting ignition-files.service... Apr 12 18:43:16.481496 systemd[1]: Mounting sysroot-usr-share-oem.mount... Apr 12 18:43:16.491351 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/vda6 scanned by mount (760) Apr 12 18:43:16.496257 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Apr 12 18:43:16.496290 kernel: BTRFS info (device vda6): using free space tree Apr 12 18:43:16.496302 kernel: BTRFS info (device vda6): has skinny extents Apr 12 18:43:16.506360 systemd[1]: Mounted sysroot-usr-share-oem.mount. Apr 12 18:43:16.517223 systemd-resolved[187]: Detected conflict on linux IN A 172.24.4.238 Apr 12 18:43:16.517245 systemd-resolved[187]: Hostname conflict, changing published hostname from 'linux' to 'linux3'. Apr 12 18:43:16.518785 ignition[779]: INFO : Ignition 2.14.0 Apr 12 18:43:16.518785 ignition[779]: INFO : Stage: files Apr 12 18:43:16.518785 ignition[779]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:43:16.518785 ignition[779]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Apr 12 18:43:16.521785 ignition[779]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Apr 12 18:43:16.527126 ignition[779]: DEBUG : files: compiled without relabeling support, skipping Apr 12 18:43:16.529233 ignition[779]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Apr 12 18:43:16.529233 ignition[779]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Apr 12 18:43:16.535962 ignition[779]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Apr 12 18:43:16.536674 ignition[779]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Apr 12 18:43:16.537536 unknown[779]: wrote ssh authorized keys file for user: core Apr 12 18:43:16.538233 ignition[779]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Apr 12 18:43:16.539004 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Apr 12 18:43:16.539004 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Apr 12 18:43:17.041755 systemd-networkd[634]: eth0: Gained IPv6LL Apr 12 18:43:17.214740 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Apr 12 18:43:18.093485 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Apr 12 18:43:18.097178 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Apr 12 18:43:18.097178 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Apr 12 18:43:18.097178 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Apr 12 18:43:18.632684 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Apr 12 18:43:19.115754 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Apr 12 18:43:19.115754 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Apr 12 18:43:19.122486 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Apr 12 18:43:19.122486 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Apr 12 18:43:19.830200 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Apr 12 18:43:20.148438 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Apr 12 18:43:20.151237 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubeadm" Apr 12 18:43:20.151237 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://dl.k8s.io/release/v1.28.1/bin/linux/amd64/kubeadm: attempt #1 Apr 12 18:43:20.752960 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Apr 12 18:43:51.387555 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: f4daad200c8378dfdc6cb69af28eaca4215f2b4a2dbdf75f29f9210171cb5683bc873fc000319022e6b3ad61175475d77190734713ba9136644394e8a8faafa1 Apr 12 18:43:51.391696 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubeadm" Apr 12 18:43:51.391696 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubelet" Apr 12 18:43:51.391696 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://dl.k8s.io/release/v1.28.1/bin/linux/amd64/kubelet: attempt #1 Apr 12 18:43:52.172618 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Apr 12 18:44:57.093877 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: ce6ba764274162d38ac1c44e1fb1f0f835346f3afc5b508bb755b1b7d7170910f5812b0a1941b32e29d950e905bbd08ae761c87befad921db4d44969c8562e75 Apr 12 18:44:57.093877 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubelet" Apr 12 18:44:57.101778 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubectl" Apr 12 18:44:57.101778 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET https://dl.k8s.io/release/v1.28.1/bin/linux/amd64/kubectl: attempt #1 Apr 12 18:44:57.871229 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET result: OK Apr 12 18:45:26.193516 ignition[779]: DEBUG : files: createFilesystemsFiles: createFiles: op(8): file matches expected sum of: 33cf3f6e37bcee4dff7ce14ab933c605d07353d4e31446dd2b52c3f05e0b150b60e531f6069f112d8a76331322a72b593537531e62104cfc7c70cb03d46f76b3 Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubectl" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/docker/daemon.json" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/docker/daemon.json" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/flatcar/update.conf" Apr 12 18:45:26.197775 ignition[779]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/flatcar/update.conf" Apr 12 18:45:26.197775 ignition[779]: INFO : files: op(f): [started] processing unit "coreos-metadata-sshkeys@.service" Apr 12 18:45:26.197775 ignition[779]: INFO : files: op(f): op(10): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Apr 12 18:45:26.285922 kernel: kauditd_printk_skb: 27 callbacks suppressed Apr 12 18:45:26.285970 kernel: audit: type=1130 audit(1712947526.221:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.286002 kernel: audit: type=1130 audit(1712947526.246:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.286030 kernel: audit: type=1131 audit(1712947526.246:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.286069 kernel: audit: type=1130 audit(1712947526.267:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(f): op(10): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata-sshkeys@.service.d/20-clct-provider-override.conf" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(f): [finished] processing unit "coreos-metadata-sshkeys@.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(11): [started] processing unit "coreos-metadata.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(11): op(12): [started] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(11): op(12): [finished] writing systemd drop-in "20-clct-provider-override.conf" at "/sysroot/etc/systemd/system/coreos-metadata.service.d/20-clct-provider-override.conf" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(11): [finished] processing unit "coreos-metadata.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(13): [started] processing unit "prepare-cni-plugins.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(13): op(14): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(13): op(14): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(13): [finished] processing unit "prepare-cni-plugins.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(15): [started] processing unit "prepare-critools.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(15): op(16): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(15): op(16): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(15): [finished] processing unit "prepare-critools.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(17): [started] processing unit "prepare-helm.service" Apr 12 18:45:26.286447 ignition[779]: INFO : files: op(17): op(18): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Apr 12 18:45:26.316336 kernel: audit: type=1130 audit(1712947526.303:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.316359 kernel: audit: type=1131 audit(1712947526.303:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.216768 systemd[1]: Finished ignition-files.service. Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(17): op(18): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(17): [finished] processing unit "prepare-helm.service" Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(19): [started] setting preset to enabled for "prepare-helm.service" Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-helm.service" Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(1a): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(1a): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Apr 12 18:45:26.317913 ignition[779]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Apr 12 18:45:26.317913 ignition[779]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Apr 12 18:45:26.317913 ignition[779]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Apr 12 18:45:26.317913 ignition[779]: INFO : files: files passed Apr 12 18:45:26.317913 ignition[779]: INFO : Ignition finished successfully Apr 12 18:45:26.226527 systemd[1]: Starting initrd-setup-root-after-ignition.service... Apr 12 18:45:26.329908 initrd-setup-root-after-ignition[804]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Apr 12 18:45:26.235180 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Apr 12 18:45:26.237981 systemd[1]: Starting ignition-quench.service... Apr 12 18:45:26.245171 systemd[1]: ignition-quench.service: Deactivated successfully. Apr 12 18:45:26.245407 systemd[1]: Finished ignition-quench.service. Apr 12 18:45:26.255648 systemd[1]: Finished initrd-setup-root-after-ignition.service. Apr 12 18:45:26.268202 systemd[1]: Reached target ignition-complete.target. Apr 12 18:45:26.270713 systemd[1]: Starting initrd-parse-etc.service... Apr 12 18:45:26.302757 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Apr 12 18:45:26.302947 systemd[1]: Finished initrd-parse-etc.service. Apr 12 18:45:26.345295 kernel: audit: type=1130 audit(1712947526.339:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.304493 systemd[1]: Reached target initrd-fs.target. Apr 12 18:45:26.313010 systemd[1]: Reached target initrd.target. Apr 12 18:45:26.314746 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Apr 12 18:45:26.316213 systemd[1]: Starting dracut-pre-pivot.service... Apr 12 18:45:26.339820 systemd[1]: Finished dracut-pre-pivot.service. Apr 12 18:45:26.341012 systemd[1]: Starting initrd-cleanup.service... Apr 12 18:45:26.354444 systemd[1]: initrd-cleanup.service: Deactivated successfully. Apr 12 18:45:26.354554 systemd[1]: Finished initrd-cleanup.service. Apr 12 18:45:26.362840 kernel: audit: type=1130 audit(1712947526.355:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.362863 kernel: audit: type=1131 audit(1712947526.355:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.356396 systemd[1]: Stopped target nss-lookup.target. Apr 12 18:45:26.363332 systemd[1]: Stopped target remote-cryptsetup.target. Apr 12 18:45:26.364367 systemd[1]: Stopped target timers.target. Apr 12 18:45:26.365356 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Apr 12 18:45:26.370197 kernel: audit: type=1131 audit(1712947526.365:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.365415 systemd[1]: Stopped dracut-pre-pivot.service. Apr 12 18:45:26.366358 systemd[1]: Stopped target initrd.target. Apr 12 18:45:26.370648 systemd[1]: Stopped target basic.target. Apr 12 18:45:26.371602 systemd[1]: Stopped target ignition-complete.target. Apr 12 18:45:26.372561 systemd[1]: Stopped target ignition-diskful.target. Apr 12 18:45:26.373475 systemd[1]: Stopped target initrd-root-device.target. Apr 12 18:45:26.374439 systemd[1]: Stopped target remote-fs.target. Apr 12 18:45:26.375374 systemd[1]: Stopped target remote-fs-pre.target. Apr 12 18:45:26.376374 systemd[1]: Stopped target sysinit.target. Apr 12 18:45:26.377271 systemd[1]: Stopped target local-fs.target. Apr 12 18:45:26.378192 systemd[1]: Stopped target local-fs-pre.target. Apr 12 18:45:26.379188 systemd[1]: Stopped target swap.target. Apr 12 18:45:26.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.380143 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Apr 12 18:45:26.380193 systemd[1]: Stopped dracut-pre-mount.service. Apr 12 18:45:26.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.381170 systemd[1]: Stopped target cryptsetup.target. Apr 12 18:45:26.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.382022 systemd[1]: dracut-initqueue.service: Deactivated successfully. Apr 12 18:45:26.384000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.382092 systemd[1]: Stopped dracut-initqueue.service. Apr 12 18:45:26.383131 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Apr 12 18:45:26.390000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.392000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.393000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.398000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.398982 iscsid[640]: iscsid shutting down. Apr 12 18:45:26.383172 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Apr 12 18:45:26.400186 ignition[817]: INFO : Ignition 2.14.0 Apr 12 18:45:26.400186 ignition[817]: INFO : Stage: umount Apr 12 18:45:26.400186 ignition[817]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Apr 12 18:45:26.400186 ignition[817]: DEBUG : parsing config with SHA512: ce918cf8568bff1426dda9ea05b778568a1626fcf4c1bded9ebe13fee104bc1b92fac5f7093a3bfc7d99777c3793d01249c863845c2ca48413d9477d40af178a Apr 12 18:45:26.384038 systemd[1]: ignition-files.service: Deactivated successfully. Apr 12 18:45:26.405648 ignition[817]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/openstack" Apr 12 18:45:26.384078 systemd[1]: Stopped ignition-files.service. Apr 12 18:45:26.385707 systemd[1]: Stopping ignition-mount.service... Apr 12 18:45:26.386661 systemd[1]: Stopping iscsid.service... Apr 12 18:45:26.390043 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Apr 12 18:45:26.390114 systemd[1]: Stopped kmod-static-nodes.service. Apr 12 18:45:26.391355 systemd[1]: Stopping sysroot-boot.service... Apr 12 18:45:26.391815 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Apr 12 18:45:26.410000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.412000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.414413 ignition[817]: INFO : umount: umount passed Apr 12 18:45:26.414413 ignition[817]: INFO : Ignition finished successfully Apr 12 18:45:26.391883 systemd[1]: Stopped systemd-udev-trigger.service. Apr 12 18:45:26.392422 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Apr 12 18:45:26.392460 systemd[1]: Stopped dracut-pre-trigger.service. Apr 12 18:45:26.393299 systemd[1]: iscsid.service: Deactivated successfully. Apr 12 18:45:26.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.393430 systemd[1]: Stopped iscsid.service. Apr 12 18:45:26.394000 systemd[1]: Stopping iscsiuio.service... Apr 12 18:45:26.425000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.397798 systemd[1]: iscsiuio.service: Deactivated successfully. Apr 12 18:45:26.397892 systemd[1]: Stopped iscsiuio.service. Apr 12 18:45:26.410209 systemd[1]: ignition-mount.service: Deactivated successfully. Apr 12 18:45:26.427000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.410331 systemd[1]: Stopped ignition-mount.service. Apr 12 18:45:26.411143 systemd[1]: ignition-disks.service: Deactivated successfully. Apr 12 18:45:26.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.411185 systemd[1]: Stopped ignition-disks.service. Apr 12 18:45:26.411783 systemd[1]: ignition-kargs.service: Deactivated successfully. Apr 12 18:45:26.411821 systemd[1]: Stopped ignition-kargs.service. Apr 12 18:45:26.412268 systemd[1]: ignition-fetch.service: Deactivated successfully. Apr 12 18:45:26.412303 systemd[1]: Stopped ignition-fetch.service. Apr 12 18:45:26.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.412767 systemd[1]: Stopped target network.target. Apr 12 18:45:26.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.413247 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Apr 12 18:45:26.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.413286 systemd[1]: Stopped ignition-fetch-offline.service. Apr 12 18:45:26.413770 systemd[1]: Stopped target paths.target. Apr 12 18:45:26.414177 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Apr 12 18:45:26.417449 systemd[1]: Stopped systemd-ask-password-console.path. Apr 12 18:45:26.418143 systemd[1]: Stopped target slices.target. Apr 12 18:45:26.441000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.418560 systemd[1]: Stopped target sockets.target. Apr 12 18:45:26.419004 systemd[1]: iscsid.socket: Deactivated successfully. Apr 12 18:45:26.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.419041 systemd[1]: Closed iscsid.socket. Apr 12 18:45:26.445000 audit: BPF prog-id=6 op=UNLOAD Apr 12 18:45:26.419692 systemd[1]: iscsiuio.socket: Deactivated successfully. Apr 12 18:45:26.419722 systemd[1]: Closed iscsiuio.socket. Apr 12 18:45:26.420186 systemd[1]: ignition-setup.service: Deactivated successfully. Apr 12 18:45:26.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.420223 systemd[1]: Stopped ignition-setup.service. Apr 12 18:45:26.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.420840 systemd[1]: Stopping systemd-networkd.service... Apr 12 18:45:26.450000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.421506 systemd[1]: Stopping systemd-resolved.service... Apr 12 18:45:26.423191 systemd[1]: sysroot-boot.mount: Deactivated successfully. Apr 12 18:45:26.424380 systemd-networkd[634]: eth0: DHCPv6 lease lost Apr 12 18:45:26.458000 audit: BPF prog-id=9 op=UNLOAD Apr 12 18:45:26.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.424495 systemd[1]: sysroot-boot.service: Deactivated successfully. Apr 12 18:45:26.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.424575 systemd[1]: Stopped sysroot-boot.service. Apr 12 18:45:26.461000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:26.426361 systemd[1]: systemd-networkd.service: Deactivated successfully. Apr 12 18:45:26.426484 systemd[1]: Stopped systemd-networkd.service. Apr 12 18:45:26.427825 systemd[1]: systemd-networkd.socket: Deactivated successfully. Apr 12 18:45:26.427857 systemd[1]: Closed systemd-networkd.socket. Apr 12 18:45:26.428820 systemd[1]: initrd-setup-root.service: Deactivated successfully. Apr 12 18:45:26.428872 systemd[1]: Stopped initrd-setup-root.service. Apr 12 18:45:26.430713 systemd[1]: Stopping network-cleanup.service... Apr 12 18:45:26.432445 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Apr 12 18:45:26.432528 systemd[1]: Stopped parse-ip-for-networkd.service. Apr 12 18:45:26.435076 systemd[1]: systemd-sysctl.service: Deactivated successfully. Apr 12 18:45:26.435147 systemd[1]: Stopped systemd-sysctl.service. Apr 12 18:45:26.436029 systemd[1]: systemd-modules-load.service: Deactivated successfully. Apr 12 18:45:26.436071 systemd[1]: Stopped systemd-modules-load.service. Apr 12 18:45:26.437012 systemd[1]: Stopping systemd-udevd.service... Apr 12 18:45:26.439227 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Apr 12 18:45:26.439870 systemd[1]: systemd-resolved.service: Deactivated successfully. Apr 12 18:45:26.439982 systemd[1]: Stopped systemd-resolved.service. Apr 12 18:45:26.443299 systemd[1]: systemd-udevd.service: Deactivated successfully. Apr 12 18:45:26.443513 systemd[1]: Stopped systemd-udevd.service. Apr 12 18:45:26.445665 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Apr 12 18:45:26.445709 systemd[1]: Closed systemd-udevd-control.socket. Apr 12 18:45:26.447181 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Apr 12 18:45:26.447235 systemd[1]: Closed systemd-udevd-kernel.socket. Apr 12 18:45:26.448274 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Apr 12 18:45:26.448351 systemd[1]: Stopped dracut-pre-udev.service. Apr 12 18:45:26.449191 systemd[1]: dracut-cmdline.service: Deactivated successfully. Apr 12 18:45:26.449236 systemd[1]: Stopped dracut-cmdline.service. Apr 12 18:45:26.450092 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Apr 12 18:45:26.450128 systemd[1]: Stopped dracut-cmdline-ask.service. Apr 12 18:45:26.451741 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Apr 12 18:45:26.452522 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Apr 12 18:45:26.452582 systemd[1]: Stopped systemd-vconsole-setup.service. Apr 12 18:45:26.459917 systemd[1]: network-cleanup.service: Deactivated successfully. Apr 12 18:45:26.460016 systemd[1]: Stopped network-cleanup.service. Apr 12 18:45:26.460679 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Apr 12 18:45:26.460778 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Apr 12 18:45:26.461649 systemd[1]: Reached target initrd-switch-root.target. Apr 12 18:45:26.467424 systemd[1]: Starting initrd-switch-root.service... Apr 12 18:45:26.483941 systemd[1]: Switching root. Apr 12 18:45:26.506814 systemd-journald[185]: Journal stopped Apr 12 18:45:32.428753 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Apr 12 18:45:32.428810 kernel: SELinux: Class mctp_socket not defined in policy. Apr 12 18:45:32.428830 kernel: SELinux: Class anon_inode not defined in policy. Apr 12 18:45:32.428843 kernel: SELinux: the above unknown classes and permissions will be allowed Apr 12 18:45:32.428855 kernel: SELinux: policy capability network_peer_controls=1 Apr 12 18:45:32.428868 kernel: SELinux: policy capability open_perms=1 Apr 12 18:45:32.428880 kernel: SELinux: policy capability extended_socket_class=1 Apr 12 18:45:32.428893 kernel: SELinux: policy capability always_check_network=0 Apr 12 18:45:32.428909 kernel: SELinux: policy capability cgroup_seclabel=1 Apr 12 18:45:32.428922 kernel: SELinux: policy capability nnp_nosuid_transition=1 Apr 12 18:45:32.428936 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Apr 12 18:45:32.428948 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Apr 12 18:45:32.428961 systemd[1]: Successfully loaded SELinux policy in 91.488ms. Apr 12 18:45:32.428991 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 12.781ms. Apr 12 18:45:32.429007 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Apr 12 18:45:32.429021 systemd[1]: Detected virtualization kvm. Apr 12 18:45:32.429038 systemd[1]: Detected architecture x86-64. Apr 12 18:45:32.429051 systemd[1]: Detected first boot. Apr 12 18:45:32.429064 systemd[1]: Hostname set to . Apr 12 18:45:32.429079 systemd[1]: Initializing machine ID from VM UUID. Apr 12 18:45:32.429092 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Apr 12 18:45:32.429105 systemd[1]: Populated /etc with preset unit settings. Apr 12 18:45:32.429119 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:45:32.429133 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:45:32.429148 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:45:32.429163 kernel: kauditd_printk_skb: 48 callbacks suppressed Apr 12 18:45:32.429176 kernel: audit: type=1334 audit(1712947532.205:89): prog-id=12 op=LOAD Apr 12 18:45:32.429191 kernel: audit: type=1334 audit(1712947532.205:90): prog-id=3 op=UNLOAD Apr 12 18:45:32.429203 kernel: audit: type=1334 audit(1712947532.210:91): prog-id=13 op=LOAD Apr 12 18:45:32.429215 kernel: audit: type=1334 audit(1712947532.213:92): prog-id=14 op=LOAD Apr 12 18:45:32.429227 kernel: audit: type=1334 audit(1712947532.213:93): prog-id=4 op=UNLOAD Apr 12 18:45:32.429239 kernel: audit: type=1334 audit(1712947532.213:94): prog-id=5 op=UNLOAD Apr 12 18:45:32.429251 kernel: audit: type=1334 audit(1712947532.216:95): prog-id=15 op=LOAD Apr 12 18:45:32.429266 kernel: audit: type=1334 audit(1712947532.216:96): prog-id=12 op=UNLOAD Apr 12 18:45:32.429284 kernel: audit: type=1334 audit(1712947532.225:97): prog-id=16 op=LOAD Apr 12 18:45:32.429296 systemd[1]: initrd-switch-root.service: Deactivated successfully. Apr 12 18:45:32.429309 kernel: audit: type=1334 audit(1712947532.227:98): prog-id=17 op=LOAD Apr 12 18:45:32.429337 systemd[1]: Stopped initrd-switch-root.service. Apr 12 18:45:32.429352 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Apr 12 18:45:32.429365 systemd[1]: Created slice system-addon\x2dconfig.slice. Apr 12 18:45:32.429381 systemd[1]: Created slice system-addon\x2drun.slice. Apr 12 18:45:32.429395 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Apr 12 18:45:32.429411 systemd[1]: Created slice system-getty.slice. Apr 12 18:45:32.429425 systemd[1]: Created slice system-modprobe.slice. Apr 12 18:45:32.429438 systemd[1]: Created slice system-serial\x2dgetty.slice. Apr 12 18:45:32.429451 systemd[1]: Created slice system-system\x2dcloudinit.slice. Apr 12 18:45:32.429464 systemd[1]: Created slice system-systemd\x2dfsck.slice. Apr 12 18:45:32.429477 systemd[1]: Created slice user.slice. Apr 12 18:45:32.429494 systemd[1]: Started systemd-ask-password-console.path. Apr 12 18:45:32.429507 systemd[1]: Started systemd-ask-password-wall.path. Apr 12 18:45:32.429521 systemd[1]: Set up automount boot.automount. Apr 12 18:45:32.429534 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Apr 12 18:45:32.429547 systemd[1]: Stopped target initrd-switch-root.target. Apr 12 18:45:32.429560 systemd[1]: Stopped target initrd-fs.target. Apr 12 18:45:32.429573 systemd[1]: Stopped target initrd-root-fs.target. Apr 12 18:45:32.429586 systemd[1]: Reached target integritysetup.target. Apr 12 18:45:32.429599 systemd[1]: Reached target remote-cryptsetup.target. Apr 12 18:45:32.429614 systemd[1]: Reached target remote-fs.target. Apr 12 18:45:32.429627 systemd[1]: Reached target slices.target. Apr 12 18:45:32.429641 systemd[1]: Reached target swap.target. Apr 12 18:45:32.429654 systemd[1]: Reached target torcx.target. Apr 12 18:45:32.429667 systemd[1]: Reached target veritysetup.target. Apr 12 18:45:32.429680 systemd[1]: Listening on systemd-coredump.socket. Apr 12 18:45:32.429693 systemd[1]: Listening on systemd-initctl.socket. Apr 12 18:45:32.429706 systemd[1]: Listening on systemd-networkd.socket. Apr 12 18:45:32.429719 systemd[1]: Listening on systemd-udevd-control.socket. Apr 12 18:45:32.429734 systemd[1]: Listening on systemd-udevd-kernel.socket. Apr 12 18:45:32.429748 systemd[1]: Listening on systemd-userdbd.socket. Apr 12 18:45:32.429761 systemd[1]: Mounting dev-hugepages.mount... Apr 12 18:45:32.429775 systemd[1]: Mounting dev-mqueue.mount... Apr 12 18:45:32.429787 systemd[1]: Mounting media.mount... Apr 12 18:45:32.429801 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Apr 12 18:45:32.429815 systemd[1]: Mounting sys-kernel-debug.mount... Apr 12 18:45:32.429828 systemd[1]: Mounting sys-kernel-tracing.mount... Apr 12 18:45:32.429841 systemd[1]: Mounting tmp.mount... Apr 12 18:45:32.429856 systemd[1]: Starting flatcar-tmpfiles.service... Apr 12 18:45:32.429870 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Apr 12 18:45:32.429883 systemd[1]: Starting kmod-static-nodes.service... Apr 12 18:45:32.429914 systemd[1]: Starting modprobe@configfs.service... Apr 12 18:45:32.429929 systemd[1]: Starting modprobe@dm_mod.service... Apr 12 18:45:32.429942 systemd[1]: Starting modprobe@drm.service... Apr 12 18:45:32.429954 systemd[1]: Starting modprobe@efi_pstore.service... Apr 12 18:45:32.429968 systemd[1]: Starting modprobe@fuse.service... Apr 12 18:45:32.429981 systemd[1]: Starting modprobe@loop.service... Apr 12 18:45:32.429997 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Apr 12 18:45:32.430010 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Apr 12 18:45:32.430023 systemd[1]: Stopped systemd-fsck-root.service. Apr 12 18:45:32.430036 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Apr 12 18:45:32.430050 systemd[1]: Stopped systemd-fsck-usr.service. Apr 12 18:45:32.430063 systemd[1]: Stopped systemd-journald.service. Apr 12 18:45:32.430081 systemd[1]: Starting systemd-journald.service... Apr 12 18:45:32.430095 systemd[1]: Starting systemd-modules-load.service... Apr 12 18:45:32.430109 systemd[1]: Starting systemd-network-generator.service... Apr 12 18:45:32.430125 systemd[1]: Starting systemd-remount-fs.service... Apr 12 18:45:32.430139 systemd[1]: Starting systemd-udev-trigger.service... Apr 12 18:45:32.430153 systemd[1]: verity-setup.service: Deactivated successfully. Apr 12 18:45:32.430167 systemd[1]: Stopped verity-setup.service. Apr 12 18:45:32.430181 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Apr 12 18:45:32.430195 systemd[1]: Mounted dev-hugepages.mount. Apr 12 18:45:32.430209 systemd[1]: Mounted dev-mqueue.mount. Apr 12 18:45:32.430222 systemd[1]: Mounted media.mount. Apr 12 18:45:32.430236 systemd[1]: Mounted sys-kernel-debug.mount. Apr 12 18:45:32.430252 systemd[1]: Mounted sys-kernel-tracing.mount. Apr 12 18:45:32.430266 systemd[1]: Mounted tmp.mount. Apr 12 18:45:32.430280 systemd[1]: Finished kmod-static-nodes.service. Apr 12 18:45:32.430294 systemd[1]: modprobe@configfs.service: Deactivated successfully. Apr 12 18:45:32.430308 systemd[1]: Finished modprobe@configfs.service. Apr 12 18:45:32.430355 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Apr 12 18:45:32.430372 systemd[1]: Finished modprobe@dm_mod.service. Apr 12 18:45:32.430386 systemd[1]: modprobe@drm.service: Deactivated successfully. Apr 12 18:45:32.430423 systemd[1]: Finished modprobe@drm.service. Apr 12 18:45:32.430442 systemd-journald[915]: Journal started Apr 12 18:45:32.430489 systemd-journald[915]: Runtime Journal (/run/log/journal/e7b5e0af35714ffeb24a18c5286283ea) is 4.9M, max 39.5M, 34.5M free. Apr 12 18:45:26.775000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Apr 12 18:45:26.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Apr 12 18:45:26.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Apr 12 18:45:26.862000 audit: BPF prog-id=10 op=LOAD Apr 12 18:45:26.862000 audit: BPF prog-id=10 op=UNLOAD Apr 12 18:45:26.862000 audit: BPF prog-id=11 op=LOAD Apr 12 18:45:26.862000 audit: BPF prog-id=11 op=UNLOAD Apr 12 18:45:27.050000 audit[850]: AVC avc: denied { associate } for pid=850 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Apr 12 18:45:27.050000 audit[850]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d8a2 a1=c0000cede0 a2=c0000d70c0 a3=32 items=0 ppid=833 pid=850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:45:27.050000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Apr 12 18:45:27.052000 audit[850]: AVC avc: denied { associate } for pid=850 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Apr 12 18:45:27.052000 audit[850]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d979 a2=1ed a3=0 items=2 ppid=833 pid=850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:45:27.052000 audit: CWD cwd="/" Apr 12 18:45:27.052000 audit: PATH item=0 name=(null) inode=2 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:27.052000 audit: PATH item=1 name=(null) inode=3 dev=00:1a mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:27.052000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Apr 12 18:45:32.205000 audit: BPF prog-id=12 op=LOAD Apr 12 18:45:32.205000 audit: BPF prog-id=3 op=UNLOAD Apr 12 18:45:32.210000 audit: BPF prog-id=13 op=LOAD Apr 12 18:45:32.213000 audit: BPF prog-id=14 op=LOAD Apr 12 18:45:32.213000 audit: BPF prog-id=4 op=UNLOAD Apr 12 18:45:32.213000 audit: BPF prog-id=5 op=UNLOAD Apr 12 18:45:32.216000 audit: BPF prog-id=15 op=LOAD Apr 12 18:45:32.216000 audit: BPF prog-id=12 op=UNLOAD Apr 12 18:45:32.225000 audit: BPF prog-id=16 op=LOAD Apr 12 18:45:32.227000 audit: BPF prog-id=17 op=LOAD Apr 12 18:45:32.227000 audit: BPF prog-id=13 op=UNLOAD Apr 12 18:45:32.228000 audit: BPF prog-id=14 op=UNLOAD Apr 12 18:45:32.228000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.240000 audit: BPF prog-id=15 op=UNLOAD Apr 12 18:45:32.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.366000 audit: BPF prog-id=18 op=LOAD Apr 12 18:45:32.366000 audit: BPF prog-id=19 op=LOAD Apr 12 18:45:32.366000 audit: BPF prog-id=20 op=LOAD Apr 12 18:45:32.366000 audit: BPF prog-id=16 op=UNLOAD Apr 12 18:45:32.366000 audit: BPF prog-id=17 op=UNLOAD Apr 12 18:45:32.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.417000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.426000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Apr 12 18:45:32.426000 audit[915]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffd76e570b0 a2=4000 a3=7ffd76e5714c items=0 ppid=1 pid=915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:45:32.426000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Apr 12 18:45:32.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.430000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:27.045689 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:45:32.203936 systemd[1]: Queued start job for default target multi-user.target. Apr 12 18:45:27.046553 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Apr 12 18:45:32.203947 systemd[1]: Unnecessary job was removed for dev-vda6.device. Apr 12 18:45:32.438200 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Apr 12 18:45:32.438239 systemd[1]: Finished modprobe@efi_pstore.service. Apr 12 18:45:32.438257 systemd[1]: Started systemd-journald.service. Apr 12 18:45:32.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.437000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:27.046577 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Apr 12 18:45:32.229035 systemd[1]: systemd-journald.service: Deactivated successfully. Apr 12 18:45:27.046612 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Apr 12 18:45:32.437381 systemd[1]: Finished systemd-modules-load.service. Apr 12 18:45:27.046624 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="skipped missing lower profile" missing profile=oem Apr 12 18:45:32.438433 systemd[1]: Finished systemd-network-generator.service. Apr 12 18:45:27.046659 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Apr 12 18:45:32.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:27.046674 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Apr 12 18:45:32.440551 systemd[1]: Finished systemd-remount-fs.service. Apr 12 18:45:27.046877 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Apr 12 18:45:27.046920 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Apr 12 18:45:32.441360 kernel: fuse: init (API version 7.34) Apr 12 18:45:32.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:27.046937 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Apr 12 18:45:27.049560 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Apr 12 18:45:27.049598 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Apr 12 18:45:27.049620 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.3: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.3 Apr 12 18:45:27.049637 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Apr 12 18:45:27.049656 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.3: no such file or directory" path=/var/lib/torcx/store/3510.3.3 Apr 12 18:45:32.441995 systemd[1]: Reached target network-pre.target. Apr 12 18:45:27.049671 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:27Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Apr 12 18:45:30.791511 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:30Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:45:30.791967 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:30Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:45:30.792106 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:30Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:45:30.792344 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:30Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:45:30.792408 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:30Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Apr 12 18:45:30.792484 /usr/lib/systemd/system-generators/torcx-generator[850]: time="2024-04-12T18:45:30Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Apr 12 18:45:32.443787 systemd[1]: Mounting sys-kernel-config.mount... Apr 12 18:45:32.444252 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Apr 12 18:45:32.447058 systemd[1]: Starting systemd-hwdb-update.service... Apr 12 18:45:32.448969 systemd[1]: Starting systemd-journal-flush.service... Apr 12 18:45:32.450043 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Apr 12 18:45:32.452150 systemd[1]: Starting systemd-random-seed.service... Apr 12 18:45:32.454166 systemd[1]: Starting systemd-sysctl.service... Apr 12 18:45:32.458934 systemd[1]: modprobe@fuse.service: Deactivated successfully. Apr 12 18:45:32.459118 systemd[1]: Finished modprobe@fuse.service. Apr 12 18:45:32.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.460196 systemd[1]: Mounted sys-kernel-config.mount. Apr 12 18:45:32.462671 systemd[1]: Mounting sys-fs-fuse-connections.mount... Apr 12 18:45:32.466472 systemd[1]: Mounted sys-fs-fuse-connections.mount. Apr 12 18:45:32.471980 kernel: loop: module loaded Apr 12 18:45:32.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.471115 systemd[1]: modprobe@loop.service: Deactivated successfully. Apr 12 18:45:32.471276 systemd[1]: Finished modprobe@loop.service. Apr 12 18:45:32.471932 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Apr 12 18:45:32.479754 systemd-journald[915]: Time spent on flushing to /var/log/journal/e7b5e0af35714ffeb24a18c5286283ea is 55.928ms for 1144 entries. Apr 12 18:45:32.479754 systemd-journald[915]: System Journal (/var/log/journal/e7b5e0af35714ffeb24a18c5286283ea) is 8.0M, max 584.8M, 576.8M free. Apr 12 18:45:32.588732 systemd-journald[915]: Received client request to flush runtime journal. Apr 12 18:45:32.509000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.510000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.520000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.509670 systemd[1]: Finished systemd-sysctl.service. Apr 12 18:45:32.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:32.510438 systemd[1]: Finished systemd-random-seed.service. Apr 12 18:45:32.510988 systemd[1]: Reached target first-boot-complete.target. Apr 12 18:45:32.590504 udevadm[959]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Apr 12 18:45:32.520607 systemd[1]: Finished flatcar-tmpfiles.service. Apr 12 18:45:32.522303 systemd[1]: Starting systemd-sysusers.service... Apr 12 18:45:32.565017 systemd[1]: Finished systemd-udev-trigger.service. Apr 12 18:45:32.566701 systemd[1]: Starting systemd-udev-settle.service... Apr 12 18:45:32.583364 systemd[1]: Finished systemd-sysusers.service. Apr 12 18:45:32.589628 systemd[1]: Finished systemd-journal-flush.service. Apr 12 18:45:33.185465 systemd[1]: Finished systemd-hwdb-update.service. Apr 12 18:45:33.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.188000 audit: BPF prog-id=21 op=LOAD Apr 12 18:45:33.188000 audit: BPF prog-id=22 op=LOAD Apr 12 18:45:33.188000 audit: BPF prog-id=7 op=UNLOAD Apr 12 18:45:33.188000 audit: BPF prog-id=8 op=UNLOAD Apr 12 18:45:33.190970 systemd[1]: Starting systemd-udevd.service... Apr 12 18:45:33.209554 systemd-udevd[960]: Using default interface naming scheme 'v252'. Apr 12 18:45:33.253276 systemd[1]: Started systemd-udevd.service. Apr 12 18:45:33.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.260000 audit: BPF prog-id=23 op=LOAD Apr 12 18:45:33.263008 systemd[1]: Starting systemd-networkd.service... Apr 12 18:45:33.284000 audit: BPF prog-id=24 op=LOAD Apr 12 18:45:33.285000 audit: BPF prog-id=25 op=LOAD Apr 12 18:45:33.285000 audit: BPF prog-id=26 op=LOAD Apr 12 18:45:33.288174 systemd[1]: Starting systemd-userdbd.service... Apr 12 18:45:33.321177 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Apr 12 18:45:33.334676 systemd[1]: Started systemd-userdbd.service. Apr 12 18:45:33.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.426292 systemd-networkd[976]: lo: Link UP Apr 12 18:45:33.426307 systemd-networkd[976]: lo: Gained carrier Apr 12 18:45:33.427414 systemd-networkd[976]: Enumeration completed Apr 12 18:45:33.427533 systemd[1]: Started systemd-networkd.service. Apr 12 18:45:33.427549 systemd-networkd[976]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Apr 12 18:45:33.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.429436 systemd-networkd[976]: eth0: Link UP Apr 12 18:45:33.429441 systemd-networkd[976]: eth0: Gained carrier Apr 12 18:45:33.439913 systemd-networkd[976]: eth0: DHCPv4 address 172.24.4.238/24, gateway 172.24.4.1 acquired from 172.24.4.1 Apr 12 18:45:33.437000 audit[961]: AVC avc: denied { confidentiality } for pid=961 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Apr 12 18:45:33.437000 audit[961]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5612dec1aee0 a1=32194 a2=7f1b6389abc5 a3=5 items=108 ppid=960 pid=961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:45:33.437000 audit: CWD cwd="/" Apr 12 18:45:33.437000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=1 name=(null) inode=14664 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=2 name=(null) inode=14664 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=3 name=(null) inode=14665 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=4 name=(null) inode=14664 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=5 name=(null) inode=14666 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=6 name=(null) inode=14664 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=7 name=(null) inode=14667 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=8 name=(null) inode=14667 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=9 name=(null) inode=14668 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=10 name=(null) inode=14667 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=11 name=(null) inode=14669 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=12 name=(null) inode=14667 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=13 name=(null) inode=14670 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=14 name=(null) inode=14667 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=15 name=(null) inode=14671 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=16 name=(null) inode=14667 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=17 name=(null) inode=14672 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=18 name=(null) inode=14664 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=19 name=(null) inode=14673 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=20 name=(null) inode=14673 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=21 name=(null) inode=14674 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=22 name=(null) inode=14673 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=23 name=(null) inode=14675 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=24 name=(null) inode=14673 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=25 name=(null) inode=14676 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=26 name=(null) inode=14673 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=27 name=(null) inode=14677 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=28 name=(null) inode=14673 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=29 name=(null) inode=14678 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=30 name=(null) inode=14664 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=31 name=(null) inode=14679 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=32 name=(null) inode=14679 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=33 name=(null) inode=14680 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=34 name=(null) inode=14679 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=35 name=(null) inode=14681 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=36 name=(null) inode=14679 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=37 name=(null) inode=14682 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=38 name=(null) inode=14679 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=39 name=(null) inode=14683 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=40 name=(null) inode=14679 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=41 name=(null) inode=14684 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=42 name=(null) inode=14664 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=43 name=(null) inode=14685 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=44 name=(null) inode=14685 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=45 name=(null) inode=14686 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=46 name=(null) inode=14685 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=47 name=(null) inode=14687 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=48 name=(null) inode=14685 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=49 name=(null) inode=14688 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=50 name=(null) inode=14685 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=51 name=(null) inode=14689 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=52 name=(null) inode=14685 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=53 name=(null) inode=14690 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=55 name=(null) inode=14691 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=56 name=(null) inode=14691 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=57 name=(null) inode=14692 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=58 name=(null) inode=14691 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=59 name=(null) inode=14693 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=60 name=(null) inode=14691 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=61 name=(null) inode=14694 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=62 name=(null) inode=14694 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=63 name=(null) inode=14695 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=64 name=(null) inode=14694 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=65 name=(null) inode=14696 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=66 name=(null) inode=14694 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=67 name=(null) inode=14697 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=68 name=(null) inode=14694 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=69 name=(null) inode=14698 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=70 name=(null) inode=14694 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=71 name=(null) inode=14699 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=72 name=(null) inode=14691 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=73 name=(null) inode=14700 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=74 name=(null) inode=14700 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=75 name=(null) inode=14701 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=76 name=(null) inode=14700 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=77 name=(null) inode=14702 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=78 name=(null) inode=14700 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=79 name=(null) inode=14703 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=80 name=(null) inode=14700 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=81 name=(null) inode=14704 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=82 name=(null) inode=14700 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=83 name=(null) inode=14705 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=84 name=(null) inode=14691 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=85 name=(null) inode=14706 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=86 name=(null) inode=14706 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=87 name=(null) inode=14707 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=88 name=(null) inode=14706 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=89 name=(null) inode=14708 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=90 name=(null) inode=14706 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=91 name=(null) inode=14709 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=92 name=(null) inode=14706 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=93 name=(null) inode=14710 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=94 name=(null) inode=14706 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=95 name=(null) inode=14711 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=96 name=(null) inode=14691 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=97 name=(null) inode=14712 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=98 name=(null) inode=14712 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=99 name=(null) inode=14713 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=100 name=(null) inode=14712 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=101 name=(null) inode=14714 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=102 name=(null) inode=14712 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=103 name=(null) inode=14715 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=104 name=(null) inode=14712 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=105 name=(null) inode=14716 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=106 name=(null) inode=14712 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PATH item=107 name=(null) inode=14717 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:45:33.437000 audit: PROCTITLE proctitle="(udev-worker)" Apr 12 18:45:33.469343 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Apr 12 18:45:33.470350 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0x700, revision 0 Apr 12 18:45:33.474941 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Apr 12 18:45:33.480350 kernel: ACPI: button: Power Button [PWRF] Apr 12 18:45:33.487359 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Apr 12 18:45:33.492376 kernel: mousedev: PS/2 mouse device common for all mice Apr 12 18:45:33.536990 systemd[1]: Finished systemd-udev-settle.service. Apr 12 18:45:33.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.539927 systemd[1]: Starting lvm2-activation-early.service... Apr 12 18:45:33.569273 lvm[989]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Apr 12 18:45:33.599738 systemd[1]: Finished lvm2-activation-early.service. Apr 12 18:45:33.600000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.601071 systemd[1]: Reached target cryptsetup.target. Apr 12 18:45:33.604548 systemd[1]: Starting lvm2-activation.service... Apr 12 18:45:33.608738 lvm[990]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Apr 12 18:45:33.633713 systemd[1]: Finished lvm2-activation.service. Apr 12 18:45:33.634000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.634981 systemd[1]: Reached target local-fs-pre.target. Apr 12 18:45:33.636167 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Apr 12 18:45:33.636229 systemd[1]: Reached target local-fs.target. Apr 12 18:45:33.637308 systemd[1]: Reached target machines.target. Apr 12 18:45:33.640793 systemd[1]: Starting ldconfig.service... Apr 12 18:45:33.646802 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Apr 12 18:45:33.646898 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Apr 12 18:45:33.649000 systemd[1]: Starting systemd-boot-update.service... Apr 12 18:45:33.656457 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Apr 12 18:45:33.658487 systemd[1]: Starting systemd-machine-id-commit.service... Apr 12 18:45:33.659078 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Apr 12 18:45:33.659121 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Apr 12 18:45:33.660256 systemd[1]: Starting systemd-tmpfiles-setup.service... Apr 12 18:45:33.661066 systemd[1]: boot.automount: Got automount request for /boot, triggered by 992 (bootctl) Apr 12 18:45:33.662293 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Apr 12 18:45:33.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.695459 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Apr 12 18:45:33.730351 systemd-tmpfiles[995]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Apr 12 18:45:33.742631 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Apr 12 18:45:33.746279 systemd[1]: Finished systemd-machine-id-commit.service. Apr 12 18:45:33.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.760268 systemd-tmpfiles[995]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Apr 12 18:45:33.785403 systemd-tmpfiles[995]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Apr 12 18:45:33.943739 systemd-fsck[1000]: fsck.fat 4.2 (2021-01-31) Apr 12 18:45:33.943739 systemd-fsck[1000]: /dev/vda1: 789 files, 119240/258078 clusters Apr 12 18:45:33.949695 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Apr 12 18:45:33.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:33.954113 systemd[1]: Mounting boot.mount... Apr 12 18:45:33.979712 systemd[1]: Mounted boot.mount. Apr 12 18:45:34.002766 systemd[1]: Finished systemd-boot-update.service. Apr 12 18:45:34.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:34.105397 systemd[1]: Finished systemd-tmpfiles-setup.service. Apr 12 18:45:34.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:34.107525 systemd[1]: Starting audit-rules.service... Apr 12 18:45:34.109577 systemd[1]: Starting clean-ca-certificates.service... Apr 12 18:45:34.114000 audit: BPF prog-id=27 op=LOAD Apr 12 18:45:34.113375 systemd[1]: Starting systemd-journal-catalog-update.service... Apr 12 18:45:34.115819 systemd[1]: Starting systemd-resolved.service... Apr 12 18:45:34.118000 audit: BPF prog-id=28 op=LOAD Apr 12 18:45:34.119187 systemd[1]: Starting systemd-timesyncd.service... Apr 12 18:45:34.122144 systemd[1]: Starting systemd-update-utmp.service... Apr 12 18:45:34.139175 systemd[1]: Finished clean-ca-certificates.service. Apr 12 18:45:34.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:34.139866 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Apr 12 18:45:34.144000 audit[1008]: SYSTEM_BOOT pid=1008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Apr 12 18:45:34.159685 systemd[1]: Finished systemd-update-utmp.service. Apr 12 18:45:34.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:34.216166 systemd[1]: Finished systemd-journal-catalog-update.service. Apr 12 18:45:34.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:34.228406 systemd[1]: Started systemd-timesyncd.service. Apr 12 18:45:34.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:34.229000 systemd[1]: Reached target time-set.target. Apr 12 18:45:34.248000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Apr 12 18:45:34.248000 audit[1024]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffec5b84d0 a2=420 a3=0 items=0 ppid=1003 pid=1024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:45:34.248000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Apr 12 18:45:34.248971 augenrules[1024]: No rules Apr 12 18:45:34.249627 systemd[1]: Finished audit-rules.service. Apr 12 18:45:34.251708 systemd-resolved[1006]: Positive Trust Anchors: Apr 12 18:45:34.251722 systemd-resolved[1006]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Apr 12 18:45:34.251759 systemd-resolved[1006]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Apr 12 18:45:34.276424 systemd-resolved[1006]: Using system hostname 'ci-3510-3-3-9-b9e221dcee.novalocal'. Apr 12 18:45:34.278503 systemd[1]: Started systemd-resolved.service. Apr 12 18:45:34.279144 systemd[1]: Reached target network.target. Apr 12 18:45:34.279662 systemd[1]: Reached target nss-lookup.target. Apr 12 18:45:35.061337 systemd-resolved[1006]: Clock change detected. Flushing caches. Apr 12 18:45:35.061409 systemd-timesyncd[1007]: Contacted time server 51.15.182.163:123 (0.flatcar.pool.ntp.org). Apr 12 18:45:35.061523 systemd-timesyncd[1007]: Initial clock synchronization to Fri 2024-04-12 18:45:35.061150 UTC. Apr 12 18:45:35.449053 ldconfig[991]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Apr 12 18:45:35.468049 systemd[1]: Finished ldconfig.service. Apr 12 18:45:35.472829 systemd[1]: Starting systemd-update-done.service... Apr 12 18:45:35.487228 systemd[1]: Finished systemd-update-done.service. Apr 12 18:45:35.488611 systemd[1]: Reached target sysinit.target. Apr 12 18:45:35.489932 systemd[1]: Started motdgen.path. Apr 12 18:45:35.491064 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Apr 12 18:45:35.492929 systemd[1]: Started logrotate.timer. Apr 12 18:45:35.494216 systemd[1]: Started mdadm.timer. Apr 12 18:45:35.495382 systemd[1]: Started systemd-tmpfiles-clean.timer. Apr 12 18:45:35.496500 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Apr 12 18:45:35.496578 systemd[1]: Reached target paths.target. Apr 12 18:45:35.497654 systemd[1]: Reached target timers.target. Apr 12 18:45:35.500671 systemd[1]: Listening on dbus.socket. Apr 12 18:45:35.504339 systemd[1]: Starting docker.socket... Apr 12 18:45:35.511865 systemd[1]: Listening on sshd.socket. Apr 12 18:45:35.513467 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Apr 12 18:45:35.514892 systemd[1]: Listening on docker.socket. Apr 12 18:45:35.516525 systemd[1]: Reached target sockets.target. Apr 12 18:45:35.517837 systemd[1]: Reached target basic.target. Apr 12 18:45:35.519201 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Apr 12 18:45:35.519521 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Apr 12 18:45:35.522091 systemd[1]: Starting containerd.service... Apr 12 18:45:35.525978 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Apr 12 18:45:35.529932 systemd[1]: Starting dbus.service... Apr 12 18:45:35.536640 systemd[1]: Starting enable-oem-cloudinit.service... Apr 12 18:45:35.544842 systemd[1]: Starting extend-filesystems.service... Apr 12 18:45:35.546115 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Apr 12 18:45:35.550593 systemd[1]: Starting motdgen.service... Apr 12 18:45:35.560481 jq[1037]: false Apr 12 18:45:35.554193 systemd[1]: Starting prepare-cni-plugins.service... Apr 12 18:45:35.560475 systemd[1]: Starting prepare-critools.service... Apr 12 18:45:35.564355 systemd[1]: Starting prepare-helm.service... Apr 12 18:45:35.568344 systemd[1]: Starting ssh-key-proc-cmdline.service... Apr 12 18:45:35.575071 systemd[1]: Starting sshd-keygen.service... Apr 12 18:45:35.587619 systemd[1]: Starting systemd-logind.service... Apr 12 18:45:35.588595 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Apr 12 18:45:35.588708 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Apr 12 18:45:35.589374 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Apr 12 18:45:35.591414 systemd[1]: Starting update-engine.service... Apr 12 18:45:35.599391 systemd[1]: Starting update-ssh-keys-after-ignition.service... Apr 12 18:45:35.603660 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Apr 12 18:45:35.603894 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Apr 12 18:45:35.604859 jq[1051]: true Apr 12 18:45:35.621483 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Apr 12 18:45:35.621645 systemd[1]: Finished ssh-key-proc-cmdline.service. Apr 12 18:45:35.624295 tar[1053]: ./ Apr 12 18:45:35.624295 tar[1053]: ./loopback Apr 12 18:45:35.627434 tar[1056]: linux-amd64/helm Apr 12 18:45:35.632666 tar[1055]: crictl Apr 12 18:45:35.634604 extend-filesystems[1038]: Found vda Apr 12 18:45:35.647397 extend-filesystems[1038]: Found vda1 Apr 12 18:45:35.648073 extend-filesystems[1038]: Found vda2 Apr 12 18:45:35.649613 jq[1057]: true Apr 12 18:45:35.650189 extend-filesystems[1038]: Found vda3 Apr 12 18:45:35.651225 extend-filesystems[1038]: Found usr Apr 12 18:45:35.655189 extend-filesystems[1038]: Found vda4 Apr 12 18:45:35.656013 extend-filesystems[1038]: Found vda6 Apr 12 18:45:35.656013 extend-filesystems[1038]: Found vda7 Apr 12 18:45:35.657645 extend-filesystems[1038]: Found vda9 Apr 12 18:45:35.657645 extend-filesystems[1038]: Checking size of /dev/vda9 Apr 12 18:45:35.664238 dbus-daemon[1034]: [system] SELinux support is enabled Apr 12 18:45:35.664449 systemd[1]: Started dbus.service. Apr 12 18:45:35.672290 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Apr 12 18:45:35.672322 systemd[1]: Reached target system-config.target. Apr 12 18:45:35.672839 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Apr 12 18:45:35.672856 systemd[1]: Reached target user-config.target. Apr 12 18:45:35.686312 systemd[1]: motdgen.service: Deactivated successfully. Apr 12 18:45:35.686520 systemd[1]: Finished motdgen.service. Apr 12 18:45:35.712525 extend-filesystems[1038]: Resized partition /dev/vda9 Apr 12 18:45:35.736701 extend-filesystems[1092]: resize2fs 1.46.5 (30-Dec-2021) Apr 12 18:45:35.741808 update_engine[1049]: I0412 18:45:35.736987 1049 main.cc:92] Flatcar Update Engine starting Apr 12 18:45:35.753296 systemd[1]: Started update-engine.service. Apr 12 18:45:35.756320 systemd[1]: Started locksmithd.service. Apr 12 18:45:35.759990 update_engine[1049]: I0412 18:45:35.759951 1049 update_check_scheduler.cc:74] Next update check in 4m38s Apr 12 18:45:35.773284 kernel: EXT4-fs (vda9): resizing filesystem from 1617920 to 4635643 blocks Apr 12 18:45:35.833136 coreos-metadata[1033]: Apr 12 18:45:35.833 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys: Attempt #1 Apr 12 18:45:35.838438 tar[1053]: ./bandwidth Apr 12 18:45:35.869763 systemd-networkd[976]: eth0: Gained IPv6LL Apr 12 18:45:35.872434 bash[1089]: Updated "/home/core/.ssh/authorized_keys" Apr 12 18:45:35.873523 systemd[1]: Finished update-ssh-keys-after-ignition.service. Apr 12 18:45:35.874268 kernel: EXT4-fs (vda9): resized filesystem to 4635643 Apr 12 18:45:35.985928 systemd-logind[1047]: Watching system buttons on /dev/input/event1 (Power Button) Apr 12 18:45:35.985948 systemd-logind[1047]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Apr 12 18:45:35.989675 extend-filesystems[1092]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Apr 12 18:45:35.989675 extend-filesystems[1092]: old_desc_blocks = 1, new_desc_blocks = 3 Apr 12 18:45:35.989675 extend-filesystems[1092]: The filesystem on /dev/vda9 is now 4635643 (4k) blocks long. Apr 12 18:45:35.998351 env[1058]: time="2024-04-12T18:45:35.988868714Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Apr 12 18:45:35.988935 systemd[1]: extend-filesystems.service: Deactivated successfully. Apr 12 18:45:35.998677 extend-filesystems[1038]: Resized filesystem in /dev/vda9 Apr 12 18:45:35.989318 systemd[1]: Finished extend-filesystems.service. Apr 12 18:45:35.990430 systemd-logind[1047]: New seat seat0. Apr 12 18:45:35.995899 systemd[1]: Started systemd-logind.service. Apr 12 18:45:36.020002 coreos-metadata[1033]: Apr 12 18:45:36.019 INFO Fetch successful Apr 12 18:45:36.020152 coreos-metadata[1033]: Apr 12 18:45:36.020 INFO Fetching http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key: Attempt #1 Apr 12 18:45:36.035696 coreos-metadata[1033]: Apr 12 18:45:36.035 INFO Fetch successful Apr 12 18:45:36.038335 unknown[1033]: wrote ssh authorized keys file for user: core Apr 12 18:45:36.117590 update-ssh-keys[1098]: Updated "/home/core/.ssh/authorized_keys" Apr 12 18:45:36.118118 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Apr 12 18:45:36.121088 env[1058]: time="2024-04-12T18:45:36.121044961Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Apr 12 18:45:36.123597 tar[1053]: ./ptp Apr 12 18:45:36.130658 env[1058]: time="2024-04-12T18:45:36.130629246Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:45:36.140597 env[1058]: time="2024-04-12T18:45:36.140541717Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.154-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Apr 12 18:45:36.140597 env[1058]: time="2024-04-12T18:45:36.140589897Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:45:36.140858 env[1058]: time="2024-04-12T18:45:36.140827383Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Apr 12 18:45:36.140914 env[1058]: time="2024-04-12T18:45:36.140855846Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Apr 12 18:45:36.140914 env[1058]: time="2024-04-12T18:45:36.140877717Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Apr 12 18:45:36.140914 env[1058]: time="2024-04-12T18:45:36.140891803Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Apr 12 18:45:36.140995 env[1058]: time="2024-04-12T18:45:36.140970731Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:45:36.141267 env[1058]: time="2024-04-12T18:45:36.141225459Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:45:36.141420 env[1058]: time="2024-04-12T18:45:36.141380580Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Apr 12 18:45:36.141420 env[1058]: time="2024-04-12T18:45:36.141405988Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Apr 12 18:45:36.141508 env[1058]: time="2024-04-12T18:45:36.141462774Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Apr 12 18:45:36.141508 env[1058]: time="2024-04-12T18:45:36.141478914Z" level=info msg="metadata content store policy set" policy=shared Apr 12 18:45:36.166582 env[1058]: time="2024-04-12T18:45:36.166485464Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Apr 12 18:45:36.166582 env[1058]: time="2024-04-12T18:45:36.166532332Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Apr 12 18:45:36.166582 env[1058]: time="2024-04-12T18:45:36.166552600Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Apr 12 18:45:36.166582 env[1058]: time="2024-04-12T18:45:36.166605509Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Apr 12 18:45:36.166887 env[1058]: time="2024-04-12T18:45:36.166623774Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Apr 12 18:45:36.166887 env[1058]: time="2024-04-12T18:45:36.166641427Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Apr 12 18:45:36.166887 env[1058]: time="2024-04-12T18:45:36.166657297Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Apr 12 18:45:36.166887 env[1058]: time="2024-04-12T18:45:36.166674819Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Apr 12 18:45:36.166887 env[1058]: time="2024-04-12T18:45:36.166692372Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Apr 12 18:45:36.166887 env[1058]: time="2024-04-12T18:45:36.166715025Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Apr 12 18:45:36.166887 env[1058]: time="2024-04-12T18:45:36.166731025Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Apr 12 18:45:36.166887 env[1058]: time="2024-04-12T18:45:36.166746544Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Apr 12 18:45:36.166887 env[1058]: time="2024-04-12T18:45:36.166880215Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Apr 12 18:45:36.167152 env[1058]: time="2024-04-12T18:45:36.166970604Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167304170Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167342061Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167359143Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167411621Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167428363Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167443441Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167457447Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167471884Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167487584Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167502522Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167515937Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167532408Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167682980Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167703709Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.168737 env[1058]: time="2024-04-12T18:45:36.167719068Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.169126 env[1058]: time="2024-04-12T18:45:36.167733685Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Apr 12 18:45:36.169126 env[1058]: time="2024-04-12T18:45:36.167751258Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Apr 12 18:45:36.169126 env[1058]: time="2024-04-12T18:45:36.167766637Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Apr 12 18:45:36.169126 env[1058]: time="2024-04-12T18:45:36.167787065Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Apr 12 18:45:36.169126 env[1058]: time="2024-04-12T18:45:36.167826549Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Apr 12 18:45:36.169142 systemd[1]: Started containerd.service. Apr 12 18:45:36.169344 env[1058]: time="2024-04-12T18:45:36.168047664Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Apr 12 18:45:36.169344 env[1058]: time="2024-04-12T18:45:36.168119218Z" level=info msg="Connect containerd service" Apr 12 18:45:36.169344 env[1058]: time="2024-04-12T18:45:36.168159714Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Apr 12 18:45:36.169344 env[1058]: time="2024-04-12T18:45:36.168756423Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Apr 12 18:45:36.169344 env[1058]: time="2024-04-12T18:45:36.168984251Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Apr 12 18:45:36.169344 env[1058]: time="2024-04-12T18:45:36.169027321Z" level=info msg=serving... address=/run/containerd/containerd.sock Apr 12 18:45:36.184781 env[1058]: time="2024-04-12T18:45:36.169474180Z" level=info msg="Start subscribing containerd event" Apr 12 18:45:36.184781 env[1058]: time="2024-04-12T18:45:36.169549531Z" level=info msg="Start recovering state" Apr 12 18:45:36.184781 env[1058]: time="2024-04-12T18:45:36.169626866Z" level=info msg="Start event monitor" Apr 12 18:45:36.184781 env[1058]: time="2024-04-12T18:45:36.169643277Z" level=info msg="Start snapshots syncer" Apr 12 18:45:36.184781 env[1058]: time="2024-04-12T18:45:36.169655219Z" level=info msg="Start cni network conf syncer for default" Apr 12 18:45:36.184781 env[1058]: time="2024-04-12T18:45:36.169663595Z" level=info msg="Start streaming server" Apr 12 18:45:36.184781 env[1058]: time="2024-04-12T18:45:36.169900629Z" level=info msg="containerd successfully booted in 0.326019s" Apr 12 18:45:36.266092 tar[1053]: ./vlan Apr 12 18:45:36.362111 tar[1053]: ./host-device Apr 12 18:45:36.453796 tar[1053]: ./tuning Apr 12 18:45:36.532780 tar[1053]: ./vrf Apr 12 18:45:36.621742 tar[1053]: ./sbr Apr 12 18:45:36.705954 tar[1053]: ./tap Apr 12 18:45:36.803436 tar[1053]: ./dhcp Apr 12 18:45:36.950321 tar[1056]: linux-amd64/LICENSE Apr 12 18:45:36.950321 tar[1056]: linux-amd64/README.md Apr 12 18:45:36.957568 systemd[1]: Finished prepare-helm.service. Apr 12 18:45:37.029782 tar[1053]: ./static Apr 12 18:45:37.077594 systemd[1]: Finished prepare-critools.service. Apr 12 18:45:37.086027 tar[1053]: ./firewall Apr 12 18:45:37.129987 tar[1053]: ./macvlan Apr 12 18:45:37.169227 tar[1053]: ./dummy Apr 12 18:45:37.208658 tar[1053]: ./bridge Apr 12 18:45:37.251731 tar[1053]: ./ipvlan Apr 12 18:45:37.291670 tar[1053]: ./portmap Apr 12 18:45:37.329966 tar[1053]: ./host-local Apr 12 18:45:37.375280 systemd[1]: Finished prepare-cni-plugins.service. Apr 12 18:45:37.391156 locksmithd[1094]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Apr 12 18:45:37.459277 sshd_keygen[1069]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Apr 12 18:45:37.487042 systemd[1]: Finished sshd-keygen.service. Apr 12 18:45:37.491496 systemd[1]: Starting issuegen.service... Apr 12 18:45:37.498906 systemd[1]: issuegen.service: Deactivated successfully. Apr 12 18:45:37.499379 systemd[1]: Finished issuegen.service. Apr 12 18:45:37.503778 systemd[1]: Starting systemd-user-sessions.service... Apr 12 18:45:37.510495 systemd[1]: Finished systemd-user-sessions.service. Apr 12 18:45:37.515670 systemd[1]: Started getty@tty1.service. Apr 12 18:45:37.519792 systemd[1]: Started serial-getty@ttyS0.service. Apr 12 18:45:37.521400 systemd[1]: Reached target getty.target. Apr 12 18:45:37.522728 systemd[1]: Reached target multi-user.target. Apr 12 18:45:37.526509 systemd[1]: Starting systemd-update-utmp-runlevel.service... Apr 12 18:45:37.544733 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Apr 12 18:45:37.545086 systemd[1]: Finished systemd-update-utmp-runlevel.service. Apr 12 18:45:37.546609 systemd[1]: Startup finished in 898ms (kernel) + 2min 13.917s (initrd) + 10.101s (userspace) = 2min 24.917s. Apr 12 18:45:44.766942 systemd[1]: Created slice system-sshd.slice. Apr 12 18:45:44.770705 systemd[1]: Started sshd@0-172.24.4.238:22-172.24.4.1:60244.service. Apr 12 18:45:46.122778 sshd[1124]: Accepted publickey for core from 172.24.4.1 port 60244 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:45:46.128079 sshd[1124]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:45:46.154517 systemd[1]: Created slice user-500.slice. Apr 12 18:45:46.157685 systemd[1]: Starting user-runtime-dir@500.service... Apr 12 18:45:46.164696 systemd-logind[1047]: New session 1 of user core. Apr 12 18:45:46.182852 systemd[1]: Finished user-runtime-dir@500.service. Apr 12 18:45:46.188676 systemd[1]: Starting user@500.service... Apr 12 18:45:46.195573 (systemd)[1127]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:45:46.326871 systemd[1127]: Queued start job for default target default.target. Apr 12 18:45:46.327562 systemd[1127]: Reached target paths.target. Apr 12 18:45:46.327580 systemd[1127]: Reached target sockets.target. Apr 12 18:45:46.327595 systemd[1127]: Reached target timers.target. Apr 12 18:45:46.327608 systemd[1127]: Reached target basic.target. Apr 12 18:45:46.327650 systemd[1127]: Reached target default.target. Apr 12 18:45:46.327675 systemd[1127]: Startup finished in 117ms. Apr 12 18:45:46.329122 systemd[1]: Started user@500.service. Apr 12 18:45:46.332443 systemd[1]: Started session-1.scope. Apr 12 18:45:46.791855 systemd[1]: Started sshd@1-172.24.4.238:22-172.24.4.1:60246.service. Apr 12 18:45:48.439189 sshd[1136]: Accepted publickey for core from 172.24.4.1 port 60246 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:45:48.442392 sshd[1136]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:45:48.456151 systemd[1]: Started session-2.scope. Apr 12 18:45:48.457353 systemd-logind[1047]: New session 2 of user core. Apr 12 18:45:49.179996 sshd[1136]: pam_unix(sshd:session): session closed for user core Apr 12 18:45:49.189350 systemd[1]: Started sshd@2-172.24.4.238:22-172.24.4.1:60260.service. Apr 12 18:45:49.191959 systemd[1]: sshd@1-172.24.4.238:22-172.24.4.1:60246.service: Deactivated successfully. Apr 12 18:45:49.193650 systemd[1]: session-2.scope: Deactivated successfully. Apr 12 18:45:49.197189 systemd-logind[1047]: Session 2 logged out. Waiting for processes to exit. Apr 12 18:45:49.199659 systemd-logind[1047]: Removed session 2. Apr 12 18:45:50.929730 sshd[1141]: Accepted publickey for core from 172.24.4.1 port 60260 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:45:50.932692 sshd[1141]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:45:50.943430 systemd-logind[1047]: New session 3 of user core. Apr 12 18:45:50.944377 systemd[1]: Started session-3.scope. Apr 12 18:45:51.652313 sshd[1141]: pam_unix(sshd:session): session closed for user core Apr 12 18:45:51.658937 systemd[1]: Started sshd@3-172.24.4.238:22-172.24.4.1:60276.service. Apr 12 18:45:51.663369 systemd[1]: sshd@2-172.24.4.238:22-172.24.4.1:60260.service: Deactivated successfully. Apr 12 18:45:51.664935 systemd[1]: session-3.scope: Deactivated successfully. Apr 12 18:45:51.667413 systemd-logind[1047]: Session 3 logged out. Waiting for processes to exit. Apr 12 18:45:51.669899 systemd-logind[1047]: Removed session 3. Apr 12 18:45:53.178444 sshd[1147]: Accepted publickey for core from 172.24.4.1 port 60276 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:45:53.183231 sshd[1147]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:45:53.195415 systemd-logind[1047]: New session 4 of user core. Apr 12 18:45:53.195663 systemd[1]: Started session-4.scope. Apr 12 18:45:54.026370 sshd[1147]: pam_unix(sshd:session): session closed for user core Apr 12 18:45:54.034980 systemd[1]: sshd@3-172.24.4.238:22-172.24.4.1:60276.service: Deactivated successfully. Apr 12 18:45:54.036385 systemd[1]: session-4.scope: Deactivated successfully. Apr 12 18:45:54.037760 systemd-logind[1047]: Session 4 logged out. Waiting for processes to exit. Apr 12 18:45:54.039962 systemd[1]: Started sshd@4-172.24.4.238:22-172.24.4.1:60284.service. Apr 12 18:45:54.043583 systemd-logind[1047]: Removed session 4. Apr 12 18:45:55.378035 sshd[1154]: Accepted publickey for core from 172.24.4.1 port 60284 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:45:55.380803 sshd[1154]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:45:55.391388 systemd-logind[1047]: New session 5 of user core. Apr 12 18:45:55.392289 systemd[1]: Started session-5.scope. Apr 12 18:45:55.940627 sudo[1157]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Apr 12 18:45:55.941369 sudo[1157]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:45:55.953684 dbus-daemon[1034]: Н\xfbdNV: received setenforce notice (enforcing=-1837507296) Apr 12 18:45:55.959820 sudo[1157]: pam_unix(sudo:session): session closed for user root Apr 12 18:45:56.205609 sshd[1154]: pam_unix(sshd:session): session closed for user core Apr 12 18:45:56.214670 systemd[1]: Started sshd@5-172.24.4.238:22-172.24.4.1:49826.service. Apr 12 18:45:56.222637 systemd[1]: sshd@4-172.24.4.238:22-172.24.4.1:60284.service: Deactivated successfully. Apr 12 18:45:56.224756 systemd[1]: session-5.scope: Deactivated successfully. Apr 12 18:45:56.229039 systemd-logind[1047]: Session 5 logged out. Waiting for processes to exit. Apr 12 18:45:56.232580 systemd-logind[1047]: Removed session 5. Apr 12 18:45:57.344189 sshd[1160]: Accepted publickey for core from 172.24.4.1 port 49826 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:45:57.347347 sshd[1160]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:45:57.357228 systemd-logind[1047]: New session 6 of user core. Apr 12 18:45:57.358211 systemd[1]: Started session-6.scope. Apr 12 18:45:57.863489 sudo[1165]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Apr 12 18:45:57.864617 sudo[1165]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:45:57.870984 sudo[1165]: pam_unix(sudo:session): session closed for user root Apr 12 18:45:57.880827 sudo[1164]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Apr 12 18:45:57.881338 sudo[1164]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:45:57.902507 systemd[1]: Stopping audit-rules.service... Apr 12 18:45:57.904181 auditctl[1168]: No rules Apr 12 18:45:57.903000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Apr 12 18:45:57.908321 kernel: kauditd_printk_skb: 184 callbacks suppressed Apr 12 18:45:57.908456 kernel: audit: type=1305 audit(1712947557.903:168): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Apr 12 18:45:57.905383 systemd[1]: audit-rules.service: Deactivated successfully. Apr 12 18:45:57.905735 systemd[1]: Stopped audit-rules.service. Apr 12 18:45:57.903000 audit[1168]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe9ea0e690 a2=420 a3=0 items=0 ppid=1 pid=1168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:45:57.909980 systemd[1]: Starting audit-rules.service... Apr 12 18:45:57.922823 kernel: audit: type=1300 audit(1712947557.903:168): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe9ea0e690 a2=420 a3=0 items=0 ppid=1 pid=1168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:45:57.923504 kernel: audit: type=1327 audit(1712947557.903:168): proctitle=2F7362696E2F617564697463746C002D44 Apr 12 18:45:57.903000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Apr 12 18:45:57.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:57.934827 kernel: audit: type=1131 audit(1712947557.905:169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:57.959960 augenrules[1185]: No rules Apr 12 18:45:57.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:57.961336 systemd[1]: Finished audit-rules.service. Apr 12 18:45:57.962802 sudo[1164]: pam_unix(sudo:session): session closed for user root Apr 12 18:45:57.973348 kernel: audit: type=1130 audit(1712947557.961:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:57.973478 kernel: audit: type=1106 audit(1712947557.962:171): pid=1164 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:45:57.962000 audit[1164]: USER_END pid=1164 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:45:57.962000 audit[1164]: CRED_DISP pid=1164 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:45:57.991734 kernel: audit: type=1104 audit(1712947557.962:172): pid=1164 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:45:58.197366 sshd[1160]: pam_unix(sshd:session): session closed for user core Apr 12 18:45:58.202000 audit[1160]: USER_END pid=1160 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:45:58.206972 systemd[1]: Started sshd@6-172.24.4.238:22-172.24.4.1:49832.service. Apr 12 18:45:58.220306 kernel: audit: type=1106 audit(1712947558.202:173): pid=1160 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:45:58.202000 audit[1160]: CRED_DISP pid=1160 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:45:58.221465 systemd[1]: sshd@5-172.24.4.238:22-172.24.4.1:49826.service: Deactivated successfully. Apr 12 18:45:58.222803 systemd[1]: session-6.scope: Deactivated successfully. Apr 12 18:45:58.230894 systemd-logind[1047]: Session 6 logged out. Waiting for processes to exit. Apr 12 18:45:58.231292 kernel: audit: type=1104 audit(1712947558.202:174): pid=1160 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:45:58.212000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.238:22-172.24.4.1:49832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:58.243328 kernel: audit: type=1130 audit(1712947558.212:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.238:22-172.24.4.1:49832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:58.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.24.4.238:22-172.24.4.1:49826 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:45:58.243884 systemd-logind[1047]: Removed session 6. Apr 12 18:45:59.675000 audit[1190]: USER_ACCT pid=1190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:45:59.676482 sshd[1190]: Accepted publickey for core from 172.24.4.1 port 49832 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:45:59.677000 audit[1190]: CRED_ACQ pid=1190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:45:59.677000 audit[1190]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe97aa6b90 a2=3 a3=0 items=0 ppid=1 pid=1190 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:45:59.677000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:45:59.679192 sshd[1190]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:45:59.689141 systemd-logind[1047]: New session 7 of user core. Apr 12 18:45:59.689965 systemd[1]: Started session-7.scope. Apr 12 18:45:59.700000 audit[1190]: USER_START pid=1190 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:45:59.703000 audit[1193]: CRED_ACQ pid=1193 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:46:00.180000 audit[1194]: USER_ACCT pid=1194 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:46:00.180507 sudo[1194]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Apr 12 18:46:00.180000 audit[1194]: CRED_REFR pid=1194 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:46:00.180983 sudo[1194]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:46:00.184000 audit[1194]: USER_START pid=1194 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:46:00.888317 systemd[1]: Starting systemd-networkd-wait-online.service... Apr 12 18:46:00.904352 systemd[1]: Finished systemd-networkd-wait-online.service. Apr 12 18:46:00.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:00.905151 systemd[1]: Reached target network-online.target. Apr 12 18:46:00.908085 systemd[1]: Starting docker.service... Apr 12 18:46:00.979774 env[1210]: time="2024-04-12T18:46:00.979689582Z" level=info msg="Starting up" Apr 12 18:46:00.983448 env[1210]: time="2024-04-12T18:46:00.983402877Z" level=info msg="parsed scheme: \"unix\"" module=grpc Apr 12 18:46:00.983632 env[1210]: time="2024-04-12T18:46:00.983598954Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Apr 12 18:46:00.983875 env[1210]: time="2024-04-12T18:46:00.983834075Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Apr 12 18:46:00.984016 env[1210]: time="2024-04-12T18:46:00.983985970Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Apr 12 18:46:00.986952 env[1210]: time="2024-04-12T18:46:00.986915394Z" level=info msg="parsed scheme: \"unix\"" module=grpc Apr 12 18:46:00.987204 env[1210]: time="2024-04-12T18:46:00.987170302Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Apr 12 18:46:00.987441 env[1210]: time="2024-04-12T18:46:00.987396927Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Apr 12 18:46:00.987580 env[1210]: time="2024-04-12T18:46:00.987551076Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Apr 12 18:46:00.998599 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport855438476-merged.mount: Deactivated successfully. Apr 12 18:46:01.078385 env[1210]: time="2024-04-12T18:46:01.078329081Z" level=info msg="Loading containers: start." Apr 12 18:46:01.190000 audit[1242]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1242 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.190000 audit[1242]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe7a5f0430 a2=0 a3=7ffe7a5f041c items=0 ppid=1210 pid=1242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.190000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Apr 12 18:46:01.194000 audit[1244]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1244 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.194000 audit[1244]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff9b105570 a2=0 a3=7fff9b10555c items=0 ppid=1210 pid=1244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.194000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Apr 12 18:46:01.198000 audit[1246]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1246 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.198000 audit[1246]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcb7783f30 a2=0 a3=7ffcb7783f1c items=0 ppid=1210 pid=1246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.198000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Apr 12 18:46:01.201000 audit[1248]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1248 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.201000 audit[1248]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffcad859c40 a2=0 a3=7ffcad859c2c items=0 ppid=1210 pid=1248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.201000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Apr 12 18:46:01.205000 audit[1250]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1250 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.205000 audit[1250]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff49073b30 a2=0 a3=7fff49073b1c items=0 ppid=1210 pid=1250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.205000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Apr 12 18:46:01.237000 audit[1255]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1255 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.237000 audit[1255]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffa9955010 a2=0 a3=7fffa9954ffc items=0 ppid=1210 pid=1255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.237000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Apr 12 18:46:01.253000 audit[1257]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1257 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.253000 audit[1257]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff5b0fee60 a2=0 a3=7fff5b0fee4c items=0 ppid=1210 pid=1257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.253000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Apr 12 18:46:01.257000 audit[1259]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1259 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.257000 audit[1259]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe045d8580 a2=0 a3=7ffe045d856c items=0 ppid=1210 pid=1259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.257000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Apr 12 18:46:01.263000 audit[1261]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1261 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.263000 audit[1261]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe43cc45c0 a2=0 a3=7ffe43cc45ac items=0 ppid=1210 pid=1261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.263000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:46:01.280000 audit[1265]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1265 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.280000 audit[1265]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd74005a70 a2=0 a3=7ffd74005a5c items=0 ppid=1210 pid=1265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.280000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:46:01.282000 audit[1266]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1266 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.282000 audit[1266]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffdcd26aa80 a2=0 a3=7ffdcd26aa6c items=0 ppid=1210 pid=1266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.282000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:46:01.309757 kernel: Initializing XFRM netlink socket Apr 12 18:46:01.374602 env[1210]: time="2024-04-12T18:46:01.374433144Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Apr 12 18:46:01.405000 audit[1274]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1274 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.405000 audit[1274]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe0e89fc20 a2=0 a3=7ffe0e89fc0c items=0 ppid=1210 pid=1274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.405000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Apr 12 18:46:01.415000 audit[1277]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1277 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.415000 audit[1277]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd7e693440 a2=0 a3=7ffd7e69342c items=0 ppid=1210 pid=1277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.415000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Apr 12 18:46:01.420000 audit[1280]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1280 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.420000 audit[1280]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffe0a3ac330 a2=0 a3=7ffe0a3ac31c items=0 ppid=1210 pid=1280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.420000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Apr 12 18:46:01.425000 audit[1282]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1282 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.425000 audit[1282]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff08173ae0 a2=0 a3=7fff08173acc items=0 ppid=1210 pid=1282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.425000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Apr 12 18:46:01.428000 audit[1284]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1284 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.428000 audit[1284]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffc75b49aa0 a2=0 a3=7ffc75b49a8c items=0 ppid=1210 pid=1284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.428000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Apr 12 18:46:01.432000 audit[1286]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1286 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.432000 audit[1286]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffda3b7e4e0 a2=0 a3=7ffda3b7e4cc items=0 ppid=1210 pid=1286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.432000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Apr 12 18:46:01.436000 audit[1288]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1288 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.436000 audit[1288]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fffb7bb3650 a2=0 a3=7fffb7bb363c items=0 ppid=1210 pid=1288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.436000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Apr 12 18:46:01.456000 audit[1291]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.456000 audit[1291]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe5bc73800 a2=0 a3=7ffe5bc737ec items=0 ppid=1210 pid=1291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.456000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Apr 12 18:46:01.462000 audit[1293]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1293 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.462000 audit[1293]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff09b873f0 a2=0 a3=7fff09b873dc items=0 ppid=1210 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.462000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Apr 12 18:46:01.464000 audit[1295]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.464000 audit[1295]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffa5b96a80 a2=0 a3=7fffa5b96a6c items=0 ppid=1210 pid=1295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.464000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Apr 12 18:46:01.466000 audit[1297]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1297 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.466000 audit[1297]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffebe6d6af0 a2=0 a3=7ffebe6d6adc items=0 ppid=1210 pid=1297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.466000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Apr 12 18:46:01.467488 systemd-networkd[976]: docker0: Link UP Apr 12 18:46:01.477000 audit[1301]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.477000 audit[1301]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffde498bf80 a2=0 a3=7ffde498bf6c items=0 ppid=1210 pid=1301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.477000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:46:01.478000 audit[1302]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:01.478000 audit[1302]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffdb111c30 a2=0 a3=7fffdb111c1c items=0 ppid=1210 pid=1302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:01.478000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:46:01.479206 env[1210]: time="2024-04-12T18:46:01.479162413Z" level=info msg="Loading containers: done." Apr 12 18:46:01.490625 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2735396921-merged.mount: Deactivated successfully. Apr 12 18:46:01.508533 env[1210]: time="2024-04-12T18:46:01.508497371Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Apr 12 18:46:01.508864 env[1210]: time="2024-04-12T18:46:01.508844823Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Apr 12 18:46:01.509045 env[1210]: time="2024-04-12T18:46:01.509027525Z" level=info msg="Daemon has completed initialization" Apr 12 18:46:01.541350 systemd[1]: Started docker.service. Apr 12 18:46:01.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:01.558513 env[1210]: time="2024-04-12T18:46:01.558349799Z" level=info msg="API listen on /run/docker.sock" Apr 12 18:46:01.592931 systemd[1]: Reloading. Apr 12 18:46:01.714554 /usr/lib/systemd/system-generators/torcx-generator[1349]: time="2024-04-12T18:46:01Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:46:01.714589 /usr/lib/systemd/system-generators/torcx-generator[1349]: time="2024-04-12T18:46:01Z" level=info msg="torcx already run" Apr 12 18:46:01.809716 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:46:01.809734 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:46:01.832303 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:46:01.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.904000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.904000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.905000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.905000 audit: BPF prog-id=34 op=LOAD Apr 12 18:46:01.905000 audit: BPF prog-id=32 op=UNLOAD Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit: BPF prog-id=35 op=LOAD Apr 12 18:46:01.907000 audit: BPF prog-id=18 op=UNLOAD Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit: BPF prog-id=36 op=LOAD Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.907000 audit: BPF prog-id=37 op=LOAD Apr 12 18:46:01.907000 audit: BPF prog-id=19 op=UNLOAD Apr 12 18:46:01.907000 audit: BPF prog-id=20 op=UNLOAD Apr 12 18:46:01.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.908000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.908000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit: BPF prog-id=38 op=LOAD Apr 12 18:46:01.909000 audit: BPF prog-id=29 op=UNLOAD Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit: BPF prog-id=39 op=LOAD Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit: BPF prog-id=40 op=LOAD Apr 12 18:46:01.909000 audit: BPF prog-id=30 op=UNLOAD Apr 12 18:46:01.909000 audit: BPF prog-id=31 op=UNLOAD Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.909000 audit: BPF prog-id=41 op=LOAD Apr 12 18:46:01.910000 audit: BPF prog-id=28 op=UNLOAD Apr 12 18:46:01.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.910000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.910000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.911000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.911000 audit: BPF prog-id=42 op=LOAD Apr 12 18:46:01.911000 audit: BPF prog-id=27 op=UNLOAD Apr 12 18:46:01.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.913000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.913000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit: BPF prog-id=43 op=LOAD Apr 12 18:46:01.914000 audit: BPF prog-id=24 op=UNLOAD Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit: BPF prog-id=44 op=LOAD Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.914000 audit: BPF prog-id=45 op=LOAD Apr 12 18:46:01.914000 audit: BPF prog-id=25 op=UNLOAD Apr 12 18:46:01.914000 audit: BPF prog-id=26 op=UNLOAD Apr 12 18:46:01.915000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit: BPF prog-id=46 op=LOAD Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.916000 audit: BPF prog-id=47 op=LOAD Apr 12 18:46:01.916000 audit: BPF prog-id=21 op=UNLOAD Apr 12 18:46:01.916000 audit: BPF prog-id=22 op=UNLOAD Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:01.918000 audit: BPF prog-id=48 op=LOAD Apr 12 18:46:01.918000 audit: BPF prog-id=23 op=UNLOAD Apr 12 18:46:01.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:01.933585 systemd[1]: Started kubelet.service. Apr 12 18:46:02.007944 kubelet[1395]: E0412 18:46:02.004420 1395 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Apr 12 18:46:02.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:46:02.009806 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:46:02.009922 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:46:03.169304 env[1058]: time="2024-04-12T18:46:03.169191493Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.8\"" Apr 12 18:46:03.988164 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount629059076.mount: Deactivated successfully. Apr 12 18:46:07.339424 env[1058]: time="2024-04-12T18:46:07.339277247Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:07.341960 env[1058]: time="2024-04-12T18:46:07.341920334Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e70a71eaa5605454dd0adfd46911b0203db5baf1107de51ba9943d2eaea23142,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:07.345559 env[1058]: time="2024-04-12T18:46:07.345503104Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:07.347010 env[1058]: time="2024-04-12T18:46:07.346975165Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:7e7f3c806333528451a1e0bfdf17da0341adaea7d50a703db9c2005c474a97b9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:07.350142 env[1058]: time="2024-04-12T18:46:07.350081531Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.8\" returns image reference \"sha256:e70a71eaa5605454dd0adfd46911b0203db5baf1107de51ba9943d2eaea23142\"" Apr 12 18:46:07.374857 env[1058]: time="2024-04-12T18:46:07.374763812Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.8\"" Apr 12 18:46:11.473114 env[1058]: time="2024-04-12T18:46:11.472939474Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:11.477160 env[1058]: time="2024-04-12T18:46:11.477088089Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e5ae3e4dc6566b175cc53982cae28703dcd88916c37b4d2c0cb688faf8e05fad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:11.481581 env[1058]: time="2024-04-12T18:46:11.481521572Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:11.487556 env[1058]: time="2024-04-12T18:46:11.487498470Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:f3d0e8da9d1532e081e719a985e89a0cfe1a29d127773ad8e2c2fee1dd10fd00,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:11.490092 env[1058]: time="2024-04-12T18:46:11.490033558Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.8\" returns image reference \"sha256:e5ae3e4dc6566b175cc53982cae28703dcd88916c37b4d2c0cb688faf8e05fad\"" Apr 12 18:46:11.517622 env[1058]: time="2024-04-12T18:46:11.517558681Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.8\"" Apr 12 18:46:12.011773 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Apr 12 18:46:12.012228 systemd[1]: Stopped kubelet.service. Apr 12 18:46:12.025006 kernel: kauditd_printk_skb: 259 callbacks suppressed Apr 12 18:46:12.025179 kernel: audit: type=1130 audit(1712947572.012:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:12.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:12.016034 systemd[1]: Started kubelet.service. Apr 12 18:46:12.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:12.042109 kernel: audit: type=1131 audit(1712947572.012:386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:12.042221 kernel: audit: type=1130 audit(1712947572.016:387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:12.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:12.131048 kubelet[1427]: E0412 18:46:12.130987 1427 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Apr 12 18:46:12.137486 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:46:12.137671 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:46:12.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:46:12.143291 kernel: audit: type=1131 audit(1712947572.137:388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:46:13.514161 env[1058]: time="2024-04-12T18:46:13.513972476Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:13.517834 env[1058]: time="2024-04-12T18:46:13.517774360Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ad3260645145d9611fcf5e5936ddf7cf5be8990fe44160c960c2f3cc643fb4e4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:13.520476 env[1058]: time="2024-04-12T18:46:13.520404884Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:13.522787 env[1058]: time="2024-04-12T18:46:13.522749057Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:4d61604f259d3c91d8b3ec7a6a999f5eae9aff371567151cd5165eaa698c6d7b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:13.525404 env[1058]: time="2024-04-12T18:46:13.525364283Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.8\" returns image reference \"sha256:ad3260645145d9611fcf5e5936ddf7cf5be8990fe44160c960c2f3cc643fb4e4\"" Apr 12 18:46:13.538125 env[1058]: time="2024-04-12T18:46:13.538070699Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.8\"" Apr 12 18:46:16.165005 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3020458484.mount: Deactivated successfully. Apr 12 18:46:17.392192 env[1058]: time="2024-04-12T18:46:17.392110041Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:17.399317 env[1058]: time="2024-04-12T18:46:17.399194240Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5ce97277076c6f5c87d43fec5e3eacad030c82c81b2756d2bba4569d22fc65dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:17.402694 env[1058]: time="2024-04-12T18:46:17.402604947Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:17.405593 env[1058]: time="2024-04-12T18:46:17.405539576Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:9e9dd46799712c58e1a49f973374ffa9ad4e5a6175896e5d805a8738bf5c5865,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:17.406749 env[1058]: time="2024-04-12T18:46:17.406658605Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.8\" returns image reference \"sha256:5ce97277076c6f5c87d43fec5e3eacad030c82c81b2756d2bba4569d22fc65dc\"" Apr 12 18:46:17.428924 env[1058]: time="2024-04-12T18:46:17.428833472Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Apr 12 18:46:18.009618 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount772988295.mount: Deactivated successfully. Apr 12 18:46:18.022300 env[1058]: time="2024-04-12T18:46:18.022162044Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:18.030776 env[1058]: time="2024-04-12T18:46:18.030651036Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:18.038187 env[1058]: time="2024-04-12T18:46:18.038125858Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:18.041937 env[1058]: time="2024-04-12T18:46:18.041866755Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:18.043887 env[1058]: time="2024-04-12T18:46:18.043805397Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Apr 12 18:46:18.065950 env[1058]: time="2024-04-12T18:46:18.065885673Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Apr 12 18:46:18.694792 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3197809447.mount: Deactivated successfully. Apr 12 18:46:20.652376 update_engine[1049]: I0412 18:46:20.651372 1049 update_attempter.cc:509] Updating boot flags... Apr 12 18:46:22.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:22.263593 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Apr 12 18:46:22.272700 kernel: audit: type=1130 audit(1712947582.263:389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:22.272796 kernel: audit: type=1131 audit(1712947582.263:390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:22.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:22.264212 systemd[1]: Stopped kubelet.service. Apr 12 18:46:22.268513 systemd[1]: Started kubelet.service. Apr 12 18:46:22.267000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:22.280331 kernel: audit: type=1130 audit(1712947582.267:391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:22.368674 kubelet[1464]: E0412 18:46:22.368625 1464 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Apr 12 18:46:22.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:46:22.371017 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:46:22.371149 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:46:22.375585 kernel: audit: type=1131 audit(1712947582.370:392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:46:25.893777 env[1058]: time="2024-04-12T18:46:25.893617337Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:25.904745 env[1058]: time="2024-04-12T18:46:25.904630571Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:25.909364 env[1058]: time="2024-04-12T18:46:25.909235262Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:25.916808 env[1058]: time="2024-04-12T18:46:25.916745617Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:25.919137 env[1058]: time="2024-04-12T18:46:25.919067555Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Apr 12 18:46:25.955446 env[1058]: time="2024-04-12T18:46:25.955312323Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Apr 12 18:46:26.716246 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3653424380.mount: Deactivated successfully. Apr 12 18:46:29.163009 env[1058]: time="2024-04-12T18:46:29.162924852Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:29.165811 env[1058]: time="2024-04-12T18:46:29.165757987Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:29.168331 env[1058]: time="2024-04-12T18:46:29.168305235Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:29.171168 env[1058]: time="2024-04-12T18:46:29.171141516Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:29.172525 env[1058]: time="2024-04-12T18:46:29.172473048Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Apr 12 18:46:32.413606 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Apr 12 18:46:32.415703 systemd[1]: Stopped kubelet.service. Apr 12 18:46:32.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:32.425302 kernel: audit: type=1130 audit(1712947592.414:393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:32.425239 systemd[1]: Started kubelet.service. Apr 12 18:46:32.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:32.434270 kernel: audit: type=1131 audit(1712947592.420:394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:32.424000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:32.438274 kernel: audit: type=1130 audit(1712947592.424:395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:32.446664 systemd[1]: Stopping kubelet.service... Apr 12 18:46:32.448405 systemd[1]: kubelet.service: Deactivated successfully. Apr 12 18:46:32.448593 systemd[1]: Stopped kubelet.service. Apr 12 18:46:32.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:32.459778 kernel: audit: type=1131 audit(1712947592.447:396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:32.468495 systemd[1]: Reloading. Apr 12 18:46:32.586221 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2024-04-12T18:46:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:46:32.586270 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2024-04-12T18:46:32Z" level=info msg="torcx already run" Apr 12 18:46:32.683932 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:46:32.684734 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:46:32.707394 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:46:32.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787314 kernel: audit: type=1400 audit(1712947592.777:397): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.801607 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Apr 12 18:46:32.801671 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Apr 12 18:46:32.801698 kernel: audit: type=1400 audit(1712947592.777:398): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.801723 kernel: audit: backlog limit exceeded Apr 12 18:46:32.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.802863 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Apr 12 18:46:32.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.777000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.777000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.785000 audit: BPF prog-id=49 op=LOAD Apr 12 18:46:32.785000 audit: BPF prog-id=34 op=UNLOAD Apr 12 18:46:32.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit: BPF prog-id=50 op=LOAD Apr 12 18:46:32.787000 audit: BPF prog-id=35 op=UNLOAD Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit: BPF prog-id=51 op=LOAD Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.787000 audit: BPF prog-id=52 op=LOAD Apr 12 18:46:32.787000 audit: BPF prog-id=36 op=UNLOAD Apr 12 18:46:32.787000 audit: BPF prog-id=37 op=UNLOAD Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit: BPF prog-id=53 op=LOAD Apr 12 18:46:32.788000 audit: BPF prog-id=38 op=UNLOAD Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.788000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit: BPF prog-id=58 op=LOAD Apr 12 18:46:32.808000 audit: BPF prog-id=43 op=UNLOAD Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit: BPF prog-id=59 op=LOAD Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.808000 audit: BPF prog-id=60 op=LOAD Apr 12 18:46:32.808000 audit: BPF prog-id=44 op=UNLOAD Apr 12 18:46:32.808000 audit: BPF prog-id=45 op=UNLOAD Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.810000 audit: BPF prog-id=61 op=LOAD Apr 12 18:46:32.810000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.811000 audit: BPF prog-id=62 op=LOAD Apr 12 18:46:32.811000 audit: BPF prog-id=46 op=UNLOAD Apr 12 18:46:32.811000 audit: BPF prog-id=47 op=UNLOAD Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:32.812000 audit: BPF prog-id=63 op=LOAD Apr 12 18:46:32.812000 audit: BPF prog-id=48 op=UNLOAD Apr 12 18:46:32.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:32.835582 systemd[1]: Started kubelet.service. Apr 12 18:46:32.923780 kubelet[1616]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:46:32.924232 kubelet[1616]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Apr 12 18:46:32.924341 kubelet[1616]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:46:32.924490 kubelet[1616]: I0412 18:46:32.924451 1616 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Apr 12 18:46:33.664345 kubelet[1616]: I0412 18:46:33.664230 1616 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Apr 12 18:46:33.664345 kubelet[1616]: I0412 18:46:33.664346 1616 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Apr 12 18:46:33.664894 kubelet[1616]: I0412 18:46:33.664865 1616 server.go:895] "Client rotation is on, will bootstrap in background" Apr 12 18:46:33.674707 kubelet[1616]: E0412 18:46:33.674686 1616 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.238:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:33.674864 kubelet[1616]: I0412 18:46:33.674851 1616 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Apr 12 18:46:33.683047 kubelet[1616]: I0412 18:46:33.683029 1616 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Apr 12 18:46:33.683442 kubelet[1616]: I0412 18:46:33.683431 1616 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Apr 12 18:46:33.683688 kubelet[1616]: I0412 18:46:33.683673 1616 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Apr 12 18:46:33.683820 kubelet[1616]: I0412 18:46:33.683810 1616 topology_manager.go:138] "Creating topology manager with none policy" Apr 12 18:46:33.683883 kubelet[1616]: I0412 18:46:33.683875 1616 container_manager_linux.go:301] "Creating device plugin manager" Apr 12 18:46:33.684057 kubelet[1616]: I0412 18:46:33.684046 1616 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:46:33.684201 kubelet[1616]: I0412 18:46:33.684190 1616 kubelet.go:393] "Attempting to sync node with API server" Apr 12 18:46:33.684296 kubelet[1616]: I0412 18:46:33.684285 1616 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Apr 12 18:46:33.684379 kubelet[1616]: I0412 18:46:33.684370 1616 kubelet.go:309] "Adding apiserver pod source" Apr 12 18:46:33.684447 kubelet[1616]: I0412 18:46:33.684439 1616 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Apr 12 18:46:33.685487 kubelet[1616]: W0412 18:46:33.685402 1616 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.238:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-3-9-b9e221dcee.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:33.685550 kubelet[1616]: E0412 18:46:33.685522 1616 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.238:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-3-9-b9e221dcee.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:33.685756 kubelet[1616]: I0412 18:46:33.685721 1616 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Apr 12 18:46:33.686393 kubelet[1616]: W0412 18:46:33.686359 1616 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Apr 12 18:46:33.687540 kubelet[1616]: I0412 18:46:33.687508 1616 server.go:1232] "Started kubelet" Apr 12 18:46:33.691958 kubelet[1616]: I0412 18:46:33.691899 1616 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Apr 12 18:46:33.695198 kubelet[1616]: E0412 18:46:33.695181 1616 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Apr 12 18:46:33.695432 kubelet[1616]: E0412 18:46:33.695421 1616 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Apr 12 18:46:33.696134 kubelet[1616]: W0412 18:46:33.696097 1616 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.238:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:33.696219 kubelet[1616]: E0412 18:46:33.696210 1616 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.238:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:33.696461 kubelet[1616]: I0412 18:46:33.696451 1616 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Apr 12 18:46:33.696871 kubelet[1616]: I0412 18:46:33.696857 1616 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Apr 12 18:46:33.697219 kubelet[1616]: I0412 18:46:33.697179 1616 server.go:462] "Adding debug handlers to kubelet server" Apr 12 18:46:33.697996 kubelet[1616]: E0412 18:46:33.697889 1616 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-3-9-b9e221dcee.novalocal.17c59cc2c899f98c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-3-9-b9e221dcee.novalocal", UID:"ci-3510-3-3-9-b9e221dcee.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-3-9-b9e221dcee.novalocal"}, FirstTimestamp:time.Date(2024, time.April, 12, 18, 46, 33, 687464332, time.Local), LastTimestamp:time.Date(2024, time.April, 12, 18, 46, 33, 687464332, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510-3-3-9-b9e221dcee.novalocal"}': 'Post "https://172.24.4.238:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.238:6443: connect: connection refused'(may retry after sleeping) Apr 12 18:46:33.700000 audit[1616]: AVC avc: denied { mac_admin } for pid=1616 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:33.700000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:46:33.700000 audit[1616]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cd0d80 a1=c00054f4e8 a2=c000cd0d50 a3=25 items=0 ppid=1 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.700000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:46:33.701938 kubelet[1616]: I0412 18:46:33.701925 1616 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Apr 12 18:46:33.700000 audit[1616]: AVC avc: denied { mac_admin } for pid=1616 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:33.700000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:46:33.700000 audit[1616]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e3a800 a1=c00054f530 a2=c000cd0e10 a3=25 items=0 ppid=1 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.700000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:46:33.702244 kubelet[1616]: I0412 18:46:33.702232 1616 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Apr 12 18:46:33.702421 kubelet[1616]: I0412 18:46:33.702410 1616 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Apr 12 18:46:33.705567 kubelet[1616]: I0412 18:46:33.705554 1616 volume_manager.go:291] "Starting Kubelet Volume Manager" Apr 12 18:46:33.705841 kubelet[1616]: I0412 18:46:33.705830 1616 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Apr 12 18:46:33.705974 kubelet[1616]: I0412 18:46:33.705964 1616 reconciler_new.go:29] "Reconciler: start to sync state" Apr 12 18:46:33.706447 kubelet[1616]: W0412 18:46:33.706407 1616 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.238:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:33.706548 kubelet[1616]: E0412 18:46:33.706537 1616 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.238:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:33.706743 kubelet[1616]: E0412 18:46:33.706707 1616 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ci-3510-3-3-9-b9e221dcee.novalocal\" not found" Apr 12 18:46:33.707045 kubelet[1616]: E0412 18:46:33.707033 1616 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.238:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-3-9-b9e221dcee.novalocal?timeout=10s\": dial tcp 172.24.4.238:6443: connect: connection refused" interval="200ms" Apr 12 18:46:33.753000 audit[1629]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:33.753000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc1fc2c2a0 a2=0 a3=7ffc1fc2c28c items=0 ppid=1616 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.753000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Apr 12 18:46:33.755000 audit[1630]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1630 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:33.755000 audit[1630]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec04813c0 a2=0 a3=7ffec04813ac items=0 ppid=1616 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.755000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Apr 12 18:46:33.758199 kubelet[1616]: I0412 18:46:33.758180 1616 cpu_manager.go:214] "Starting CPU manager" policy="none" Apr 12 18:46:33.758327 kubelet[1616]: I0412 18:46:33.758316 1616 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Apr 12 18:46:33.758428 kubelet[1616]: I0412 18:46:33.758417 1616 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:46:33.760000 audit[1632]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:33.760000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd42f97d70 a2=0 a3=7ffd42f97d5c items=0 ppid=1616 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.760000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:46:33.763000 audit[1634]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:33.763000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff9f331860 a2=0 a3=7fff9f33184c items=0 ppid=1616 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:46:33.785064 kubelet[1616]: I0412 18:46:33.785017 1616 policy_none.go:49] "None policy: Start" Apr 12 18:46:33.787148 kubelet[1616]: I0412 18:46:33.787116 1616 memory_manager.go:169] "Starting memorymanager" policy="None" Apr 12 18:46:33.787602 kubelet[1616]: I0412 18:46:33.787577 1616 state_mem.go:35] "Initializing new in-memory state store" Apr 12 18:46:33.812814 kubelet[1616]: I0412 18:46:33.812729 1616 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:33.814927 kubelet[1616]: E0412 18:46:33.814870 1616 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.238:6443/api/v1/nodes\": dial tcp 172.24.4.238:6443: connect: connection refused" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:33.819930 systemd[1]: Created slice kubepods.slice. Apr 12 18:46:33.821000 audit[1638]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:33.821000 audit[1638]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc0697c560 a2=0 a3=7ffc0697c54c items=0 ppid=1616 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.821000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Apr 12 18:46:33.823534 kubelet[1616]: I0412 18:46:33.823496 1616 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Apr 12 18:46:33.826000 audit[1640]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:46:33.826000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdcbc05f90 a2=0 a3=7ffdcbc05f7c items=0 ppid=1616 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.826000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Apr 12 18:46:33.829476 kubelet[1616]: I0412 18:46:33.829415 1616 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Apr 12 18:46:33.829615 kubelet[1616]: I0412 18:46:33.829482 1616 status_manager.go:217] "Starting to sync pod status with apiserver" Apr 12 18:46:33.829615 kubelet[1616]: I0412 18:46:33.829535 1616 kubelet.go:2303] "Starting kubelet main sync loop" Apr 12 18:46:33.829789 kubelet[1616]: E0412 18:46:33.829662 1616 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Apr 12 18:46:33.832327 kubelet[1616]: W0412 18:46:33.832202 1616 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.238:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:33.833000 audit[1641]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:33.833000 audit[1641]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffc353d3e0 a2=0 a3=7fffc353d3cc items=0 ppid=1616 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.833000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Apr 12 18:46:33.833000 audit[1643]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:46:33.833000 audit[1643]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff7cc8f740 a2=0 a3=10e3 items=0 ppid=1616 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.833000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Apr 12 18:46:33.836149 kubelet[1616]: E0412 18:46:33.836073 1616 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.238:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:33.840620 systemd[1]: Created slice kubepods-burstable.slice. Apr 12 18:46:33.844806 systemd[1]: Created slice kubepods-besteffort.slice. Apr 12 18:46:33.844000 audit[1646]: NETFILTER_CFG table=nat:34 family=10 entries=2 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:46:33.844000 audit[1646]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffed48e4fd0 a2=0 a3=7ffed48e4fbc items=0 ppid=1616 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.844000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Apr 12 18:46:33.846000 audit[1647]: NETFILTER_CFG table=filter:35 family=10 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:46:33.846000 audit[1647]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcc466e520 a2=0 a3=7ffcc466e50c items=0 ppid=1616 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.846000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Apr 12 18:46:33.847000 audit[1645]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:33.847000 audit[1645]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd69466070 a2=0 a3=10e3 items=0 ppid=1616 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.847000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Apr 12 18:46:33.850161 kubelet[1616]: I0412 18:46:33.850134 1616 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Apr 12 18:46:33.849000 audit[1616]: AVC avc: denied { mac_admin } for pid=1616 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:33.849000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:46:33.849000 audit[1616]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d2ed80 a1=c000d1ff08 a2=c000d2ed50 a3=25 items=0 ppid=1 pid=1616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.849000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:46:33.851915 kubelet[1616]: I0412 18:46:33.851892 1616 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Apr 12 18:46:33.852534 kubelet[1616]: I0412 18:46:33.852521 1616 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Apr 12 18:46:33.853476 kubelet[1616]: E0412 18:46:33.853217 1616 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ci-3510-3-3-9-b9e221dcee.novalocal\" not found" Apr 12 18:46:33.853000 audit[1648]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:46:33.853000 audit[1648]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdec226760 a2=0 a3=7ffdec22674c items=0 ppid=1616 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:33.853000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Apr 12 18:46:33.908478 kubelet[1616]: E0412 18:46:33.908417 1616 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.238:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-3-9-b9e221dcee.novalocal?timeout=10s\": dial tcp 172.24.4.238:6443: connect: connection refused" interval="400ms" Apr 12 18:46:33.930626 kubelet[1616]: I0412 18:46:33.930425 1616 topology_manager.go:215] "Topology Admit Handler" podUID="b2fb91332c0c3dbbb425bd3b4da6e9d6" podNamespace="kube-system" podName="kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:33.935137 kubelet[1616]: I0412 18:46:33.935096 1616 topology_manager.go:215] "Topology Admit Handler" podUID="01897d69166c18c417442bc498d667b9" podNamespace="kube-system" podName="kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:33.941937 kubelet[1616]: I0412 18:46:33.941898 1616 topology_manager.go:215] "Topology Admit Handler" podUID="44952c682c90b420f4059a85f2707838" podNamespace="kube-system" podName="kube-scheduler-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:33.956125 systemd[1]: Created slice kubepods-burstable-podb2fb91332c0c3dbbb425bd3b4da6e9d6.slice. Apr 12 18:46:33.968317 systemd[1]: Created slice kubepods-burstable-pod01897d69166c18c417442bc498d667b9.slice. Apr 12 18:46:33.981378 systemd[1]: Created slice kubepods-burstable-pod44952c682c90b420f4059a85f2707838.slice. Apr 12 18:46:34.007151 kubelet[1616]: I0412 18:46:34.007063 1616 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b2fb91332c0c3dbbb425bd3b4da6e9d6-k8s-certs\") pod \"kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"b2fb91332c0c3dbbb425bd3b4da6e9d6\") " pod="kube-system/kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.007431 kubelet[1616]: I0412 18:46:34.007185 1616 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b2fb91332c0c3dbbb425bd3b4da6e9d6-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"b2fb91332c0c3dbbb425bd3b4da6e9d6\") " pod="kube-system/kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.007563 kubelet[1616]: I0412 18:46:34.007473 1616 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.007657 kubelet[1616]: I0412 18:46:34.007587 1616 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.007657 kubelet[1616]: I0412 18:46:34.007654 1616 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.007811 kubelet[1616]: I0412 18:46:34.007715 1616 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b2fb91332c0c3dbbb425bd3b4da6e9d6-ca-certs\") pod \"kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"b2fb91332c0c3dbbb425bd3b4da6e9d6\") " pod="kube-system/kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.007811 kubelet[1616]: I0412 18:46:34.007776 1616 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-ca-certs\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.007949 kubelet[1616]: I0412 18:46:34.007838 1616 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.007949 kubelet[1616]: I0412 18:46:34.007898 1616 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/44952c682c90b420f4059a85f2707838-kubeconfig\") pod \"kube-scheduler-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"44952c682c90b420f4059a85f2707838\") " pod="kube-system/kube-scheduler-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.018927 kubelet[1616]: I0412 18:46:34.018890 1616 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.020076 kubelet[1616]: E0412 18:46:34.020025 1616 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.238:6443/api/v1/nodes\": dial tcp 172.24.4.238:6443: connect: connection refused" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.266104 env[1058]: time="2024-04-12T18:46:34.265913091Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal,Uid:b2fb91332c0c3dbbb425bd3b4da6e9d6,Namespace:kube-system,Attempt:0,}" Apr 12 18:46:34.279081 env[1058]: time="2024-04-12T18:46:34.278896249Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal,Uid:01897d69166c18c417442bc498d667b9,Namespace:kube-system,Attempt:0,}" Apr 12 18:46:34.286500 env[1058]: time="2024-04-12T18:46:34.286407930Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-3-9-b9e221dcee.novalocal,Uid:44952c682c90b420f4059a85f2707838,Namespace:kube-system,Attempt:0,}" Apr 12 18:46:34.310394 kubelet[1616]: E0412 18:46:34.310331 1616 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.238:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-3-9-b9e221dcee.novalocal?timeout=10s\": dial tcp 172.24.4.238:6443: connect: connection refused" interval="800ms" Apr 12 18:46:34.423504 kubelet[1616]: I0412 18:46:34.423396 1616 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.424101 kubelet[1616]: E0412 18:46:34.424047 1616 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.238:6443/api/v1/nodes\": dial tcp 172.24.4.238:6443: connect: connection refused" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:34.759099 kubelet[1616]: W0412 18:46:34.758764 1616 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.24.4.238:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:34.759099 kubelet[1616]: E0412 18:46:34.758857 1616 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.24.4.238:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:34.788192 kubelet[1616]: W0412 18:46:34.788033 1616 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.238:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:34.788192 kubelet[1616]: E0412 18:46:34.788112 1616 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.238:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:34.898912 kubelet[1616]: W0412 18:46:34.898745 1616 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.24.4.238:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:34.898912 kubelet[1616]: E0412 18:46:34.898835 1616 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.24.4.238:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:34.927349 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1588686628.mount: Deactivated successfully. Apr 12 18:46:34.954309 env[1058]: time="2024-04-12T18:46:34.953845140Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:34.963051 env[1058]: time="2024-04-12T18:46:34.962932260Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:34.969455 env[1058]: time="2024-04-12T18:46:34.969317154Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:34.972688 env[1058]: time="2024-04-12T18:46:34.972585163Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:34.985504 env[1058]: time="2024-04-12T18:46:34.985355271Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:34.992746 env[1058]: time="2024-04-12T18:46:34.992636880Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:34.998991 env[1058]: time="2024-04-12T18:46:34.998923870Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:35.005069 env[1058]: time="2024-04-12T18:46:35.005018387Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:35.012000 env[1058]: time="2024-04-12T18:46:35.011946390Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:35.014203 env[1058]: time="2024-04-12T18:46:35.014145270Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:35.022336 env[1058]: time="2024-04-12T18:46:35.021766856Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:35.024516 env[1058]: time="2024-04-12T18:46:35.022777403Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:46:35.112158 kubelet[1616]: E0412 18:46:35.112072 1616 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.238:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-3-9-b9e221dcee.novalocal?timeout=10s\": dial tcp 172.24.4.238:6443: connect: connection refused" interval="1.6s" Apr 12 18:46:35.126865 env[1058]: time="2024-04-12T18:46:35.126664283Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:46:35.126865 env[1058]: time="2024-04-12T18:46:35.126783917Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:46:35.127449 env[1058]: time="2024-04-12T18:46:35.126819174Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:46:35.128154 env[1058]: time="2024-04-12T18:46:35.127993790Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b3fd83af656cc6a70fe6e5f2af4a00925a71f1ac6c72df456983f4a0203701c1 pid=1657 runtime=io.containerd.runc.v2 Apr 12 18:46:35.169330 kubelet[1616]: W0412 18:46:35.169002 1616 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.24.4.238:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-3-9-b9e221dcee.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:35.169330 kubelet[1616]: E0412 18:46:35.169176 1616 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.24.4.238:6443/api/v1/nodes?fieldSelector=metadata.name%3Dci-3510-3-3-9-b9e221dcee.novalocal&limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:35.176569 env[1058]: time="2024-04-12T18:46:35.176362300Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:46:35.176569 env[1058]: time="2024-04-12T18:46:35.176490681Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:46:35.179507 systemd[1]: Started cri-containerd-b3fd83af656cc6a70fe6e5f2af4a00925a71f1ac6c72df456983f4a0203701c1.scope. Apr 12 18:46:35.185849 env[1058]: time="2024-04-12T18:46:35.182789783Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:46:35.185849 env[1058]: time="2024-04-12T18:46:35.183067565Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1a6887f12fffb541787d04dd4b7fba5d8367c6f21ea57f2111cb60638912ba9f pid=1690 runtime=io.containerd.runc.v2 Apr 12 18:46:35.192547 env[1058]: time="2024-04-12T18:46:35.192446761Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:46:35.192547 env[1058]: time="2024-04-12T18:46:35.192500733Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:46:35.192547 env[1058]: time="2024-04-12T18:46:35.192518275Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:46:35.193331 env[1058]: time="2024-04-12T18:46:35.192987557Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b5a151811648f466dedb7ccee14f4ff2e8890db0f76380d53b88ffd8f2ef84f7 pid=1684 runtime=io.containerd.runc.v2 Apr 12 18:46:35.208848 systemd[1]: Started cri-containerd-1a6887f12fffb541787d04dd4b7fba5d8367c6f21ea57f2111cb60638912ba9f.scope. Apr 12 18:46:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.210000 audit: BPF prog-id=64 op=LOAD Apr 12 18:46:35.210000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.210000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233666438336166363536636336613730666536653566326166346130 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233666438336166363536636336613730666536653566326166346130 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.211000 audit: BPF prog-id=65 op=LOAD Apr 12 18:46:35.211000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000389040 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233666438336166363536636336613730666536653566326166346130 Apr 12 18:46:35.213000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.213000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.213000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.213000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.213000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.213000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.213000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.213000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.213000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.213000 audit: BPF prog-id=66 op=LOAD Apr 12 18:46:35.213000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000389088 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233666438336166363536636336613730666536653566326166346130 Apr 12 18:46:35.214000 audit: BPF prog-id=66 op=UNLOAD Apr 12 18:46:35.214000 audit: BPF prog-id=65 op=UNLOAD Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { perfmon } for pid=1667 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit[1667]: AVC avc: denied { bpf } for pid=1667 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.214000 audit: BPF prog-id=67 op=LOAD Apr 12 18:46:35.214000 audit[1667]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000389498 items=0 ppid=1657 pid=1667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233666438336166363536636336613730666536653566326166346130 Apr 12 18:46:35.228789 kubelet[1616]: I0412 18:46:35.228404 1616 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:35.230236 kubelet[1616]: E0412 18:46:35.230206 1616 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.238:6443/api/v1/nodes\": dial tcp 172.24.4.238:6443: connect: connection refused" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:35.231773 systemd[1]: Started cri-containerd-b5a151811648f466dedb7ccee14f4ff2e8890db0f76380d53b88ffd8f2ef84f7.scope. Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.241000 audit: BPF prog-id=68 op=LOAD Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1690 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161363838376631326666666235343137383764303464643462376662 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1690 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161363838376631326666666235343137383764303464643462376662 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit: BPF prog-id=69 op=LOAD Apr 12 18:46:35.242000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001d7030 items=0 ppid=1690 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161363838376631326666666235343137383764303464643462376662 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.242000 audit: BPF prog-id=70 op=LOAD Apr 12 18:46:35.242000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001d7078 items=0 ppid=1690 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.242000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161363838376631326666666235343137383764303464643462376662 Apr 12 18:46:35.243000 audit: BPF prog-id=70 op=UNLOAD Apr 12 18:46:35.243000 audit: BPF prog-id=69 op=UNLOAD Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { perfmon } for pid=1706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit[1706]: AVC avc: denied { bpf } for pid=1706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.243000 audit: BPF prog-id=71 op=LOAD Apr 12 18:46:35.243000 audit[1706]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001d7488 items=0 ppid=1690 pid=1706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.243000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161363838376631326666666235343137383764303464643462376662 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.267000 audit: BPF prog-id=72 op=LOAD Apr 12 18:46:35.273000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.273000 audit[1717]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1684 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613135313831313634386634363664656462376363656531346634 Apr 12 18:46:35.273000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.273000 audit[1717]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1684 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.273000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613135313831313634386634363664656462376363656531346634 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit: BPF prog-id=73 op=LOAD Apr 12 18:46:35.275000 audit[1717]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002210f0 items=0 ppid=1684 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613135313831313634386634363664656462376363656531346634 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit: BPF prog-id=74 op=LOAD Apr 12 18:46:35.275000 audit[1717]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000221138 items=0 ppid=1684 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613135313831313634386634363664656462376363656531346634 Apr 12 18:46:35.275000 audit: BPF prog-id=74 op=UNLOAD Apr 12 18:46:35.275000 audit: BPF prog-id=73 op=UNLOAD Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { perfmon } for pid=1717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit[1717]: AVC avc: denied { bpf } for pid=1717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.275000 audit: BPF prog-id=75 op=LOAD Apr 12 18:46:35.275000 audit[1717]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000221548 items=0 ppid=1684 pid=1717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235613135313831313634386634363664656462376363656531346634 Apr 12 18:46:35.282817 env[1058]: time="2024-04-12T18:46:35.282734326Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal,Uid:b2fb91332c0c3dbbb425bd3b4da6e9d6,Namespace:kube-system,Attempt:0,} returns sandbox id \"b3fd83af656cc6a70fe6e5f2af4a00925a71f1ac6c72df456983f4a0203701c1\"" Apr 12 18:46:35.291485 env[1058]: time="2024-04-12T18:46:35.291437213Z" level=info msg="CreateContainer within sandbox \"b3fd83af656cc6a70fe6e5f2af4a00925a71f1ac6c72df456983f4a0203701c1\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Apr 12 18:46:35.336034 env[1058]: time="2024-04-12T18:46:35.335948779Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ci-3510-3-3-9-b9e221dcee.novalocal,Uid:44952c682c90b420f4059a85f2707838,Namespace:kube-system,Attempt:0,} returns sandbox id \"1a6887f12fffb541787d04dd4b7fba5d8367c6f21ea57f2111cb60638912ba9f\"" Apr 12 18:46:35.337495 env[1058]: time="2024-04-12T18:46:35.337467170Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal,Uid:01897d69166c18c417442bc498d667b9,Namespace:kube-system,Attempt:0,} returns sandbox id \"b5a151811648f466dedb7ccee14f4ff2e8890db0f76380d53b88ffd8f2ef84f7\"" Apr 12 18:46:35.341924 env[1058]: time="2024-04-12T18:46:35.341893334Z" level=info msg="CreateContainer within sandbox \"1a6887f12fffb541787d04dd4b7fba5d8367c6f21ea57f2111cb60638912ba9f\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Apr 12 18:46:35.342146 env[1058]: time="2024-04-12T18:46:35.341950592Z" level=info msg="CreateContainer within sandbox \"b5a151811648f466dedb7ccee14f4ff2e8890db0f76380d53b88ffd8f2ef84f7\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Apr 12 18:46:35.345454 env[1058]: time="2024-04-12T18:46:35.345351099Z" level=info msg="CreateContainer within sandbox \"b3fd83af656cc6a70fe6e5f2af4a00925a71f1ac6c72df456983f4a0203701c1\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"8b53fbab6929b88cc18d79635f379d5771cbb4dd46d949a33ce80c60edba6017\"" Apr 12 18:46:35.347501 env[1058]: time="2024-04-12T18:46:35.347462625Z" level=info msg="StartContainer for \"8b53fbab6929b88cc18d79635f379d5771cbb4dd46d949a33ce80c60edba6017\"" Apr 12 18:46:35.375525 systemd[1]: Started cri-containerd-8b53fbab6929b88cc18d79635f379d5771cbb4dd46d949a33ce80c60edba6017.scope. Apr 12 18:46:35.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.403000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.403000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.404000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.404000 audit: BPF prog-id=76 op=LOAD Apr 12 18:46:35.405000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406626 env[1058]: time="2024-04-12T18:46:35.404464250Z" level=info msg="CreateContainer within sandbox \"1a6887f12fffb541787d04dd4b7fba5d8367c6f21ea57f2111cb60638912ba9f\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"2d84acf2ac0caf527cfc181f97e1b6bedc736feabb640669cea3471b4d04a303\"" Apr 12 18:46:35.407163 env[1058]: time="2024-04-12T18:46:35.407094961Z" level=info msg="StartContainer for \"2d84acf2ac0caf527cfc181f97e1b6bedc736feabb640669cea3471b4d04a303\"" Apr 12 18:46:35.405000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1657 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.405000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862353366626162363932396238386363313864373936333566333739 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1657 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862353366626162363932396238386363313864373936333566333739 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit: BPF prog-id=77 op=LOAD Apr 12 18:46:35.406000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003290b0 items=0 ppid=1657 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862353366626162363932396238386363313864373936333566333739 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit: BPF prog-id=78 op=LOAD Apr 12 18:46:35.406000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003290f8 items=0 ppid=1657 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862353366626162363932396238386363313864373936333566333739 Apr 12 18:46:35.406000 audit: BPF prog-id=78 op=UNLOAD Apr 12 18:46:35.406000 audit: BPF prog-id=77 op=UNLOAD Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { perfmon } for pid=1780 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit[1780]: AVC avc: denied { bpf } for pid=1780 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.406000 audit: BPF prog-id=79 op=LOAD Apr 12 18:46:35.406000 audit[1780]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000329508 items=0 ppid=1657 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.406000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862353366626162363932396238386363313864373936333566333739 Apr 12 18:46:35.422627 env[1058]: time="2024-04-12T18:46:35.422179013Z" level=info msg="CreateContainer within sandbox \"b5a151811648f466dedb7ccee14f4ff2e8890db0f76380d53b88ffd8f2ef84f7\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"50a7ace1bbe4a7bce8e7e106a5bf04d5b58817741a35c1c6dbf54a5920182306\"" Apr 12 18:46:35.423170 env[1058]: time="2024-04-12T18:46:35.423141521Z" level=info msg="StartContainer for \"50a7ace1bbe4a7bce8e7e106a5bf04d5b58817741a35c1c6dbf54a5920182306\"" Apr 12 18:46:35.444806 systemd[1]: Started cri-containerd-2d84acf2ac0caf527cfc181f97e1b6bedc736feabb640669cea3471b4d04a303.scope. Apr 12 18:46:35.458393 systemd[1]: Started cri-containerd-50a7ace1bbe4a7bce8e7e106a5bf04d5b58817741a35c1c6dbf54a5920182306.scope. Apr 12 18:46:35.482116 env[1058]: time="2024-04-12T18:46:35.482064264Z" level=info msg="StartContainer for \"8b53fbab6929b88cc18d79635f379d5771cbb4dd46d949a33ce80c60edba6017\" returns successfully" Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.482000 audit: BPF prog-id=80 op=LOAD Apr 12 18:46:35.483000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.483000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1690 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383461636632616330636166353237636663313831663937653162 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1690 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383461636632616330636166353237636663313831663937653162 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.484000 audit: BPF prog-id=81 op=LOAD Apr 12 18:46:35.484000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0002b5f50 items=0 ppid=1690 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.484000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383461636632616330636166353237636663313831663937653162 Apr 12 18:46:35.485000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.485000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.485000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.485000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.485000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.485000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.485000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.485000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.485000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.485000 audit: BPF prog-id=82 op=LOAD Apr 12 18:46:35.485000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0002b5f98 items=0 ppid=1690 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383461636632616330636166353237636663313831663937653162 Apr 12 18:46:35.485000 audit: BPF prog-id=82 op=UNLOAD Apr 12 18:46:35.485000 audit: BPF prog-id=81 op=UNLOAD Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.486000 audit: BPF prog-id=83 op=LOAD Apr 12 18:46:35.486000 audit[1803]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003383a8 items=0 ppid=1690 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264383461636632616330636166353237636663313831663937653162 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.490000 audit: BPF prog-id=84 op=LOAD Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1684 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530613761636531626265346137626365386537653130366135626630 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1684 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530613761636531626265346137626365386537653130366135626630 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.492000 audit: BPF prog-id=85 op=LOAD Apr 12 18:46:35.492000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028a380 items=0 ppid=1684 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530613761636531626265346137626365386537653130366135626630 Apr 12 18:46:35.493000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.493000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.493000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.493000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.493000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.493000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.493000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.493000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.493000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.493000 audit: BPF prog-id=86 op=LOAD Apr 12 18:46:35.493000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028a3c8 items=0 ppid=1684 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.493000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530613761636531626265346137626365386537653130366135626630 Apr 12 18:46:35.495000 audit: BPF prog-id=86 op=UNLOAD Apr 12 18:46:35.495000 audit: BPF prog-id=85 op=UNLOAD Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:35.496000 audit: BPF prog-id=87 op=LOAD Apr 12 18:46:35.496000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00028a7d8 items=0 ppid=1684 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:35.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530613761636531626265346137626365386537653130366135626630 Apr 12 18:46:35.599085 env[1058]: time="2024-04-12T18:46:35.598926946Z" level=info msg="StartContainer for \"2d84acf2ac0caf527cfc181f97e1b6bedc736feabb640669cea3471b4d04a303\" returns successfully" Apr 12 18:46:35.603244 env[1058]: time="2024-04-12T18:46:35.603211874Z" level=info msg="StartContainer for \"50a7ace1bbe4a7bce8e7e106a5bf04d5b58817741a35c1c6dbf54a5920182306\" returns successfully" Apr 12 18:46:35.822913 kubelet[1616]: E0412 18:46:35.822875 1616 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.24.4.238:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:35.967405 kubelet[1616]: E0412 18:46:35.967187 1616 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ci-3510-3-3-9-b9e221dcee.novalocal.17c59cc2c899f98c", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ci-3510-3-3-9-b9e221dcee.novalocal", UID:"ci-3510-3-3-9-b9e221dcee.novalocal", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ci-3510-3-3-9-b9e221dcee.novalocal"}, FirstTimestamp:time.Date(2024, time.April, 12, 18, 46, 33, 687464332, time.Local), LastTimestamp:time.Date(2024, time.April, 12, 18, 46, 33, 687464332, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ci-3510-3-3-9-b9e221dcee.novalocal"}': 'Post "https://172.24.4.238:6443/api/v1/namespaces/default/events": dial tcp 172.24.4.238:6443: connect: connection refused'(may retry after sleeping) Apr 12 18:46:36.640468 kubelet[1616]: W0412 18:46:36.640380 1616 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.24.4.238:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:36.640468 kubelet[1616]: E0412 18:46:36.640470 1616 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.24.4.238:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.24.4.238:6443: connect: connection refused Apr 12 18:46:36.712811 kubelet[1616]: E0412 18:46:36.712770 1616 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.24.4.238:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ci-3510-3-3-9-b9e221dcee.novalocal?timeout=10s\": dial tcp 172.24.4.238:6443: connect: connection refused" interval="3.2s" Apr 12 18:46:36.832886 kubelet[1616]: I0412 18:46:36.832846 1616 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:36.833283 kubelet[1616]: E0412 18:46:36.833233 1616 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.24.4.238:6443/api/v1/nodes\": dial tcp 172.24.4.238:6443: connect: connection refused" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:37.299000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:37.299000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000be2000 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:46:37.299000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:46:37.300000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:37.300000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0001565a0 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:46:37.300000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:46:38.853000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.856405 kernel: kauditd_printk_skb: 637 callbacks suppressed Apr 12 18:46:38.856487 kernel: audit: type=1400 audit(1712947598.853:658): avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.853000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c002fe7cb0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:46:38.869286 kernel: audit: type=1300 audit(1712947598.853:658): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c002fe7cb0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:46:38.853000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:46:38.875279 kernel: audit: type=1327 audit(1712947598.853:658): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:46:38.865000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=524892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.890277 kernel: audit: type=1400 audit(1712947598.865:659): avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=524892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.865000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0048fd920 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:46:38.904294 kernel: audit: type=1300 audit(1712947598.865:659): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0048fd920 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:46:38.865000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:46:38.922277 kernel: audit: type=1327 audit(1712947598.865:659): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:46:38.869000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=524886 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.930287 kernel: audit: type=1400 audit(1712947598.869:660): avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=524886 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.930411 kernel: audit: type=1300 audit(1712947598.869:660): arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006e6c9f0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:46:38.869000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c006e6c9f0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:46:38.937480 kernel: audit: type=1327 audit(1712947598.869:660): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:46:38.869000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:46:38.915000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.947631 kernel: audit: type=1400 audit(1712947598.915:661): avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.915000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c003cd18c0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:46:38.915000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:46:38.915000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.915000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c006feff20 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:46:38.915000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:46:38.915000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:38.915000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c003cd1b60 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:46:38.915000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:46:39.428864 kubelet[1616]: E0412 18:46:39.428789 1616 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ci-3510-3-3-9-b9e221dcee.novalocal" not found Apr 12 18:46:39.694518 kubelet[1616]: I0412 18:46:39.694276 1616 apiserver.go:52] "Watching apiserver" Apr 12 18:46:39.806929 kubelet[1616]: I0412 18:46:39.806841 1616 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Apr 12 18:46:39.814957 kubelet[1616]: E0412 18:46:39.814865 1616 csi_plugin.go:295] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "ci-3510-3-3-9-b9e221dcee.novalocal" not found Apr 12 18:46:39.927656 kubelet[1616]: E0412 18:46:39.927553 1616 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ci-3510-3-3-9-b9e221dcee.novalocal\" not found" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:40.038864 kubelet[1616]: I0412 18:46:40.038815 1616 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:40.050186 kubelet[1616]: I0412 18:46:40.050130 1616 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:40.943573 kubelet[1616]: W0412 18:46:40.943493 1616 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Apr 12 18:46:42.067157 systemd[1]: Reloading. Apr 12 18:46:42.226325 /usr/lib/systemd/system-generators/torcx-generator[1901]: time="2024-04-12T18:46:42Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:46:42.226359 /usr/lib/systemd/system-generators/torcx-generator[1901]: time="2024-04-12T18:46:42Z" level=info msg="torcx already run" Apr 12 18:46:42.331688 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:46:42.331708 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:46:42.355995 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:46:42.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.489000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.489000 audit: BPF prog-id=88 op=LOAD Apr 12 18:46:42.489000 audit: BPF prog-id=49 op=UNLOAD Apr 12 18:46:42.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.493000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.495000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.495000 audit: BPF prog-id=89 op=LOAD Apr 12 18:46:42.496000 audit: BPF prog-id=84 op=UNLOAD Apr 12 18:46:42.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.499000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.499000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.500000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.501000 audit: BPF prog-id=90 op=LOAD Apr 12 18:46:42.501000 audit: BPF prog-id=72 op=UNLOAD Apr 12 18:46:42.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.504000 audit: BPF prog-id=91 op=LOAD Apr 12 18:46:42.504000 audit: BPF prog-id=50 op=UNLOAD Apr 12 18:46:42.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit: BPF prog-id=92 op=LOAD Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.505000 audit: BPF prog-id=93 op=LOAD Apr 12 18:46:42.506000 audit: BPF prog-id=51 op=UNLOAD Apr 12 18:46:42.506000 audit: BPF prog-id=52 op=UNLOAD Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.507000 audit: BPF prog-id=94 op=LOAD Apr 12 18:46:42.507000 audit: BPF prog-id=53 op=UNLOAD Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit: BPF prog-id=95 op=LOAD Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.509000 audit: BPF prog-id=96 op=LOAD Apr 12 18:46:42.509000 audit: BPF prog-id=54 op=UNLOAD Apr 12 18:46:42.509000 audit: BPF prog-id=55 op=UNLOAD Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.510000 audit: BPF prog-id=97 op=LOAD Apr 12 18:46:42.511000 audit: BPF prog-id=56 op=UNLOAD Apr 12 18:46:42.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.511000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.511000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit: BPF prog-id=98 op=LOAD Apr 12 18:46:42.512000 audit: BPF prog-id=80 op=UNLOAD Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.512000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.513000 audit: BPF prog-id=99 op=LOAD Apr 12 18:46:42.513000 audit: BPF prog-id=64 op=UNLOAD Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.514000 audit: BPF prog-id=100 op=LOAD Apr 12 18:46:42.514000 audit: BPF prog-id=57 op=UNLOAD Apr 12 18:46:42.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.516000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.516000 audit: BPF prog-id=101 op=LOAD Apr 12 18:46:42.516000 audit: BPF prog-id=68 op=UNLOAD Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit: BPF prog-id=102 op=LOAD Apr 12 18:46:42.519000 audit: BPF prog-id=58 op=UNLOAD Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit: BPF prog-id=103 op=LOAD Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.520000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.520000 audit: BPF prog-id=104 op=LOAD Apr 12 18:46:42.520000 audit: BPF prog-id=59 op=UNLOAD Apr 12 18:46:42.520000 audit: BPF prog-id=60 op=UNLOAD Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.521000 audit: BPF prog-id=105 op=LOAD Apr 12 18:46:42.521000 audit: BPF prog-id=76 op=UNLOAD Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit: BPF prog-id=106 op=LOAD Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.522000 audit: BPF prog-id=107 op=LOAD Apr 12 18:46:42.522000 audit: BPF prog-id=61 op=UNLOAD Apr 12 18:46:42.522000 audit: BPF prog-id=62 op=UNLOAD Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.525000 audit: BPF prog-id=108 op=LOAD Apr 12 18:46:42.525000 audit: BPF prog-id=63 op=UNLOAD Apr 12 18:46:42.548920 systemd[1]: Stopping kubelet.service... Apr 12 18:46:42.563561 systemd[1]: kubelet.service: Deactivated successfully. Apr 12 18:46:42.563797 systemd[1]: Stopped kubelet.service. Apr 12 18:46:42.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:42.563863 systemd[1]: kubelet.service: Consumed 1.305s CPU time. Apr 12 18:46:42.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:42.565876 systemd[1]: Started kubelet.service. Apr 12 18:46:42.665758 kubelet[1948]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:46:42.666294 kubelet[1948]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Apr 12 18:46:42.666389 kubelet[1948]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:46:42.666578 kubelet[1948]: I0412 18:46:42.666532 1948 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Apr 12 18:46:42.676665 kubelet[1948]: I0412 18:46:42.676629 1948 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Apr 12 18:46:42.676866 kubelet[1948]: I0412 18:46:42.676842 1948 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Apr 12 18:46:42.677389 kubelet[1948]: I0412 18:46:42.677376 1948 server.go:895] "Client rotation is on, will bootstrap in background" Apr 12 18:46:42.679370 kubelet[1948]: I0412 18:46:42.679356 1948 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Apr 12 18:46:42.680809 kubelet[1948]: I0412 18:46:42.680789 1948 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Apr 12 18:46:42.690186 kubelet[1948]: I0412 18:46:42.690161 1948 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Apr 12 18:46:42.690617 kubelet[1948]: I0412 18:46:42.690591 1948 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Apr 12 18:46:42.690924 kubelet[1948]: I0412 18:46:42.690896 1948 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Apr 12 18:46:42.691094 kubelet[1948]: I0412 18:46:42.691082 1948 topology_manager.go:138] "Creating topology manager with none policy" Apr 12 18:46:42.691184 kubelet[1948]: I0412 18:46:42.691174 1948 container_manager_linux.go:301] "Creating device plugin manager" Apr 12 18:46:42.691403 kubelet[1948]: I0412 18:46:42.691392 1948 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:46:42.691595 kubelet[1948]: I0412 18:46:42.691584 1948 kubelet.go:393] "Attempting to sync node with API server" Apr 12 18:46:42.691702 kubelet[1948]: I0412 18:46:42.691683 1948 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Apr 12 18:46:42.691805 kubelet[1948]: I0412 18:46:42.691794 1948 kubelet.go:309] "Adding apiserver pod source" Apr 12 18:46:42.691900 kubelet[1948]: I0412 18:46:42.691890 1948 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Apr 12 18:46:42.697038 kubelet[1948]: I0412 18:46:42.697016 1948 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Apr 12 18:46:42.705202 kubelet[1948]: I0412 18:46:42.705175 1948 server.go:1232] "Started kubelet" Apr 12 18:46:42.713295 kubelet[1948]: I0412 18:46:42.713269 1948 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Apr 12 18:46:42.714110 kubelet[1948]: I0412 18:46:42.714095 1948 server.go:462] "Adding debug handlers to kubelet server" Apr 12 18:46:42.715593 kubelet[1948]: I0412 18:46:42.715578 1948 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Apr 12 18:46:42.715839 kubelet[1948]: I0412 18:46:42.715824 1948 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Apr 12 18:46:42.715000 audit[1948]: AVC avc: denied { mac_admin } for pid=1948 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.715000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:46:42.715000 audit[1948]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d2bec0 a1=c000bdf4a0 a2=c000d2be90 a3=25 items=0 ppid=1 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:42.715000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:46:42.717365 kubelet[1948]: I0412 18:46:42.717352 1948 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Apr 12 18:46:42.716000 audit[1948]: AVC avc: denied { mac_admin } for pid=1948 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.716000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:46:42.716000 audit[1948]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cc7e60 a1=c000bdf4b8 a2=c000d2bf50 a3=25 items=0 ppid=1 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:42.716000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:46:42.717716 kubelet[1948]: I0412 18:46:42.717703 1948 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Apr 12 18:46:42.717806 kubelet[1948]: I0412 18:46:42.717795 1948 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Apr 12 18:46:42.718902 kubelet[1948]: E0412 18:46:42.718868 1948 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Apr 12 18:46:42.718974 kubelet[1948]: E0412 18:46:42.718909 1948 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Apr 12 18:46:42.737137 kubelet[1948]: I0412 18:46:42.737110 1948 volume_manager.go:291] "Starting Kubelet Volume Manager" Apr 12 18:46:42.737807 kubelet[1948]: I0412 18:46:42.737792 1948 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Apr 12 18:46:42.738005 kubelet[1948]: I0412 18:46:42.737992 1948 reconciler_new.go:29] "Reconciler: start to sync state" Apr 12 18:46:42.754660 kubelet[1948]: I0412 18:46:42.754547 1948 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Apr 12 18:46:42.756231 kubelet[1948]: I0412 18:46:42.756217 1948 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Apr 12 18:46:42.756395 kubelet[1948]: I0412 18:46:42.756383 1948 status_manager.go:217] "Starting to sync pod status with apiserver" Apr 12 18:46:42.756481 kubelet[1948]: I0412 18:46:42.756471 1948 kubelet.go:2303] "Starting kubelet main sync loop" Apr 12 18:46:42.756623 kubelet[1948]: E0412 18:46:42.756611 1948 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Apr 12 18:46:42.839182 kubelet[1948]: I0412 18:46:42.839146 1948 cpu_manager.go:214] "Starting CPU manager" policy="none" Apr 12 18:46:42.839182 kubelet[1948]: I0412 18:46:42.839179 1948 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Apr 12 18:46:42.839391 kubelet[1948]: I0412 18:46:42.839202 1948 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:46:42.839881 kubelet[1948]: I0412 18:46:42.839856 1948 state_mem.go:88] "Updated default CPUSet" cpuSet="" Apr 12 18:46:42.839941 kubelet[1948]: I0412 18:46:42.839892 1948 state_mem.go:96] "Updated CPUSet assignments" assignments={} Apr 12 18:46:42.839941 kubelet[1948]: I0412 18:46:42.839902 1948 policy_none.go:49] "None policy: Start" Apr 12 18:46:42.841916 kubelet[1948]: I0412 18:46:42.841884 1948 memory_manager.go:169] "Starting memorymanager" policy="None" Apr 12 18:46:42.842007 kubelet[1948]: I0412 18:46:42.841922 1948 state_mem.go:35] "Initializing new in-memory state store" Apr 12 18:46:42.842921 kubelet[1948]: I0412 18:46:42.842902 1948 state_mem.go:75] "Updated machine memory state" Apr 12 18:46:42.852554 kubelet[1948]: I0412 18:46:42.852527 1948 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Apr 12 18:46:42.851000 audit[1948]: AVC avc: denied { mac_admin } for pid=1948 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:42.851000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:46:42.851000 audit[1948]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00131a960 a1=c001346900 a2=c00131a930 a3=25 items=0 ppid=1 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:42.851000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:46:42.853396 kubelet[1948]: I0412 18:46:42.853028 1948 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Apr 12 18:46:42.857772 kubelet[1948]: I0412 18:46:42.857350 1948 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Apr 12 18:46:42.859548 kubelet[1948]: I0412 18:46:42.859532 1948 topology_manager.go:215] "Topology Admit Handler" podUID="b2fb91332c0c3dbbb425bd3b4da6e9d6" podNamespace="kube-system" podName="kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:42.859722 kubelet[1948]: I0412 18:46:42.859709 1948 topology_manager.go:215] "Topology Admit Handler" podUID="01897d69166c18c417442bc498d667b9" podNamespace="kube-system" podName="kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:42.859828 kubelet[1948]: I0412 18:46:42.859816 1948 topology_manager.go:215] "Topology Admit Handler" podUID="44952c682c90b420f4059a85f2707838" podNamespace="kube-system" podName="kube-scheduler-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:42.868661 kubelet[1948]: I0412 18:46:42.868633 1948 kubelet_node_status.go:70] "Attempting to register node" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:42.871310 kubelet[1948]: W0412 18:46:42.871292 1948 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Apr 12 18:46:42.888868 kubelet[1948]: W0412 18:46:42.888846 1948 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Apr 12 18:46:42.890108 kubelet[1948]: W0412 18:46:42.890095 1948 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Apr 12 18:46:42.890301 kubelet[1948]: E0412 18:46:42.890285 1948 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" already exists" pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:42.897305 kubelet[1948]: I0412 18:46:42.897281 1948 kubelet_node_status.go:108] "Node was previously registered" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:42.897524 kubelet[1948]: I0412 18:46:42.897498 1948 kubelet_node_status.go:73] "Successfully registered node" node="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:42.940018 kubelet[1948]: I0412 18:46:42.939927 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b2fb91332c0c3dbbb425bd3b4da6e9d6-ca-certs\") pod \"kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"b2fb91332c0c3dbbb425bd3b4da6e9d6\") " pod="kube-system/kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.040925 kubelet[1948]: I0412 18:46:43.040882 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b2fb91332c0c3dbbb425bd3b4da6e9d6-k8s-certs\") pod \"kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"b2fb91332c0c3dbbb425bd3b4da6e9d6\") " pod="kube-system/kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.041297 kubelet[1948]: I0412 18:46:43.041284 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b2fb91332c0c3dbbb425bd3b4da6e9d6-usr-share-ca-certificates\") pod \"kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"b2fb91332c0c3dbbb425bd3b4da6e9d6\") " pod="kube-system/kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.041446 kubelet[1948]: I0412 18:46:43.041434 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-kubeconfig\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.041743 kubelet[1948]: I0412 18:46:43.041731 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-flexvolume-dir\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.041893 kubelet[1948]: I0412 18:46:43.041882 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-k8s-certs\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.042073 kubelet[1948]: I0412 18:46:43.042032 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-usr-share-ca-certificates\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.042189 kubelet[1948]: I0412 18:46:43.042179 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/44952c682c90b420f4059a85f2707838-kubeconfig\") pod \"kube-scheduler-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"44952c682c90b420f4059a85f2707838\") " pod="kube-system/kube-scheduler-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.042326 kubelet[1948]: I0412 18:46:43.042315 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/01897d69166c18c417442bc498d667b9-ca-certs\") pod \"kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal\" (UID: \"01897d69166c18c417442bc498d667b9\") " pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.584000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:43.584000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000de9500 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:46:43.584000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:46:43.585000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:43.585000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000de96c0 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:46:43.585000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:46:43.587000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:43.587000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000de9880 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:46:43.587000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:46:43.587000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000de9a40 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:46:43.587000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:46:43.587000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:46:43.693966 kubelet[1948]: I0412 18:46:43.693851 1948 apiserver.go:52] "Watching apiserver" Apr 12 18:46:43.738336 kubelet[1948]: I0412 18:46:43.738235 1948 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Apr 12 18:46:43.819868 kubelet[1948]: W0412 18:46:43.819791 1948 warnings.go:70] metadata.name: this is used in the Pod's hostname, which can result in surprising behavior; a DNS label is recommended: [must not contain dots] Apr 12 18:46:43.820699 kubelet[1948]: E0412 18:46:43.820645 1948 kubelet.go:1890] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal\" already exists" pod="kube-system/kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:46:43.918234 kubelet[1948]: I0412 18:46:43.918044 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ci-3510-3-3-9-b9e221dcee.novalocal" podStartSLOduration=1.9179924210000001 podCreationTimestamp="2024-04-12 18:46:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:46:43.903540753 +0000 UTC m=+1.316491182" watchObservedRunningTime="2024-04-12 18:46:43.917992421 +0000 UTC m=+1.330942860" Apr 12 18:46:43.918234 kubelet[1948]: I0412 18:46:43.918273 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ci-3510-3-3-9-b9e221dcee.novalocal" podStartSLOduration=1.91821489 podCreationTimestamp="2024-04-12 18:46:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:46:43.916533153 +0000 UTC m=+1.329483602" watchObservedRunningTime="2024-04-12 18:46:43.91821489 +0000 UTC m=+1.331165319" Apr 12 18:46:43.926024 kubelet[1948]: I0412 18:46:43.925986 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ci-3510-3-3-9-b9e221dcee.novalocal" podStartSLOduration=3.9259449589999997 podCreationTimestamp="2024-04-12 18:46:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:46:43.925227964 +0000 UTC m=+1.338178413" watchObservedRunningTime="2024-04-12 18:46:43.925944959 +0000 UTC m=+1.338895388" Apr 12 18:46:45.151216 kernel: kauditd_printk_skb: 278 callbacks suppressed Apr 12 18:46:45.151452 kernel: audit: type=1400 audit(1712947605.143:917): avc: denied { watch } for pid=1841 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=524917 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Apr 12 18:46:45.143000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=524917 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Apr 12 18:46:45.143000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a36240 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:46:45.158296 kernel: audit: type=1300 audit(1712947605.143:917): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a36240 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:46:45.143000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:46:45.173276 kernel: audit: type=1327 audit(1712947605.143:917): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:46:47.371812 sudo[1194]: pam_unix(sudo:session): session closed for user root Apr 12 18:46:47.370000 audit[1194]: USER_END pid=1194 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:46:47.370000 audit[1194]: CRED_DISP pid=1194 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:46:47.389356 kernel: audit: type=1106 audit(1712947607.370:918): pid=1194 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:46:47.389497 kernel: audit: type=1104 audit(1712947607.370:919): pid=1194 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:46:47.858195 sshd[1190]: pam_unix(sshd:session): session closed for user core Apr 12 18:46:47.860000 audit[1190]: USER_END pid=1190 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:46:47.875318 kernel: audit: type=1106 audit(1712947607.860:920): pid=1190 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:46:47.861000 audit[1190]: CRED_DISP pid=1190 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:46:47.877031 systemd[1]: sshd@6-172.24.4.238:22-172.24.4.1:49832.service: Deactivated successfully. Apr 12 18:46:47.878754 systemd[1]: session-7.scope: Deactivated successfully. Apr 12 18:46:47.879118 systemd[1]: session-7.scope: Consumed 5.326s CPU time. Apr 12 18:46:47.885872 systemd-logind[1047]: Session 7 logged out. Waiting for processes to exit. Apr 12 18:46:47.886586 kernel: audit: type=1104 audit(1712947607.861:921): pid=1190 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:46:47.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.238:22-172.24.4.1:49832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:47.898627 kernel: audit: type=1131 audit(1712947607.874:922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.24.4.238:22-172.24.4.1:49832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:46:47.898585 systemd-logind[1047]: Removed session 7. Apr 12 18:46:56.511802 kubelet[1948]: I0412 18:46:56.511777 1948 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Apr 12 18:46:56.512786 env[1058]: time="2024-04-12T18:46:56.512700889Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Apr 12 18:46:56.513152 kubelet[1948]: I0412 18:46:56.513137 1948 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Apr 12 18:46:56.583231 kubelet[1948]: I0412 18:46:56.583198 1948 topology_manager.go:215] "Topology Admit Handler" podUID="c76b1190-a0ce-4a27-95d9-88928f41f56d" podNamespace="kube-system" podName="kube-proxy-vs8vd" Apr 12 18:46:56.589501 systemd[1]: Created slice kubepods-besteffort-podc76b1190_a0ce_4a27_95d9_88928f41f56d.slice. Apr 12 18:46:56.602659 kubelet[1948]: W0412 18:46:56.602610 1948 reflector.go:535] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:46:56.602908 kubelet[1948]: E0412 18:46:56.602896 1948 reflector.go:147] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:46:56.603023 kubelet[1948]: W0412 18:46:56.602647 1948 reflector.go:535] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:46:56.603128 kubelet[1948]: E0412 18:46:56.603116 1948 reflector.go:147] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:46:56.641930 kubelet[1948]: I0412 18:46:56.641897 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/c76b1190-a0ce-4a27-95d9-88928f41f56d-kube-proxy\") pod \"kube-proxy-vs8vd\" (UID: \"c76b1190-a0ce-4a27-95d9-88928f41f56d\") " pod="kube-system/kube-proxy-vs8vd" Apr 12 18:46:56.642262 kubelet[1948]: I0412 18:46:56.642233 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c76b1190-a0ce-4a27-95d9-88928f41f56d-xtables-lock\") pod \"kube-proxy-vs8vd\" (UID: \"c76b1190-a0ce-4a27-95d9-88928f41f56d\") " pod="kube-system/kube-proxy-vs8vd" Apr 12 18:46:56.642403 kubelet[1948]: I0412 18:46:56.642391 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pt2fp\" (UniqueName: \"kubernetes.io/projected/c76b1190-a0ce-4a27-95d9-88928f41f56d-kube-api-access-pt2fp\") pod \"kube-proxy-vs8vd\" (UID: \"c76b1190-a0ce-4a27-95d9-88928f41f56d\") " pod="kube-system/kube-proxy-vs8vd" Apr 12 18:46:56.642555 kubelet[1948]: I0412 18:46:56.642543 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c76b1190-a0ce-4a27-95d9-88928f41f56d-lib-modules\") pod \"kube-proxy-vs8vd\" (UID: \"c76b1190-a0ce-4a27-95d9-88928f41f56d\") " pod="kube-system/kube-proxy-vs8vd" Apr 12 18:46:56.775446 kubelet[1948]: I0412 18:46:56.775312 1948 topology_manager.go:215] "Topology Admit Handler" podUID="7a4e87b3-d97a-4273-abf5-bb23ee14925c" podNamespace="tigera-operator" podName="tigera-operator-6bfc79cb9c-24ncm" Apr 12 18:46:56.781195 systemd[1]: Created slice kubepods-besteffort-pod7a4e87b3_d97a_4273_abf5_bb23ee14925c.slice. Apr 12 18:46:56.788623 kubelet[1948]: W0412 18:46:56.788580 1948 reflector.go:535] object-"tigera-operator"/"kubernetes-services-endpoint": failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:46:56.788623 kubelet[1948]: E0412 18:46:56.788626 1948 reflector.go:147] object-"tigera-operator"/"kubernetes-services-endpoint": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kubernetes-services-endpoint" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:46:56.788997 kubelet[1948]: W0412 18:46:56.788977 1948 reflector.go:535] object-"tigera-operator"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:46:56.789110 kubelet[1948]: E0412 18:46:56.789099 1948 reflector.go:147] object-"tigera-operator"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:46:56.844196 kubelet[1948]: I0412 18:46:56.844158 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mv4j4\" (UniqueName: \"kubernetes.io/projected/7a4e87b3-d97a-4273-abf5-bb23ee14925c-kube-api-access-mv4j4\") pod \"tigera-operator-6bfc79cb9c-24ncm\" (UID: \"7a4e87b3-d97a-4273-abf5-bb23ee14925c\") " pod="tigera-operator/tigera-operator-6bfc79cb9c-24ncm" Apr 12 18:46:56.844516 kubelet[1948]: I0412 18:46:56.844494 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/7a4e87b3-d97a-4273-abf5-bb23ee14925c-var-lib-calico\") pod \"tigera-operator-6bfc79cb9c-24ncm\" (UID: \"7a4e87b3-d97a-4273-abf5-bb23ee14925c\") " pod="tigera-operator/tigera-operator-6bfc79cb9c-24ncm" Apr 12 18:46:57.763571 kubelet[1948]: E0412 18:46:57.763406 1948 configmap.go:199] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Apr 12 18:46:57.764530 kubelet[1948]: E0412 18:46:57.763635 1948 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/c76b1190-a0ce-4a27-95d9-88928f41f56d-kube-proxy podName:c76b1190-a0ce-4a27-95d9-88928f41f56d nodeName:}" failed. No retries permitted until 2024-04-12 18:46:58.263581368 +0000 UTC m=+15.676531847 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/c76b1190-a0ce-4a27-95d9-88928f41f56d-kube-proxy") pod "kube-proxy-vs8vd" (UID: "c76b1190-a0ce-4a27-95d9-88928f41f56d") : failed to sync configmap cache: timed out waiting for the condition Apr 12 18:46:58.004915 env[1058]: time="2024-04-12T18:46:58.004777693Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-6bfc79cb9c-24ncm,Uid:7a4e87b3-d97a-4273-abf5-bb23ee14925c,Namespace:tigera-operator,Attempt:0,}" Apr 12 18:46:58.083815 env[1058]: time="2024-04-12T18:46:58.083420097Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:46:58.083815 env[1058]: time="2024-04-12T18:46:58.083573084Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:46:58.085952 env[1058]: time="2024-04-12T18:46:58.083624641Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:46:58.085952 env[1058]: time="2024-04-12T18:46:58.084908289Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ab653b2eb05c54981cd500f47c4a0cc14635735b93e8dff620738e0a98d10bb0 pid=2030 runtime=io.containerd.runc.v2 Apr 12 18:46:58.138234 systemd[1]: Started cri-containerd-ab653b2eb05c54981cd500f47c4a0cc14635735b93e8dff620738e0a98d10bb0.scope. Apr 12 18:46:58.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161836 kernel: audit: type=1400 audit(1712947618.153:923): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.162001 kernel: audit: type=1400 audit(1712947618.153:924): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.170856 kernel: audit: type=1400 audit(1712947618.153:925): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.170953 kernel: audit: type=1400 audit(1712947618.153:926): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.170996 kernel: audit: type=1400 audit(1712947618.153:927): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.178638 kernel: audit: type=1400 audit(1712947618.153:928): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.178956 kernel: audit: type=1400 audit(1712947618.153:929): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.192919 kernel: audit: type=1400 audit(1712947618.153:930): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.192970 kernel: audit: type=1400 audit(1712947618.153:931): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.199312 kernel: audit: type=1400 audit(1712947618.160:932): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.160000 audit: BPF prog-id=109 op=LOAD Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2030 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363533623265623035633534393831636435303066343763346130 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2030 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363533623265623035633534393831636435303066343763346130 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.161000 audit: BPF prog-id=110 op=LOAD Apr 12 18:46:58.161000 audit[2040]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000218360 items=0 ppid=2030 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.161000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363533623265623035633534393831636435303066343763346130 Apr 12 18:46:58.166000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.166000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.166000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.166000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.166000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.166000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.166000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.166000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.166000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.166000 audit: BPF prog-id=111 op=LOAD Apr 12 18:46:58.166000 audit[2040]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002183a8 items=0 ppid=2030 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363533623265623035633534393831636435303066343763346130 Apr 12 18:46:58.173000 audit: BPF prog-id=111 op=UNLOAD Apr 12 18:46:58.173000 audit: BPF prog-id=110 op=UNLOAD Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { perfmon } for pid=2040 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit[2040]: AVC avc: denied { bpf } for pid=2040 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.173000 audit: BPF prog-id=112 op=LOAD Apr 12 18:46:58.173000 audit[2040]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002187b8 items=0 ppid=2030 pid=2040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.173000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162363533623265623035633534393831636435303066343763346130 Apr 12 18:46:58.230817 env[1058]: time="2024-04-12T18:46:58.230737754Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-6bfc79cb9c-24ncm,Uid:7a4e87b3-d97a-4273-abf5-bb23ee14925c,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"ab653b2eb05c54981cd500f47c4a0cc14635735b93e8dff620738e0a98d10bb0\"" Apr 12 18:46:58.235813 env[1058]: time="2024-04-12T18:46:58.235773291Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.7\"" Apr 12 18:46:58.400892 env[1058]: time="2024-04-12T18:46:58.400667355Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vs8vd,Uid:c76b1190-a0ce-4a27-95d9-88928f41f56d,Namespace:kube-system,Attempt:0,}" Apr 12 18:46:58.442686 env[1058]: time="2024-04-12T18:46:58.442465944Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:46:58.442686 env[1058]: time="2024-04-12T18:46:58.442599424Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:46:58.443297 env[1058]: time="2024-04-12T18:46:58.443150439Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:46:58.444196 env[1058]: time="2024-04-12T18:46:58.444051579Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5e398a1a5edfb1f733b3119384e003cbaf96091d928265259093e25a1122d606 pid=2072 runtime=io.containerd.runc.v2 Apr 12 18:46:58.473754 systemd[1]: Started cri-containerd-5e398a1a5edfb1f733b3119384e003cbaf96091d928265259093e25a1122d606.scope. Apr 12 18:46:58.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.503000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.504000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.504000 audit: BPF prog-id=113 op=LOAD Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2072 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565333938613161356564666231663733336233313139333834653030 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2072 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565333938613161356564666231663733336233313139333834653030 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.505000 audit: BPF prog-id=114 op=LOAD Apr 12 18:46:58.505000 audit[2084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000334850 items=0 ppid=2072 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.505000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565333938613161356564666231663733336233313139333834653030 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit: BPF prog-id=115 op=LOAD Apr 12 18:46:58.506000 audit[2084]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000334898 items=0 ppid=2072 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565333938613161356564666231663733336233313139333834653030 Apr 12 18:46:58.506000 audit: BPF prog-id=115 op=UNLOAD Apr 12 18:46:58.506000 audit: BPF prog-id=114 op=UNLOAD Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.506000 audit: BPF prog-id=116 op=LOAD Apr 12 18:46:58.506000 audit[2084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000334ca8 items=0 ppid=2072 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565333938613161356564666231663733336233313139333834653030 Apr 12 18:46:58.531945 env[1058]: time="2024-04-12T18:46:58.531876991Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vs8vd,Uid:c76b1190-a0ce-4a27-95d9-88928f41f56d,Namespace:kube-system,Attempt:0,} returns sandbox id \"5e398a1a5edfb1f733b3119384e003cbaf96091d928265259093e25a1122d606\"" Apr 12 18:46:58.538112 env[1058]: time="2024-04-12T18:46:58.538053720Z" level=info msg="CreateContainer within sandbox \"5e398a1a5edfb1f733b3119384e003cbaf96091d928265259093e25a1122d606\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Apr 12 18:46:58.564661 env[1058]: time="2024-04-12T18:46:58.564592610Z" level=info msg="CreateContainer within sandbox \"5e398a1a5edfb1f733b3119384e003cbaf96091d928265259093e25a1122d606\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"ece46464dde92fd8ba4663d264d747bc4d5769946c4525c56d8e98557b72c657\"" Apr 12 18:46:58.565550 env[1058]: time="2024-04-12T18:46:58.565438818Z" level=info msg="StartContainer for \"ece46464dde92fd8ba4663d264d747bc4d5769946c4525c56d8e98557b72c657\"" Apr 12 18:46:58.585208 systemd[1]: Started cri-containerd-ece46464dde92fd8ba4663d264d747bc4d5769946c4525c56d8e98557b72c657.scope. Apr 12 18:46:58.594037 systemd[1]: run-containerd-runc-k8s.io-ab653b2eb05c54981cd500f47c4a0cc14635735b93e8dff620738e0a98d10bb0-runc.RQcRvd.mount: Deactivated successfully. Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fc8dec887a8 items=0 ppid=2072 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563653436343634646465393266643862613436363364323634643734 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.609000 audit: BPF prog-id=117 op=LOAD Apr 12 18:46:58.609000 audit[2114]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000391ea8 items=0 ppid=2072 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563653436343634646465393266643862613436363364323634643734 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit: BPF prog-id=118 op=LOAD Apr 12 18:46:58.611000 audit[2114]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000391ef8 items=0 ppid=2072 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563653436343634646465393266643862613436363364323634643734 Apr 12 18:46:58.611000 audit: BPF prog-id=118 op=UNLOAD Apr 12 18:46:58.611000 audit: BPF prog-id=117 op=UNLOAD Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { perfmon } for pid=2114 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit[2114]: AVC avc: denied { bpf } for pid=2114 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:46:58.611000 audit: BPF prog-id=119 op=LOAD Apr 12 18:46:58.611000 audit[2114]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000391f88 items=0 ppid=2072 pid=2114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:46:58.611000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6563653436343634646465393266643862613436363364323634643734 Apr 12 18:46:58.646632 env[1058]: time="2024-04-12T18:46:58.646555543Z" level=info msg="StartContainer for \"ece46464dde92fd8ba4663d264d747bc4d5769946c4525c56d8e98557b72c657\" returns successfully" Apr 12 18:46:58.886280 kubelet[1948]: I0412 18:46:58.886179 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-vs8vd" podStartSLOduration=2.886015902 podCreationTimestamp="2024-04-12 18:46:56 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:46:58.885116776 +0000 UTC m=+16.298067255" watchObservedRunningTime="2024-04-12 18:46:58.886015902 +0000 UTC m=+16.298966382" Apr 12 18:47:00.116373 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4271827502.mount: Deactivated successfully. Apr 12 18:47:00.415000 audit[2167]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2167 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.415000 audit[2167]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffed17eb90 a2=0 a3=7fffed17eb7c items=0 ppid=2126 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.415000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Apr 12 18:47:00.417000 audit[2168]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.417000 audit[2168]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe72df8b40 a2=0 a3=7ffe72df8b2c items=0 ppid=2126 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.417000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Apr 12 18:47:00.428000 audit[2169]: NETFILTER_CFG table=mangle:40 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.428000 audit[2169]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc5f53ede0 a2=0 a3=7ffc5f53edcc items=0 ppid=2126 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.428000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Apr 12 18:47:00.432000 audit[2171]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.432000 audit[2171]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcee599440 a2=0 a3=7ffcee59942c items=0 ppid=2126 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.432000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Apr 12 18:47:00.434000 audit[2170]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.434000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa76b36e0 a2=0 a3=7fffa76b36cc items=0 ppid=2126 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.434000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Apr 12 18:47:00.435000 audit[2172]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.435000 audit[2172]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeec764c00 a2=0 a3=7ffeec764bec items=0 ppid=2126 pid=2172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.435000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Apr 12 18:47:00.524000 audit[2173]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.524000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc5e226450 a2=0 a3=7ffc5e22643c items=0 ppid=2126 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.524000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Apr 12 18:47:00.543000 audit[2175]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.543000 audit[2175]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff9c744fd0 a2=0 a3=7fff9c744fbc items=0 ppid=2126 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.543000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Apr 12 18:47:00.567000 audit[2178]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.567000 audit[2178]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe391eeb40 a2=0 a3=7ffe391eeb2c items=0 ppid=2126 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Apr 12 18:47:00.572000 audit[2179]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.572000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf1e33fb0 a2=0 a3=7ffdf1e33f9c items=0 ppid=2126 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.572000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Apr 12 18:47:00.576000 audit[2181]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.576000 audit[2181]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc5f634c50 a2=0 a3=7ffc5f634c3c items=0 ppid=2126 pid=2181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.576000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Apr 12 18:47:00.582000 audit[2182]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.582000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9c614490 a2=0 a3=7ffd9c61447c items=0 ppid=2126 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.582000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Apr 12 18:47:00.588000 audit[2184]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2184 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.588000 audit[2184]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdbd622d50 a2=0 a3=7ffdbd622d3c items=0 ppid=2126 pid=2184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Apr 12 18:47:00.602000 audit[2187]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.602000 audit[2187]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe78cd9600 a2=0 a3=7ffe78cd95ec items=0 ppid=2126 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.602000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Apr 12 18:47:00.603000 audit[2188]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.603000 audit[2188]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffebed1e770 a2=0 a3=7ffebed1e75c items=0 ppid=2126 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.603000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Apr 12 18:47:00.609000 audit[2190]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.609000 audit[2190]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdef91d970 a2=0 a3=7ffdef91d95c items=0 ppid=2126 pid=2190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.609000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Apr 12 18:47:00.613000 audit[2191]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.613000 audit[2191]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc09647210 a2=0 a3=7ffc096471fc items=0 ppid=2126 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.613000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Apr 12 18:47:00.618000 audit[2193]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.618000 audit[2193]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdeb652690 a2=0 a3=7ffdeb65267c items=0 ppid=2126 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.618000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Apr 12 18:47:00.626000 audit[2196]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2196 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.626000 audit[2196]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffeca148f70 a2=0 a3=7ffeca148f5c items=0 ppid=2126 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.626000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Apr 12 18:47:00.633000 audit[2199]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.633000 audit[2199]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff32dea390 a2=0 a3=7fff32dea37c items=0 ppid=2126 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.633000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Apr 12 18:47:00.636000 audit[2200]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.636000 audit[2200]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd29f2ac80 a2=0 a3=7ffd29f2ac6c items=0 ppid=2126 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.636000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Apr 12 18:47:00.644000 audit[2202]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2202 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.644000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7fff72116620 a2=0 a3=7fff7211660c items=0 ppid=2126 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.644000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:47:00.651000 audit[2205]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2205 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.651000 audit[2205]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcfecad410 a2=0 a3=7ffcfecad3fc items=0 ppid=2126 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.651000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:47:00.652000 audit[2206]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.652000 audit[2206]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffb5d00f30 a2=0 a3=7fffb5d00f1c items=0 ppid=2126 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.652000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Apr 12 18:47:00.655000 audit[2208]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2208 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:47:00.655000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe9ff05fb0 a2=0 a3=7ffe9ff05f9c items=0 ppid=2126 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.655000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Apr 12 18:47:00.945000 audit[2214]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:00.945000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffefec16790 a2=0 a3=7ffefec1677c items=0 ppid=2126 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.945000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:00.973000 audit[2214]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:00.973000 audit[2214]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffefec16790 a2=0 a3=7ffefec1677c items=0 ppid=2126 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.973000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:00.979000 audit[2219]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.979000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd69e5d500 a2=0 a3=7ffd69e5d4ec items=0 ppid=2126 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.979000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Apr 12 18:47:00.986000 audit[2221]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.986000 audit[2221]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff413f5960 a2=0 a3=7fff413f594c items=0 ppid=2126 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.986000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Apr 12 18:47:00.992000 audit[2224]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.992000 audit[2224]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd16ac0420 a2=0 a3=7ffd16ac040c items=0 ppid=2126 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.992000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Apr 12 18:47:00.993000 audit[2225]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.993000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff115f45c0 a2=0 a3=7fff115f45ac items=0 ppid=2126 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.993000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Apr 12 18:47:00.995000 audit[2227]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.995000 audit[2227]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcad408180 a2=0 a3=7ffcad40816c items=0 ppid=2126 pid=2227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.995000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Apr 12 18:47:00.996000 audit[2228]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.996000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffce3d7a530 a2=0 a3=7ffce3d7a51c items=0 ppid=2126 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.996000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Apr 12 18:47:00.999000 audit[2230]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:00.999000 audit[2230]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcc9629d00 a2=0 a3=7ffcc9629cec items=0 ppid=2126 pid=2230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:00.999000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Apr 12 18:47:01.002000 audit[2233]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.002000 audit[2233]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd039f5420 a2=0 a3=7ffd039f540c items=0 ppid=2126 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.002000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Apr 12 18:47:01.003000 audit[2234]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.003000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff335ddfe0 a2=0 a3=7fff335ddfcc items=0 ppid=2126 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.003000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Apr 12 18:47:01.006000 audit[2236]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.006000 audit[2236]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe3a0be7e0 a2=0 a3=7ffe3a0be7cc items=0 ppid=2126 pid=2236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.006000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Apr 12 18:47:01.007000 audit[2237]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.007000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe02548be0 a2=0 a3=7ffe02548bcc items=0 ppid=2126 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.007000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Apr 12 18:47:01.009000 audit[2239]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.009000 audit[2239]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff6a145f20 a2=0 a3=7fff6a145f0c items=0 ppid=2126 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.009000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Apr 12 18:47:01.012000 audit[2242]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.012000 audit[2242]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdd35abc70 a2=0 a3=7ffdd35abc5c items=0 ppid=2126 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.012000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Apr 12 18:47:01.016000 audit[2245]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.016000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe61ee7320 a2=0 a3=7ffe61ee730c items=0 ppid=2126 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.016000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Apr 12 18:47:01.017000 audit[2246]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.017000 audit[2246]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe8209c350 a2=0 a3=7ffe8209c33c items=0 ppid=2126 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.017000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Apr 12 18:47:01.019000 audit[2248]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.019000 audit[2248]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffca46632c0 a2=0 a3=7ffca46632ac items=0 ppid=2126 pid=2248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:47:01.022000 audit[2251]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.022000 audit[2251]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff98ab96c0 a2=0 a3=7fff98ab96ac items=0 ppid=2126 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.022000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:47:01.023000 audit[2252]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.023000 audit[2252]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2fd050e0 a2=0 a3=7fff2fd050cc items=0 ppid=2126 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.023000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Apr 12 18:47:01.025000 audit[2254]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.025000 audit[2254]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd742b2cc0 a2=0 a3=7ffd742b2cac items=0 ppid=2126 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.025000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Apr 12 18:47:01.026000 audit[2255]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.026000 audit[2255]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff778b4a00 a2=0 a3=7fff778b49ec items=0 ppid=2126 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.026000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Apr 12 18:47:01.028000 audit[2257]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.028000 audit[2257]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffecc08b890 a2=0 a3=7ffecc08b87c items=0 ppid=2126 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.028000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:47:01.032000 audit[2260]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:47:01.032000 audit[2260]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcb85d49d0 a2=0 a3=7ffcb85d49bc items=0 ppid=2126 pid=2260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.032000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:47:01.035000 audit[2262]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Apr 12 18:47:01.035000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=2004 a0=3 a1=7ffdbe401c00 a2=0 a3=7ffdbe401bec items=0 ppid=2126 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.035000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:01.036000 audit[2262]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Apr 12 18:47:01.036000 audit[2262]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffdbe401c00 a2=0 a3=7ffdbe401bec items=0 ppid=2126 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:01.036000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:01.968666 env[1058]: time="2024-04-12T18:47:01.968562170Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:01.973736 env[1058]: time="2024-04-12T18:47:01.973667116Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ac4b460566ae96b5d23f41e9a3b5dd3f1a6d0ed6d7f627076a05e38e74701a66,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:01.980350 env[1058]: time="2024-04-12T18:47:01.980298738Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:01.985335 env[1058]: time="2024-04-12T18:47:01.985284982Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:cc11f43967358b5c5eccfc5da449498c6d80bb0d4831feb5b7904c7b1ca905bd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:01.989466 env[1058]: time="2024-04-12T18:47:01.989339187Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.7\" returns image reference \"sha256:ac4b460566ae96b5d23f41e9a3b5dd3f1a6d0ed6d7f627076a05e38e74701a66\"" Apr 12 18:47:01.995603 env[1058]: time="2024-04-12T18:47:01.995517198Z" level=info msg="CreateContainer within sandbox \"ab653b2eb05c54981cd500f47c4a0cc14635735b93e8dff620738e0a98d10bb0\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Apr 12 18:47:02.164388 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1230208036.mount: Deactivated successfully. Apr 12 18:47:02.170595 env[1058]: time="2024-04-12T18:47:02.170523237Z" level=info msg="CreateContainer within sandbox \"ab653b2eb05c54981cd500f47c4a0cc14635735b93e8dff620738e0a98d10bb0\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"908f06cbd60eaed68dca7d8a2908343dca0fc3f5b3f2476e67f5f5b9e5b9c124\"" Apr 12 18:47:02.172634 env[1058]: time="2024-04-12T18:47:02.171804110Z" level=info msg="StartContainer for \"908f06cbd60eaed68dca7d8a2908343dca0fc3f5b3f2476e67f5f5b9e5b9c124\"" Apr 12 18:47:02.219757 systemd[1]: Started cri-containerd-908f06cbd60eaed68dca7d8a2908343dca0fc3f5b3f2476e67f5f5b9e5b9c124.scope. Apr 12 18:47:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.258000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.258000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit: BPF prog-id=120 op=LOAD Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2030 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930386630366362643630656165643638646361376438613239303833 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2030 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930386630366362643630656165643638646361376438613239303833 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit: BPF prog-id=121 op=LOAD Apr 12 18:47:02.259000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000343df0 items=0 ppid=2030 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930386630366362643630656165643638646361376438613239303833 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit: BPF prog-id=122 op=LOAD Apr 12 18:47:02.259000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000343e38 items=0 ppid=2030 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930386630366362643630656165643638646361376438613239303833 Apr 12 18:47:02.259000 audit: BPF prog-id=122 op=UNLOAD Apr 12 18:47:02.259000 audit: BPF prog-id=121 op=UNLOAD Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { perfmon } for pid=2270 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit[2270]: AVC avc: denied { bpf } for pid=2270 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:02.259000 audit: BPF prog-id=123 op=LOAD Apr 12 18:47:02.259000 audit[2270]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00039e248 items=0 ppid=2030 pid=2270 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:02.259000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930386630366362643630656165643638646361376438613239303833 Apr 12 18:47:02.283600 env[1058]: time="2024-04-12T18:47:02.283467108Z" level=info msg="StartContainer for \"908f06cbd60eaed68dca7d8a2908343dca0fc3f5b3f2476e67f5f5b9e5b9c124\" returns successfully" Apr 12 18:47:03.156967 systemd[1]: run-containerd-runc-k8s.io-908f06cbd60eaed68dca7d8a2908343dca0fc3f5b3f2476e67f5f5b9e5b9c124-runc.Eh3p4D.mount: Deactivated successfully. Apr 12 18:47:04.345279 kernel: kauditd_printk_skb: 357 callbacks suppressed Apr 12 18:47:04.345463 kernel: audit: type=1325 audit(1712947624.341:1034): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:04.341000 audit[2300]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:04.341000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffc2fc99850 a2=0 a3=7ffc2fc9983c items=0 ppid=2126 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.352299 kernel: audit: type=1300 audit(1712947624.341:1034): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffc2fc99850 a2=0 a3=7ffc2fc9983c items=0 ppid=2126 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.352346 kernel: audit: type=1327 audit(1712947624.341:1034): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:04.341000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:04.341000 audit[2300]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:04.357773 kernel: audit: type=1325 audit(1712947624.341:1035): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:04.357834 kernel: audit: type=1300 audit(1712947624.341:1035): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc2fc99850 a2=0 a3=0 items=0 ppid=2126 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.341000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc2fc99850 a2=0 a3=0 items=0 ppid=2126 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.341000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:04.365756 kernel: audit: type=1327 audit(1712947624.341:1035): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:04.365822 kernel: audit: type=1325 audit(1712947624.354:1036): table=filter:91 family=2 entries=16 op=nft_register_rule pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:04.354000 audit[2302]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:04.368541 kernel: audit: type=1300 audit(1712947624.354:1036): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffee213e8a0 a2=0 a3=7ffee213e88c items=0 ppid=2126 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.354000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffee213e8a0 a2=0 a3=7ffee213e88c items=0 ppid=2126 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.374296 kernel: audit: type=1327 audit(1712947624.354:1036): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:04.354000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:04.362000 audit[2302]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:04.379741 kernel: audit: type=1325 audit(1712947624.362:1037): table=nat:92 family=2 entries=12 op=nft_register_rule pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:04.362000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffee213e8a0 a2=0 a3=0 items=0 ppid=2126 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:04.498818 kubelet[1948]: I0412 18:47:04.498783 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-6bfc79cb9c-24ncm" podStartSLOduration=4.740660126 podCreationTimestamp="2024-04-12 18:46:56 +0000 UTC" firstStartedPulling="2024-04-12 18:46:58.232470535 +0000 UTC m=+15.645420964" lastFinishedPulling="2024-04-12 18:47:01.990539519 +0000 UTC m=+19.403489999" observedRunningTime="2024-04-12 18:47:02.894503855 +0000 UTC m=+20.307454335" watchObservedRunningTime="2024-04-12 18:47:04.498729161 +0000 UTC m=+21.911679590" Apr 12 18:47:04.499677 kubelet[1948]: I0412 18:47:04.499658 1948 topology_manager.go:215] "Topology Admit Handler" podUID="dcb02f06-e02a-46c9-987a-6bd447cca76a" podNamespace="calico-system" podName="calico-typha-5464c96fd7-2mhln" Apr 12 18:47:04.505701 systemd[1]: Created slice kubepods-besteffort-poddcb02f06_e02a_46c9_987a_6bd447cca76a.slice. Apr 12 18:47:04.585325 kubelet[1948]: I0412 18:47:04.585273 1948 topology_manager.go:215] "Topology Admit Handler" podUID="3062def7-9b9a-483a-9962-32baeadbaa6c" podNamespace="calico-system" podName="calico-node-8zqll" Apr 12 18:47:04.591611 systemd[1]: Created slice kubepods-besteffort-pod3062def7_9b9a_483a_9962_32baeadbaa6c.slice. Apr 12 18:47:04.603371 kubelet[1948]: I0412 18:47:04.603212 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/dcb02f06-e02a-46c9-987a-6bd447cca76a-tigera-ca-bundle\") pod \"calico-typha-5464c96fd7-2mhln\" (UID: \"dcb02f06-e02a-46c9-987a-6bd447cca76a\") " pod="calico-system/calico-typha-5464c96fd7-2mhln" Apr 12 18:47:04.603371 kubelet[1948]: I0412 18:47:04.603307 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dqw5k\" (UniqueName: \"kubernetes.io/projected/dcb02f06-e02a-46c9-987a-6bd447cca76a-kube-api-access-dqw5k\") pod \"calico-typha-5464c96fd7-2mhln\" (UID: \"dcb02f06-e02a-46c9-987a-6bd447cca76a\") " pod="calico-system/calico-typha-5464c96fd7-2mhln" Apr 12 18:47:04.603371 kubelet[1948]: I0412 18:47:04.603355 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/dcb02f06-e02a-46c9-987a-6bd447cca76a-typha-certs\") pod \"calico-typha-5464c96fd7-2mhln\" (UID: \"dcb02f06-e02a-46c9-987a-6bd447cca76a\") " pod="calico-system/calico-typha-5464c96fd7-2mhln" Apr 12 18:47:04.704673 kubelet[1948]: I0412 18:47:04.704609 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/3062def7-9b9a-483a-9962-32baeadbaa6c-cni-bin-dir\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.704941 kubelet[1948]: I0412 18:47:04.704831 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/3062def7-9b9a-483a-9962-32baeadbaa6c-var-run-calico\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.705030 kubelet[1948]: I0412 18:47:04.704936 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/3062def7-9b9a-483a-9962-32baeadbaa6c-cni-net-dir\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.705111 kubelet[1948]: I0412 18:47:04.705083 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/3062def7-9b9a-483a-9962-32baeadbaa6c-cni-log-dir\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.705224 kubelet[1948]: I0412 18:47:04.705191 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/3062def7-9b9a-483a-9962-32baeadbaa6c-flexvol-driver-host\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.705393 kubelet[1948]: I0412 18:47:04.705338 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/3062def7-9b9a-483a-9962-32baeadbaa6c-xtables-lock\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.705520 kubelet[1948]: I0412 18:47:04.705475 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/3062def7-9b9a-483a-9962-32baeadbaa6c-policysync\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.705625 kubelet[1948]: I0412 18:47:04.705590 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/3062def7-9b9a-483a-9962-32baeadbaa6c-tigera-ca-bundle\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.705713 kubelet[1948]: I0412 18:47:04.705695 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cx4jx\" (UniqueName: \"kubernetes.io/projected/3062def7-9b9a-483a-9962-32baeadbaa6c-kube-api-access-cx4jx\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.705841 kubelet[1948]: I0412 18:47:04.705801 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/3062def7-9b9a-483a-9962-32baeadbaa6c-lib-modules\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.705980 kubelet[1948]: I0412 18:47:04.705917 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/3062def7-9b9a-483a-9962-32baeadbaa6c-node-certs\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.706056 kubelet[1948]: I0412 18:47:04.706019 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/3062def7-9b9a-483a-9962-32baeadbaa6c-var-lib-calico\") pod \"calico-node-8zqll\" (UID: \"3062def7-9b9a-483a-9962-32baeadbaa6c\") " pod="calico-system/calico-node-8zqll" Apr 12 18:47:04.738915 kubelet[1948]: I0412 18:47:04.738864 1948 topology_manager.go:215] "Topology Admit Handler" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" podNamespace="calico-system" podName="csi-node-driver-kqnk6" Apr 12 18:47:04.739737 kubelet[1948]: E0412 18:47:04.739709 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:04.806556 kubelet[1948]: I0412 18:47:04.806524 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/a9886980-cb6a-4a27-818b-a7549d00deb2-kubelet-dir\") pod \"csi-node-driver-kqnk6\" (UID: \"a9886980-cb6a-4a27-818b-a7549d00deb2\") " pod="calico-system/csi-node-driver-kqnk6" Apr 12 18:47:04.806970 kubelet[1948]: I0412 18:47:04.806958 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p9ldt\" (UniqueName: \"kubernetes.io/projected/a9886980-cb6a-4a27-818b-a7549d00deb2-kube-api-access-p9ldt\") pod \"csi-node-driver-kqnk6\" (UID: \"a9886980-cb6a-4a27-818b-a7549d00deb2\") " pod="calico-system/csi-node-driver-kqnk6" Apr 12 18:47:04.807137 kubelet[1948]: I0412 18:47:04.807127 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/a9886980-cb6a-4a27-818b-a7549d00deb2-varrun\") pod \"csi-node-driver-kqnk6\" (UID: \"a9886980-cb6a-4a27-818b-a7549d00deb2\") " pod="calico-system/csi-node-driver-kqnk6" Apr 12 18:47:04.807298 kubelet[1948]: I0412 18:47:04.807286 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/a9886980-cb6a-4a27-818b-a7549d00deb2-socket-dir\") pod \"csi-node-driver-kqnk6\" (UID: \"a9886980-cb6a-4a27-818b-a7549d00deb2\") " pod="calico-system/csi-node-driver-kqnk6" Apr 12 18:47:04.807430 kubelet[1948]: I0412 18:47:04.807419 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/a9886980-cb6a-4a27-818b-a7549d00deb2-registration-dir\") pod \"csi-node-driver-kqnk6\" (UID: \"a9886980-cb6a-4a27-818b-a7549d00deb2\") " pod="calico-system/csi-node-driver-kqnk6" Apr 12 18:47:04.809060 kubelet[1948]: E0412 18:47:04.808966 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.809060 kubelet[1948]: W0412 18:47:04.808992 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.809060 kubelet[1948]: E0412 18:47:04.809017 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.809996 kubelet[1948]: E0412 18:47:04.809943 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.809996 kubelet[1948]: W0412 18:47:04.809960 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.809996 kubelet[1948]: E0412 18:47:04.809984 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.810201 kubelet[1948]: E0412 18:47:04.810180 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.810201 kubelet[1948]: W0412 18:47:04.810195 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.810302 kubelet[1948]: E0412 18:47:04.810208 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.810398 kubelet[1948]: E0412 18:47:04.810378 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.810398 kubelet[1948]: W0412 18:47:04.810393 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.810495 kubelet[1948]: E0412 18:47:04.810407 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.810564 kubelet[1948]: E0412 18:47:04.810545 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.810564 kubelet[1948]: W0412 18:47:04.810561 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.810674 kubelet[1948]: E0412 18:47:04.810573 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.810710 kubelet[1948]: E0412 18:47:04.810701 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.810746 kubelet[1948]: W0412 18:47:04.810710 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.810746 kubelet[1948]: E0412 18:47:04.810723 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.810861 kubelet[1948]: E0412 18:47:04.810842 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.810861 kubelet[1948]: W0412 18:47:04.810856 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.810944 kubelet[1948]: E0412 18:47:04.810869 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.811003 kubelet[1948]: E0412 18:47:04.810985 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.811003 kubelet[1948]: W0412 18:47:04.810999 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.811089 kubelet[1948]: E0412 18:47:04.811014 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.811146 kubelet[1948]: E0412 18:47:04.811127 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.811146 kubelet[1948]: W0412 18:47:04.811141 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.811228 kubelet[1948]: E0412 18:47:04.811152 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.813314 kubelet[1948]: E0412 18:47:04.811334 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.813314 kubelet[1948]: W0412 18:47:04.811347 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.813314 kubelet[1948]: E0412 18:47:04.811358 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.813314 kubelet[1948]: E0412 18:47:04.811799 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.813314 kubelet[1948]: W0412 18:47:04.811808 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.813314 kubelet[1948]: E0412 18:47:04.811821 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.813314 kubelet[1948]: E0412 18:47:04.811941 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.813314 kubelet[1948]: W0412 18:47:04.811949 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.813314 kubelet[1948]: E0412 18:47:04.811960 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.813314 kubelet[1948]: E0412 18:47:04.812085 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.813722 kubelet[1948]: W0412 18:47:04.812094 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.813722 kubelet[1948]: E0412 18:47:04.812105 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.813722 kubelet[1948]: E0412 18:47:04.812291 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.813722 kubelet[1948]: W0412 18:47:04.812300 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.813722 kubelet[1948]: E0412 18:47:04.812312 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.813722 kubelet[1948]: E0412 18:47:04.812451 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.813722 kubelet[1948]: W0412 18:47:04.812459 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.813722 kubelet[1948]: E0412 18:47:04.812472 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.813722 kubelet[1948]: E0412 18:47:04.812606 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.813722 kubelet[1948]: W0412 18:47:04.812614 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.814002 kubelet[1948]: E0412 18:47:04.812626 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.814002 kubelet[1948]: E0412 18:47:04.812743 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.814002 kubelet[1948]: W0412 18:47:04.812751 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.814002 kubelet[1948]: E0412 18:47:04.812762 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.814002 kubelet[1948]: E0412 18:47:04.812899 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.814002 kubelet[1948]: W0412 18:47:04.812907 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.814002 kubelet[1948]: E0412 18:47:04.812918 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.815086 env[1058]: time="2024-04-12T18:47:04.814587789Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5464c96fd7-2mhln,Uid:dcb02f06-e02a-46c9-987a-6bd447cca76a,Namespace:calico-system,Attempt:0,}" Apr 12 18:47:04.816018 kubelet[1948]: E0412 18:47:04.815989 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.816132 kubelet[1948]: W0412 18:47:04.816114 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.816237 kubelet[1948]: E0412 18:47:04.816224 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.825587 kubelet[1948]: E0412 18:47:04.825560 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.825851 kubelet[1948]: W0412 18:47:04.825829 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.826028 kubelet[1948]: E0412 18:47:04.826001 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.840130 kubelet[1948]: E0412 18:47:04.840105 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.840393 kubelet[1948]: W0412 18:47:04.840376 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.840510 kubelet[1948]: E0412 18:47:04.840498 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.878032 env[1058]: time="2024-04-12T18:47:04.876671945Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:47:04.878032 env[1058]: time="2024-04-12T18:47:04.876731697Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:47:04.878032 env[1058]: time="2024-04-12T18:47:04.876746695Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:47:04.878032 env[1058]: time="2024-04-12T18:47:04.876932223Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/be4057c49c3d2c3e09202191b43cfe9ffb018175901f9165555a2eecefaff7d2 pid=2335 runtime=io.containerd.runc.v2 Apr 12 18:47:04.894962 env[1058]: time="2024-04-12T18:47:04.894908335Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8zqll,Uid:3062def7-9b9a-483a-9962-32baeadbaa6c,Namespace:calico-system,Attempt:0,}" Apr 12 18:47:04.903844 systemd[1]: Started cri-containerd-be4057c49c3d2c3e09202191b43cfe9ffb018175901f9165555a2eecefaff7d2.scope. Apr 12 18:47:04.909329 kubelet[1948]: E0412 18:47:04.908506 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.909329 kubelet[1948]: W0412 18:47:04.908525 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.909329 kubelet[1948]: E0412 18:47:04.908561 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.909329 kubelet[1948]: E0412 18:47:04.908736 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.909329 kubelet[1948]: W0412 18:47:04.908746 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.909329 kubelet[1948]: E0412 18:47:04.908758 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.909329 kubelet[1948]: E0412 18:47:04.908935 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.909329 kubelet[1948]: W0412 18:47:04.908944 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.909329 kubelet[1948]: E0412 18:47:04.908963 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.909329 kubelet[1948]: E0412 18:47:04.909219 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.909914 kubelet[1948]: W0412 18:47:04.909228 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.909914 kubelet[1948]: E0412 18:47:04.909260 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.909914 kubelet[1948]: E0412 18:47:04.909848 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.909914 kubelet[1948]: W0412 18:47:04.909909 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.910177 kubelet[1948]: E0412 18:47:04.909973 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.910612 kubelet[1948]: E0412 18:47:04.910584 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.910612 kubelet[1948]: W0412 18:47:04.910607 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.917281 kubelet[1948]: E0412 18:47:04.910740 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.917281 kubelet[1948]: E0412 18:47:04.911468 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.917281 kubelet[1948]: W0412 18:47:04.911481 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.917281 kubelet[1948]: E0412 18:47:04.911540 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.917281 kubelet[1948]: E0412 18:47:04.911722 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.917281 kubelet[1948]: W0412 18:47:04.911738 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.917281 kubelet[1948]: E0412 18:47:04.911786 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.917281 kubelet[1948]: E0412 18:47:04.912673 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.917281 kubelet[1948]: W0412 18:47:04.912682 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.917281 kubelet[1948]: E0412 18:47:04.912729 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.917593 kubelet[1948]: E0412 18:47:04.913414 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.917593 kubelet[1948]: W0412 18:47:04.913425 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.917593 kubelet[1948]: E0412 18:47:04.913677 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.917593 kubelet[1948]: W0412 18:47:04.913691 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.917593 kubelet[1948]: E0412 18:47:04.913795 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.917593 kubelet[1948]: E0412 18:47:04.917150 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.917593 kubelet[1948]: E0412 18:47:04.917242 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.917593 kubelet[1948]: W0412 18:47:04.917283 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.917593 kubelet[1948]: E0412 18:47:04.917497 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.917593 kubelet[1948]: W0412 18:47:04.917506 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.918020 kubelet[1948]: E0412 18:47:04.917890 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.918020 kubelet[1948]: E0412 18:47:04.917923 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.918999 kubelet[1948]: E0412 18:47:04.918983 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.918999 kubelet[1948]: W0412 18:47:04.918998 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.919101 kubelet[1948]: E0412 18:47:04.919089 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.919457 kubelet[1948]: E0412 18:47:04.919429 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.919457 kubelet[1948]: W0412 18:47:04.919442 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.919570 kubelet[1948]: E0412 18:47:04.919551 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.919672 kubelet[1948]: E0412 18:47:04.919651 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.919672 kubelet[1948]: W0412 18:47:04.919665 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.919967 kubelet[1948]: E0412 18:47:04.919785 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.919967 kubelet[1948]: E0412 18:47:04.919797 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.919967 kubelet[1948]: W0412 18:47:04.919806 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.919967 kubelet[1948]: E0412 18:47:04.919851 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.920915 kubelet[1948]: E0412 18:47:04.920884 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.920915 kubelet[1948]: W0412 18:47:04.920908 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.921066 kubelet[1948]: E0412 18:47:04.921044 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.921066 kubelet[1948]: W0412 18:47:04.921058 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.921298 kubelet[1948]: E0412 18:47:04.921277 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.921298 kubelet[1948]: W0412 18:47:04.921291 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.921386 kubelet[1948]: E0412 18:47:04.921306 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.921557 kubelet[1948]: E0412 18:47:04.921538 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.921557 kubelet[1948]: W0412 18:47:04.921555 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.921659 kubelet[1948]: E0412 18:47:04.921569 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.921659 kubelet[1948]: E0412 18:47:04.921597 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.921776 kubelet[1948]: E0412 18:47:04.921756 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.921776 kubelet[1948]: W0412 18:47:04.921770 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.921868 kubelet[1948]: E0412 18:47:04.921782 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.921868 kubelet[1948]: E0412 18:47:04.921802 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.922062 kubelet[1948]: E0412 18:47:04.922034 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.922062 kubelet[1948]: W0412 18:47:04.922055 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.922161 kubelet[1948]: E0412 18:47:04.922068 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.922270 kubelet[1948]: E0412 18:47:04.922226 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.922270 kubelet[1948]: W0412 18:47:04.922241 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.922385 kubelet[1948]: E0412 18:47:04.922283 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.922820 kubelet[1948]: E0412 18:47:04.922763 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.922820 kubelet[1948]: W0412 18:47:04.922776 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.922820 kubelet[1948]: E0412 18:47:04.922795 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.935453 kubelet[1948]: E0412 18:47:04.935422 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:04.935453 kubelet[1948]: W0412 18:47:04.935443 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:04.935453 kubelet[1948]: E0412 18:47:04.935466 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.947000 audit: BPF prog-id=124 op=LOAD Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2335 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343035376334396333643263336530393230323139316234336366 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2335 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343035376334396333643263336530393230323139316234336366 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit: BPF prog-id=125 op=LOAD Apr 12 18:47:04.948000 audit[2343]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00034bce0 items=0 ppid=2335 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343035376334396333643263336530393230323139316234336366 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit: BPF prog-id=126 op=LOAD Apr 12 18:47:04.948000 audit[2343]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00034bd28 items=0 ppid=2335 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343035376334396333643263336530393230323139316234336366 Apr 12 18:47:04.948000 audit: BPF prog-id=126 op=UNLOAD Apr 12 18:47:04.948000 audit: BPF prog-id=125 op=UNLOAD Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { perfmon } for pid=2343 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit[2343]: AVC avc: denied { bpf } for pid=2343 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:04.948000 audit: BPF prog-id=127 op=LOAD Apr 12 18:47:04.948000 audit[2343]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d0138 items=0 ppid=2335 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:04.948000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265343035376334396333643263336530393230323139316234336366 Apr 12 18:47:04.959244 env[1058]: time="2024-04-12T18:47:04.958664887Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:47:04.959244 env[1058]: time="2024-04-12T18:47:04.958739698Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:47:04.959244 env[1058]: time="2024-04-12T18:47:04.958754245Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:47:04.965285 env[1058]: time="2024-04-12T18:47:04.959858036Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5b6563d0b77b8db71f3c0556fb000ade8d5ae4e96eaa586c38e311c8034e98b1 pid=2393 runtime=io.containerd.runc.v2 Apr 12 18:47:05.011129 systemd[1]: Started cri-containerd-5b6563d0b77b8db71f3c0556fb000ade8d5ae4e96eaa586c38e311c8034e98b1.scope. Apr 12 18:47:05.022069 env[1058]: time="2024-04-12T18:47:05.021140887Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5464c96fd7-2mhln,Uid:dcb02f06-e02a-46c9-987a-6bd447cca76a,Namespace:calico-system,Attempt:0,} returns sandbox id \"be4057c49c3d2c3e09202191b43cfe9ffb018175901f9165555a2eecefaff7d2\"" Apr 12 18:47:05.028527 env[1058]: time="2024-04-12T18:47:05.028497147Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.3\"" Apr 12 18:47:05.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit: BPF prog-id=128 op=LOAD Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2393 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:05.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562363536336430623737623864623731663363303535366662303030 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2393 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:05.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562363536336430623737623864623731663363303535366662303030 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit: BPF prog-id=129 op=LOAD Apr 12 18:47:05.055000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000331ec0 items=0 ppid=2393 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:05.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562363536336430623737623864623731663363303535366662303030 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.055000 audit: BPF prog-id=130 op=LOAD Apr 12 18:47:05.055000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000331f08 items=0 ppid=2393 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:05.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562363536336430623737623864623731663363303535366662303030 Apr 12 18:47:05.056000 audit: BPF prog-id=130 op=UNLOAD Apr 12 18:47:05.056000 audit: BPF prog-id=129 op=UNLOAD Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:05.056000 audit: BPF prog-id=131 op=LOAD Apr 12 18:47:05.056000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00038e318 items=0 ppid=2393 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:05.056000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562363536336430623737623864623731663363303535366662303030 Apr 12 18:47:05.079040 env[1058]: time="2024-04-12T18:47:05.078989426Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-8zqll,Uid:3062def7-9b9a-483a-9962-32baeadbaa6c,Namespace:calico-system,Attempt:0,} returns sandbox id \"5b6563d0b77b8db71f3c0556fb000ade8d5ae4e96eaa586c38e311c8034e98b1\"" Apr 12 18:47:05.383000 audit[2439]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2439 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:05.383000 audit[2439]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffe4d171b30 a2=0 a3=7ffe4d171b1c items=0 ppid=2126 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:05.383000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:05.384000 audit[2439]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2439 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:05.384000 audit[2439]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe4d171b30 a2=0 a3=0 items=0 ppid=2126 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:05.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:06.757999 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount142049161.mount: Deactivated successfully. Apr 12 18:47:06.758567 kubelet[1948]: E0412 18:47:06.758132 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:08.759196 kubelet[1948]: E0412 18:47:08.758846 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:10.332322 env[1058]: time="2024-04-12T18:47:10.332217170Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:10.335746 env[1058]: time="2024-04-12T18:47:10.335658815Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b542f80277bc5a77197ee77cfea20140a71de63ad22970bd48462555506b5bb9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:10.339088 env[1058]: time="2024-04-12T18:47:10.339026402Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:10.343245 env[1058]: time="2024-04-12T18:47:10.343193870Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:418671dc5b90134cba7b93a914c8329e8ecafd45de67165aeee74252e5f14f3e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:10.346512 env[1058]: time="2024-04-12T18:47:10.346446701Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.3\" returns image reference \"sha256:b542f80277bc5a77197ee77cfea20140a71de63ad22970bd48462555506b5bb9\"" Apr 12 18:47:10.350301 env[1058]: time="2024-04-12T18:47:10.348952361Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3\"" Apr 12 18:47:10.377319 env[1058]: time="2024-04-12T18:47:10.377262705Z" level=info msg="CreateContainer within sandbox \"be4057c49c3d2c3e09202191b43cfe9ffb018175901f9165555a2eecefaff7d2\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Apr 12 18:47:10.395237 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount858676943.mount: Deactivated successfully. Apr 12 18:47:10.403798 env[1058]: time="2024-04-12T18:47:10.403714093Z" level=info msg="CreateContainer within sandbox \"be4057c49c3d2c3e09202191b43cfe9ffb018175901f9165555a2eecefaff7d2\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"e351eed65e5cef94629cfa6a7f253369e8701e1ffa4f3f7ea810f6c355c0f55d\"" Apr 12 18:47:10.406020 env[1058]: time="2024-04-12T18:47:10.405495876Z" level=info msg="StartContainer for \"e351eed65e5cef94629cfa6a7f253369e8701e1ffa4f3f7ea810f6c355c0f55d\"" Apr 12 18:47:10.433977 systemd[1]: Started cri-containerd-e351eed65e5cef94629cfa6a7f253369e8701e1ffa4f3f7ea810f6c355c0f55d.scope. Apr 12 18:47:10.460300 kernel: kauditd_printk_skb: 122 callbacks suppressed Apr 12 18:47:10.460428 kernel: audit: type=1400 audit(1712947630.457:1076): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466633 kernel: audit: type=1400 audit(1712947630.457:1077): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.475079 kernel: audit: type=1400 audit(1712947630.457:1078): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.475175 kernel: audit: type=1400 audit(1712947630.457:1079): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.475212 kernel: audit: type=1400 audit(1712947630.457:1080): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.478487 kernel: audit: type=1400 audit(1712947630.457:1081): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.481830 kernel: audit: type=1400 audit(1712947630.457:1082): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.485197 kernel: audit: type=1400 audit(1712947630.457:1083): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.457000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.488695 kernel: audit: type=1400 audit(1712947630.457:1084): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.457000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.458000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.458000 audit: BPF prog-id=132 op=LOAD Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.496390 kernel: audit: type=1400 audit(1712947630.458:1085): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2335 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:10.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353165656436356535636566393436323963666136613766323533 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2335 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:10.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353165656436356535636566393436323963666136613766323533 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit: BPF prog-id=133 op=LOAD Apr 12 18:47:10.465000 audit[2449]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00033a4b0 items=0 ppid=2335 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:10.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353165656436356535636566393436323963666136613766323533 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.465000 audit: BPF prog-id=134 op=LOAD Apr 12 18:47:10.465000 audit[2449]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00033a4f8 items=0 ppid=2335 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:10.465000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353165656436356535636566393436323963666136613766323533 Apr 12 18:47:10.466000 audit: BPF prog-id=134 op=UNLOAD Apr 12 18:47:10.466000 audit: BPF prog-id=133 op=UNLOAD Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { perfmon } for pid=2449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit[2449]: AVC avc: denied { bpf } for pid=2449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:10.466000 audit: BPF prog-id=135 op=LOAD Apr 12 18:47:10.466000 audit[2449]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00033a908 items=0 ppid=2335 pid=2449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:10.466000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533353165656436356535636566393436323963666136613766323533 Apr 12 18:47:10.529762 env[1058]: time="2024-04-12T18:47:10.529706399Z" level=info msg="StartContainer for \"e351eed65e5cef94629cfa6a7f253369e8701e1ffa4f3f7ea810f6c355c0f55d\" returns successfully" Apr 12 18:47:10.758407 kubelet[1948]: E0412 18:47:10.758233 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:10.923449 kubelet[1948]: I0412 18:47:10.923400 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-5464c96fd7-2mhln" podStartSLOduration=1.602659756 podCreationTimestamp="2024-04-12 18:47:04 +0000 UTC" firstStartedPulling="2024-04-12 18:47:05.027302797 +0000 UTC m=+22.440253256" lastFinishedPulling="2024-04-12 18:47:10.347963557 +0000 UTC m=+27.760914036" observedRunningTime="2024-04-12 18:47:10.922066854 +0000 UTC m=+28.335017303" watchObservedRunningTime="2024-04-12 18:47:10.923320536 +0000 UTC m=+28.336271015" Apr 12 18:47:10.944217 kubelet[1948]: E0412 18:47:10.944180 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.944217 kubelet[1948]: W0412 18:47:10.944204 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.944533 kubelet[1948]: E0412 18:47:10.944244 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.944533 kubelet[1948]: E0412 18:47:10.944506 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.944533 kubelet[1948]: W0412 18:47:10.944515 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.944730 kubelet[1948]: E0412 18:47:10.944541 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.944730 kubelet[1948]: E0412 18:47:10.944666 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.944730 kubelet[1948]: W0412 18:47:10.944686 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.944730 kubelet[1948]: E0412 18:47:10.944698 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.945000 kubelet[1948]: E0412 18:47:10.944825 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.945000 kubelet[1948]: W0412 18:47:10.944845 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.945000 kubelet[1948]: E0412 18:47:10.944859 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.945000 kubelet[1948]: E0412 18:47:10.944988 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.945236 kubelet[1948]: W0412 18:47:10.945012 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.945236 kubelet[1948]: E0412 18:47:10.945025 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.945236 kubelet[1948]: E0412 18:47:10.945144 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.945236 kubelet[1948]: W0412 18:47:10.945164 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.945236 kubelet[1948]: E0412 18:47:10.945175 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.945564 kubelet[1948]: E0412 18:47:10.945313 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.945564 kubelet[1948]: W0412 18:47:10.945321 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.945564 kubelet[1948]: E0412 18:47:10.945331 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.945564 kubelet[1948]: E0412 18:47:10.945464 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.945564 kubelet[1948]: W0412 18:47:10.945484 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.945564 kubelet[1948]: E0412 18:47:10.945495 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.945892 kubelet[1948]: E0412 18:47:10.945623 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.945892 kubelet[1948]: W0412 18:47:10.945644 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.945892 kubelet[1948]: E0412 18:47:10.945655 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.945892 kubelet[1948]: E0412 18:47:10.945774 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.945892 kubelet[1948]: W0412 18:47:10.945794 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.945892 kubelet[1948]: E0412 18:47:10.945806 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.946221 kubelet[1948]: E0412 18:47:10.945923 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.946221 kubelet[1948]: W0412 18:47:10.945944 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.946221 kubelet[1948]: E0412 18:47:10.945955 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.946221 kubelet[1948]: E0412 18:47:10.946075 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.946221 kubelet[1948]: W0412 18:47:10.946094 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.946221 kubelet[1948]: E0412 18:47:10.946106 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.946617 kubelet[1948]: E0412 18:47:10.946232 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.946617 kubelet[1948]: W0412 18:47:10.946256 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.946617 kubelet[1948]: E0412 18:47:10.946268 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.946617 kubelet[1948]: E0412 18:47:10.946387 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.946617 kubelet[1948]: W0412 18:47:10.946408 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.946617 kubelet[1948]: E0412 18:47:10.946419 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.946617 kubelet[1948]: E0412 18:47:10.946538 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.946617 kubelet[1948]: W0412 18:47:10.946558 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.946617 kubelet[1948]: E0412 18:47:10.946569 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.955945 kubelet[1948]: E0412 18:47:10.955656 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.955945 kubelet[1948]: W0412 18:47:10.955688 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.955945 kubelet[1948]: E0412 18:47:10.955725 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.956655 kubelet[1948]: E0412 18:47:10.956407 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.956655 kubelet[1948]: W0412 18:47:10.956428 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.956655 kubelet[1948]: E0412 18:47:10.956471 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.957158 kubelet[1948]: E0412 18:47:10.956964 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.957158 kubelet[1948]: W0412 18:47:10.956986 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.957158 kubelet[1948]: E0412 18:47:10.957035 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.957472 kubelet[1948]: E0412 18:47:10.957273 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.957472 kubelet[1948]: W0412 18:47:10.957306 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.957472 kubelet[1948]: E0412 18:47:10.957330 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.957472 kubelet[1948]: E0412 18:47:10.957466 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.957472 kubelet[1948]: W0412 18:47:10.957475 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.957866 kubelet[1948]: E0412 18:47:10.957487 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.957866 kubelet[1948]: E0412 18:47:10.957608 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.957866 kubelet[1948]: W0412 18:47:10.957617 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.957866 kubelet[1948]: E0412 18:47:10.957629 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.957866 kubelet[1948]: E0412 18:47:10.957769 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.957866 kubelet[1948]: W0412 18:47:10.957777 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.957866 kubelet[1948]: E0412 18:47:10.957788 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.958327 kubelet[1948]: E0412 18:47:10.958097 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.958327 kubelet[1948]: W0412 18:47:10.958106 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.958327 kubelet[1948]: E0412 18:47:10.958117 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.958327 kubelet[1948]: E0412 18:47:10.958272 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.958327 kubelet[1948]: W0412 18:47:10.958281 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.958327 kubelet[1948]: E0412 18:47:10.958293 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.958668 kubelet[1948]: E0412 18:47:10.958411 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.958668 kubelet[1948]: W0412 18:47:10.958419 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.958668 kubelet[1948]: E0412 18:47:10.958431 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.958668 kubelet[1948]: E0412 18:47:10.958536 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.958668 kubelet[1948]: W0412 18:47:10.958544 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.958668 kubelet[1948]: E0412 18:47:10.958554 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.959003 kubelet[1948]: E0412 18:47:10.958694 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.959003 kubelet[1948]: W0412 18:47:10.958704 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.959003 kubelet[1948]: E0412 18:47:10.958716 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.959003 kubelet[1948]: E0412 18:47:10.958977 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.959003 kubelet[1948]: W0412 18:47:10.958985 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.959003 kubelet[1948]: E0412 18:47:10.958997 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.959415 kubelet[1948]: E0412 18:47:10.959118 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.959415 kubelet[1948]: W0412 18:47:10.959126 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.959415 kubelet[1948]: E0412 18:47:10.959136 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.959415 kubelet[1948]: E0412 18:47:10.959260 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.959415 kubelet[1948]: W0412 18:47:10.959278 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.959415 kubelet[1948]: E0412 18:47:10.959288 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.959415 kubelet[1948]: E0412 18:47:10.959397 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.959415 kubelet[1948]: W0412 18:47:10.959404 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.959415 kubelet[1948]: E0412 18:47:10.959415 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.959921 kubelet[1948]: E0412 18:47:10.959538 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.959921 kubelet[1948]: W0412 18:47:10.959545 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.959921 kubelet[1948]: E0412 18:47:10.959556 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:10.960097 kubelet[1948]: E0412 18:47:10.959931 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:10.960097 kubelet[1948]: W0412 18:47:10.959939 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:10.960097 kubelet[1948]: E0412 18:47:10.959951 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.853809 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1758944877.mount: Deactivated successfully. Apr 12 18:47:11.913294 kubelet[1948]: I0412 18:47:11.913060 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Apr 12 18:47:11.958159 kubelet[1948]: E0412 18:47:11.956709 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.958159 kubelet[1948]: W0412 18:47:11.956742 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.958159 kubelet[1948]: E0412 18:47:11.956785 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.958159 kubelet[1948]: E0412 18:47:11.957164 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.958159 kubelet[1948]: W0412 18:47:11.957185 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.958159 kubelet[1948]: E0412 18:47:11.957313 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.958159 kubelet[1948]: E0412 18:47:11.957609 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.958159 kubelet[1948]: W0412 18:47:11.957628 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.958159 kubelet[1948]: E0412 18:47:11.957656 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.958159 kubelet[1948]: E0412 18:47:11.957972 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.959019 kubelet[1948]: W0412 18:47:11.957991 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.959019 kubelet[1948]: E0412 18:47:11.958018 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.960054 kubelet[1948]: E0412 18:47:11.959448 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.960054 kubelet[1948]: W0412 18:47:11.959473 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.960054 kubelet[1948]: E0412 18:47:11.959502 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.960054 kubelet[1948]: E0412 18:47:11.959788 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.960054 kubelet[1948]: W0412 18:47:11.959806 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.960054 kubelet[1948]: E0412 18:47:11.959837 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.961072 kubelet[1948]: E0412 18:47:11.960507 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.961072 kubelet[1948]: W0412 18:47:11.960528 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.961072 kubelet[1948]: E0412 18:47:11.960557 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.962005 kubelet[1948]: E0412 18:47:11.961409 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.962005 kubelet[1948]: W0412 18:47:11.961430 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.962005 kubelet[1948]: E0412 18:47:11.961458 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.962005 kubelet[1948]: E0412 18:47:11.961763 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.962005 kubelet[1948]: W0412 18:47:11.961781 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.962005 kubelet[1948]: E0412 18:47:11.961807 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.963339 kubelet[1948]: E0412 18:47:11.962767 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.963339 kubelet[1948]: W0412 18:47:11.962790 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.963339 kubelet[1948]: E0412 18:47:11.962819 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.963339 kubelet[1948]: E0412 18:47:11.963104 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.963339 kubelet[1948]: W0412 18:47:11.963123 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.963339 kubelet[1948]: E0412 18:47:11.963149 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.964222 kubelet[1948]: E0412 18:47:11.964036 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.964222 kubelet[1948]: W0412 18:47:11.964059 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.964222 kubelet[1948]: E0412 18:47:11.964088 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.964937 kubelet[1948]: E0412 18:47:11.964764 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.964937 kubelet[1948]: W0412 18:47:11.964786 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.964937 kubelet[1948]: E0412 18:47:11.964816 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.965482 kubelet[1948]: E0412 18:47:11.965458 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.965791 kubelet[1948]: W0412 18:47:11.965625 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.965791 kubelet[1948]: E0412 18:47:11.965665 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.966212 kubelet[1948]: E0412 18:47:11.966189 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.967567 kubelet[1948]: W0412 18:47:11.967379 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.967567 kubelet[1948]: E0412 18:47:11.967426 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.969483 kubelet[1948]: E0412 18:47:11.969443 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.969483 kubelet[1948]: W0412 18:47:11.969468 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.969829 kubelet[1948]: E0412 18:47:11.969496 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.970159 kubelet[1948]: E0412 18:47:11.970124 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.970159 kubelet[1948]: W0412 18:47:11.970143 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.970159 kubelet[1948]: E0412 18:47:11.970164 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.970746 kubelet[1948]: E0412 18:47:11.970713 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.970746 kubelet[1948]: W0412 18:47:11.970728 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.970746 kubelet[1948]: E0412 18:47:11.970747 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.971472 kubelet[1948]: E0412 18:47:11.971442 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.971472 kubelet[1948]: W0412 18:47:11.971458 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.971838 kubelet[1948]: E0412 18:47:11.971547 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.971838 kubelet[1948]: E0412 18:47:11.971755 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.971838 kubelet[1948]: W0412 18:47:11.971765 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.971838 kubelet[1948]: E0412 18:47:11.971783 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.972143 kubelet[1948]: E0412 18:47:11.971995 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.972143 kubelet[1948]: W0412 18:47:11.972004 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.972143 kubelet[1948]: E0412 18:47:11.972041 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.972433 kubelet[1948]: E0412 18:47:11.972209 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.972433 kubelet[1948]: W0412 18:47:11.972219 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.972433 kubelet[1948]: E0412 18:47:11.972236 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.972433 kubelet[1948]: E0412 18:47:11.972390 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.972433 kubelet[1948]: W0412 18:47:11.972398 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.972433 kubelet[1948]: E0412 18:47:11.972409 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.972934 kubelet[1948]: E0412 18:47:11.972526 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.972934 kubelet[1948]: W0412 18:47:11.972535 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.972934 kubelet[1948]: E0412 18:47:11.972548 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.972934 kubelet[1948]: E0412 18:47:11.972700 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.972934 kubelet[1948]: W0412 18:47:11.972709 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.972934 kubelet[1948]: E0412 18:47:11.972720 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.973671 kubelet[1948]: E0412 18:47:11.973049 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.973671 kubelet[1948]: W0412 18:47:11.973058 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.973671 kubelet[1948]: E0412 18:47:11.973072 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.973671 kubelet[1948]: E0412 18:47:11.973493 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.973671 kubelet[1948]: W0412 18:47:11.973501 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.973671 kubelet[1948]: E0412 18:47:11.973560 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.973671 kubelet[1948]: E0412 18:47:11.973648 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.973671 kubelet[1948]: W0412 18:47:11.973683 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.974577 kubelet[1948]: E0412 18:47:11.973767 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.974577 kubelet[1948]: E0412 18:47:11.973917 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.974577 kubelet[1948]: W0412 18:47:11.973927 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.974577 kubelet[1948]: E0412 18:47:11.973942 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.974577 kubelet[1948]: E0412 18:47:11.974080 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.974577 kubelet[1948]: W0412 18:47:11.974088 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.974577 kubelet[1948]: E0412 18:47:11.974100 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.974577 kubelet[1948]: E0412 18:47:11.974534 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.974577 kubelet[1948]: W0412 18:47:11.974545 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.974577 kubelet[1948]: E0412 18:47:11.974558 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.975846 kubelet[1948]: E0412 18:47:11.975530 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.975846 kubelet[1948]: W0412 18:47:11.975540 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.975846 kubelet[1948]: E0412 18:47:11.975553 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:11.977092 kubelet[1948]: E0412 18:47:11.976278 1948 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:47:11.977092 kubelet[1948]: W0412 18:47:11.976294 1948 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:47:11.977092 kubelet[1948]: E0412 18:47:11.976307 1948 plugins.go:723] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:47:12.757778 kubelet[1948]: E0412 18:47:12.757710 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:13.449185 env[1058]: time="2024-04-12T18:47:13.449060892Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:13.453325 env[1058]: time="2024-04-12T18:47:13.453211856Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ab5b4f1ca28931c15f9831ae3bfa04c21600da454ce8bbe57872b747c86e221b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:13.457087 env[1058]: time="2024-04-12T18:47:13.457028209Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:13.462461 env[1058]: time="2024-04-12T18:47:13.462392334Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:256c6fee1c0cd345ce1c83a28132e3134a9f271704d41d214436bf7ec48ba4b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:13.468212 env[1058]: time="2024-04-12T18:47:13.465679153Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3\" returns image reference \"sha256:ab5b4f1ca28931c15f9831ae3bfa04c21600da454ce8bbe57872b747c86e221b\"" Apr 12 18:47:13.477440 env[1058]: time="2024-04-12T18:47:13.477321089Z" level=info msg="CreateContainer within sandbox \"5b6563d0b77b8db71f3c0556fb000ade8d5ae4e96eaa586c38e311c8034e98b1\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Apr 12 18:47:13.497974 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount449306916.mount: Deactivated successfully. Apr 12 18:47:13.514977 env[1058]: time="2024-04-12T18:47:13.514860832Z" level=info msg="CreateContainer within sandbox \"5b6563d0b77b8db71f3c0556fb000ade8d5ae4e96eaa586c38e311c8034e98b1\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"45fa5e5d9d6bd22afbce9a25648ac65e71223bfae32410b284669f335ce6d36e\"" Apr 12 18:47:13.516953 env[1058]: time="2024-04-12T18:47:13.516827830Z" level=info msg="StartContainer for \"45fa5e5d9d6bd22afbce9a25648ac65e71223bfae32410b284669f335ce6d36e\"" Apr 12 18:47:13.566287 systemd[1]: Started cri-containerd-45fa5e5d9d6bd22afbce9a25648ac65e71223bfae32410b284669f335ce6d36e.scope. Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f22c018acc8 items=0 ppid=2393 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:13.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435666135653564396436626432326166626365396132353634386163 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit: BPF prog-id=136 op=LOAD Apr 12 18:47:13.607000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c000285178 items=0 ppid=2393 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:13.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435666135653564396436626432326166626365396132353634386163 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.607000 audit: BPF prog-id=137 op=LOAD Apr 12 18:47:13.607000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0002851c8 items=0 ppid=2393 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:13.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435666135653564396436626432326166626365396132353634386163 Apr 12 18:47:13.608000 audit: BPF prog-id=137 op=UNLOAD Apr 12 18:47:13.608000 audit: BPF prog-id=136 op=UNLOAD Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { perfmon } for pid=2554 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit[2554]: AVC avc: denied { bpf } for pid=2554 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:13.608000 audit: BPF prog-id=138 op=LOAD Apr 12 18:47:13.608000 audit[2554]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c000285258 items=0 ppid=2393 pid=2554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:13.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435666135653564396436626432326166626365396132353634386163 Apr 12 18:47:13.630846 env[1058]: time="2024-04-12T18:47:13.630770275Z" level=info msg="StartContainer for \"45fa5e5d9d6bd22afbce9a25648ac65e71223bfae32410b284669f335ce6d36e\" returns successfully" Apr 12 18:47:13.647622 systemd[1]: cri-containerd-45fa5e5d9d6bd22afbce9a25648ac65e71223bfae32410b284669f335ce6d36e.scope: Deactivated successfully. Apr 12 18:47:13.650000 audit: BPF prog-id=138 op=UNLOAD Apr 12 18:47:14.031568 env[1058]: time="2024-04-12T18:47:14.031064420Z" level=info msg="shim disconnected" id=45fa5e5d9d6bd22afbce9a25648ac65e71223bfae32410b284669f335ce6d36e Apr 12 18:47:14.031568 env[1058]: time="2024-04-12T18:47:14.031170439Z" level=warning msg="cleaning up after shim disconnected" id=45fa5e5d9d6bd22afbce9a25648ac65e71223bfae32410b284669f335ce6d36e namespace=k8s.io Apr 12 18:47:14.031568 env[1058]: time="2024-04-12T18:47:14.031195677Z" level=info msg="cleaning up dead shim" Apr 12 18:47:14.052464 env[1058]: time="2024-04-12T18:47:14.052392964Z" level=warning msg="cleanup warnings time=\"2024-04-12T18:47:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2596 runtime=io.containerd.runc.v2\n" Apr 12 18:47:14.494668 systemd[1]: run-containerd-runc-k8s.io-45fa5e5d9d6bd22afbce9a25648ac65e71223bfae32410b284669f335ce6d36e-runc.Ir7spL.mount: Deactivated successfully. Apr 12 18:47:14.496076 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-45fa5e5d9d6bd22afbce9a25648ac65e71223bfae32410b284669f335ce6d36e-rootfs.mount: Deactivated successfully. Apr 12 18:47:14.757616 kubelet[1948]: E0412 18:47:14.757402 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:14.924822 env[1058]: time="2024-04-12T18:47:14.924689102Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.3\"" Apr 12 18:47:16.568211 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3492832576.mount: Deactivated successfully. Apr 12 18:47:16.758318 kubelet[1948]: E0412 18:47:16.758034 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:18.757983 kubelet[1948]: E0412 18:47:18.757901 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:20.759131 kubelet[1948]: E0412 18:47:20.759076 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:21.305842 kubelet[1948]: I0412 18:47:21.303560 1948 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Apr 12 18:47:21.444908 kernel: kauditd_printk_skb: 91 callbacks suppressed Apr 12 18:47:21.445072 kernel: audit: type=1325 audit(1712947641.439:1101): table=filter:95 family=2 entries=15 op=nft_register_rule pid=2612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:21.439000 audit[2612]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=2612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:21.439000 audit[2612]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffe0211f060 a2=0 a3=7ffe0211f04c items=0 ppid=2126 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:21.452260 kernel: audit: type=1300 audit(1712947641.439:1101): arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffe0211f060 a2=0 a3=7ffe0211f04c items=0 ppid=2126 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:21.439000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:21.453000 audit[2612]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:21.461919 kernel: audit: type=1327 audit(1712947641.439:1101): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:21.461981 kernel: audit: type=1325 audit(1712947641.453:1102): table=nat:96 family=2 entries=19 op=nft_register_chain pid=2612 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:21.453000 audit[2612]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe0211f060 a2=0 a3=7ffe0211f04c items=0 ppid=2126 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:21.467994 kernel: audit: type=1300 audit(1712947641.453:1102): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe0211f060 a2=0 a3=7ffe0211f04c items=0 ppid=2126 pid=2612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:21.453000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:21.473270 kernel: audit: type=1327 audit(1712947641.453:1102): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:21.512000 audit[2614]: NETFILTER_CFG table=filter:97 family=2 entries=15 op=nft_register_rule pid=2614 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:21.512000 audit[2614]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffc1dfb9190 a2=0 a3=7ffc1dfb917c items=0 ppid=2126 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:21.523947 kernel: audit: type=1325 audit(1712947641.512:1103): table=filter:97 family=2 entries=15 op=nft_register_rule pid=2614 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:21.524008 kernel: audit: type=1300 audit(1712947641.512:1103): arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffc1dfb9190 a2=0 a3=7ffc1dfb917c items=0 ppid=2126 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:21.512000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:21.530317 kernel: audit: type=1327 audit(1712947641.512:1103): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:21.513000 audit[2614]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_unregister_chain pid=2614 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:21.513000 audit[2614]: SYSCALL arch=c000003e syscall=46 success=yes exit=2956 a0=3 a1=7ffc1dfb9190 a2=0 a3=0 items=0 ppid=2126 pid=2614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:21.513000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:21.534271 kernel: audit: type=1325 audit(1712947641.513:1104): table=nat:98 family=2 entries=19 op=nft_unregister_chain pid=2614 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:22.540000 audit[2616]: NETFILTER_CFG table=filter:99 family=2 entries=15 op=nft_register_rule pid=2616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:22.540000 audit[2616]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffe75f893f0 a2=0 a3=7ffe75f893dc items=0 ppid=2126 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:22.540000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:22.542000 audit[2616]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2616 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:22.542000 audit[2616]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe75f893f0 a2=0 a3=7ffe75f893dc items=0 ppid=2126 pid=2616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:22.542000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:22.759715 kubelet[1948]: E0412 18:47:22.759637 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:22.770616 env[1058]: time="2024-04-12T18:47:22.770527547Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:22.777135 env[1058]: time="2024-04-12T18:47:22.775777471Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6527a355814010ee83110dd5165fae88f7d9de75775b78565824d51f8da54897,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:22.780761 env[1058]: time="2024-04-12T18:47:22.780690733Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:22.786108 env[1058]: time="2024-04-12T18:47:22.786046116Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21ccc42ae417f1082c03737e9da5fbfbd4a21732babfcef4cd34240eacf26b41,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:22.791098 env[1058]: time="2024-04-12T18:47:22.790957254Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.3\" returns image reference \"sha256:6527a355814010ee83110dd5165fae88f7d9de75775b78565824d51f8da54897\"" Apr 12 18:47:22.799899 env[1058]: time="2024-04-12T18:47:22.799659024Z" level=info msg="CreateContainer within sandbox \"5b6563d0b77b8db71f3c0556fb000ade8d5ae4e96eaa586c38e311c8034e98b1\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Apr 12 18:47:22.843549 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1021193274.mount: Deactivated successfully. Apr 12 18:47:22.867155 env[1058]: time="2024-04-12T18:47:22.867063334Z" level=info msg="CreateContainer within sandbox \"5b6563d0b77b8db71f3c0556fb000ade8d5ae4e96eaa586c38e311c8034e98b1\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"a58d3e02755be0482e030081a15b80280f1b3fd13782025c9260ac763f98c575\"" Apr 12 18:47:22.871185 env[1058]: time="2024-04-12T18:47:22.868633524Z" level=info msg="StartContainer for \"a58d3e02755be0482e030081a15b80280f1b3fd13782025c9260ac763f98c575\"" Apr 12 18:47:22.925371 systemd[1]: Started cri-containerd-a58d3e02755be0482e030081a15b80280f1b3fd13782025c9260ac763f98c575.scope. Apr 12 18:47:22.941000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.941000 audit[2625]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f7f686c7be8 items=0 ppid=2393 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:22.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135386433653032373535626530343832653033303038316131356238 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.942000 audit: BPF prog-id=139 op=LOAD Apr 12 18:47:22.942000 audit[2625]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002c9ba8 items=0 ppid=2393 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:22.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135386433653032373535626530343832653033303038316131356238 Apr 12 18:47:22.944000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.944000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.944000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.944000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.944000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.944000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.944000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.944000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.944000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.944000 audit: BPF prog-id=140 op=LOAD Apr 12 18:47:22.944000 audit[2625]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002c9bf8 items=0 ppid=2393 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:22.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135386433653032373535626530343832653033303038316131356238 Apr 12 18:47:22.945000 audit: BPF prog-id=140 op=UNLOAD Apr 12 18:47:22.946000 audit: BPF prog-id=139 op=UNLOAD Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { perfmon } for pid=2625 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit[2625]: AVC avc: denied { bpf } for pid=2625 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:22.946000 audit: BPF prog-id=141 op=LOAD Apr 12 18:47:22.946000 audit[2625]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002c9c88 items=0 ppid=2393 pid=2625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:22.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135386433653032373535626530343832653033303038316131356238 Apr 12 18:47:23.262685 env[1058]: time="2024-04-12T18:47:23.262616530Z" level=info msg="StartContainer for \"a58d3e02755be0482e030081a15b80280f1b3fd13782025c9260ac763f98c575\" returns successfully" Apr 12 18:47:24.757392 kubelet[1948]: E0412 18:47:24.757316 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:25.157653 systemd[1]: cri-containerd-a58d3e02755be0482e030081a15b80280f1b3fd13782025c9260ac763f98c575.scope: Deactivated successfully. Apr 12 18:47:25.163000 audit: BPF prog-id=141 op=UNLOAD Apr 12 18:47:25.191647 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a58d3e02755be0482e030081a15b80280f1b3fd13782025c9260ac763f98c575-rootfs.mount: Deactivated successfully. Apr 12 18:47:25.203367 env[1058]: time="2024-04-12T18:47:25.203237761Z" level=info msg="shim disconnected" id=a58d3e02755be0482e030081a15b80280f1b3fd13782025c9260ac763f98c575 Apr 12 18:47:25.203753 env[1058]: time="2024-04-12T18:47:25.203728322Z" level=warning msg="cleaning up after shim disconnected" id=a58d3e02755be0482e030081a15b80280f1b3fd13782025c9260ac763f98c575 namespace=k8s.io Apr 12 18:47:25.203835 env[1058]: time="2024-04-12T18:47:25.203820206Z" level=info msg="cleaning up dead shim" Apr 12 18:47:25.212548 env[1058]: time="2024-04-12T18:47:25.212492157Z" level=warning msg="cleanup warnings time=\"2024-04-12T18:47:25Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2662 runtime=io.containerd.runc.v2\n" Apr 12 18:47:25.225726 kubelet[1948]: I0412 18:47:25.222122 1948 kubelet_node_status.go:493] "Fast updating node status as it just became ready" Apr 12 18:47:25.262553 kubelet[1948]: I0412 18:47:25.262515 1948 topology_manager.go:215] "Topology Admit Handler" podUID="6bd894e1-4052-4c12-9758-c2cc6246af88" podNamespace="kube-system" podName="coredns-5dd5756b68-w5pf6" Apr 12 18:47:25.269538 systemd[1]: Created slice kubepods-burstable-pod6bd894e1_4052_4c12_9758_c2cc6246af88.slice. Apr 12 18:47:25.274232 kubelet[1948]: W0412 18:47:25.274174 1948 reflector.go:535] object-"kube-system"/"coredns": failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:47:25.274415 kubelet[1948]: E0412 18:47:25.274244 1948 reflector.go:147] object-"kube-system"/"coredns": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "coredns" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:47:25.281368 kubelet[1948]: I0412 18:47:25.281323 1948 topology_manager.go:215] "Topology Admit Handler" podUID="d7831c02-9f32-4301-9f74-a40401274cca" podNamespace="kube-system" podName="coredns-5dd5756b68-k4fhh" Apr 12 18:47:25.281652 kubelet[1948]: I0412 18:47:25.281611 1948 topology_manager.go:215] "Topology Admit Handler" podUID="c51a9672-65ae-41a7-838f-2a70d21a8fe9" podNamespace="calico-system" podName="calico-kube-controllers-5998b5945c-h9m42" Apr 12 18:47:25.290227 systemd[1]: Created slice kubepods-besteffort-podc51a9672_65ae_41a7_838f_2a70d21a8fe9.slice. Apr 12 18:47:25.295138 env[1058]: time="2024-04-12T18:47:25.294673390Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.3\"" Apr 12 18:47:25.301592 systemd[1]: Created slice kubepods-burstable-podd7831c02_9f32_4301_9f74_a40401274cca.slice. Apr 12 18:47:25.384366 kubelet[1948]: I0412 18:47:25.384327 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pqq5j\" (UniqueName: \"kubernetes.io/projected/d7831c02-9f32-4301-9f74-a40401274cca-kube-api-access-pqq5j\") pod \"coredns-5dd5756b68-k4fhh\" (UID: \"d7831c02-9f32-4301-9f74-a40401274cca\") " pod="kube-system/coredns-5dd5756b68-k4fhh" Apr 12 18:47:25.384366 kubelet[1948]: I0412 18:47:25.384379 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/6bd894e1-4052-4c12-9758-c2cc6246af88-config-volume\") pod \"coredns-5dd5756b68-w5pf6\" (UID: \"6bd894e1-4052-4c12-9758-c2cc6246af88\") " pod="kube-system/coredns-5dd5756b68-w5pf6" Apr 12 18:47:25.384591 kubelet[1948]: I0412 18:47:25.384408 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xzds7\" (UniqueName: \"kubernetes.io/projected/6bd894e1-4052-4c12-9758-c2cc6246af88-kube-api-access-xzds7\") pod \"coredns-5dd5756b68-w5pf6\" (UID: \"6bd894e1-4052-4c12-9758-c2cc6246af88\") " pod="kube-system/coredns-5dd5756b68-w5pf6" Apr 12 18:47:25.384591 kubelet[1948]: I0412 18:47:25.384436 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/d7831c02-9f32-4301-9f74-a40401274cca-config-volume\") pod \"coredns-5dd5756b68-k4fhh\" (UID: \"d7831c02-9f32-4301-9f74-a40401274cca\") " pod="kube-system/coredns-5dd5756b68-k4fhh" Apr 12 18:47:25.384591 kubelet[1948]: I0412 18:47:25.384464 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c51a9672-65ae-41a7-838f-2a70d21a8fe9-tigera-ca-bundle\") pod \"calico-kube-controllers-5998b5945c-h9m42\" (UID: \"c51a9672-65ae-41a7-838f-2a70d21a8fe9\") " pod="calico-system/calico-kube-controllers-5998b5945c-h9m42" Apr 12 18:47:25.384591 kubelet[1948]: I0412 18:47:25.384501 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-sxqz4\" (UniqueName: \"kubernetes.io/projected/c51a9672-65ae-41a7-838f-2a70d21a8fe9-kube-api-access-sxqz4\") pod \"calico-kube-controllers-5998b5945c-h9m42\" (UID: \"c51a9672-65ae-41a7-838f-2a70d21a8fe9\") " pod="calico-system/calico-kube-controllers-5998b5945c-h9m42" Apr 12 18:47:25.595988 env[1058]: time="2024-04-12T18:47:25.595876158Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5998b5945c-h9m42,Uid:c51a9672-65ae-41a7-838f-2a70d21a8fe9,Namespace:calico-system,Attempt:0,}" Apr 12 18:47:25.939160 env[1058]: time="2024-04-12T18:47:25.938873896Z" level=error msg="Failed to destroy network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:25.940541 env[1058]: time="2024-04-12T18:47:25.940461579Z" level=error msg="encountered an error cleaning up failed sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:25.940836 env[1058]: time="2024-04-12T18:47:25.940761493Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5998b5945c-h9m42,Uid:c51a9672-65ae-41a7-838f-2a70d21a8fe9,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:25.942373 kubelet[1948]: E0412 18:47:25.941697 1948 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:25.942373 kubelet[1948]: E0412 18:47:25.941894 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5998b5945c-h9m42" Apr 12 18:47:25.942373 kubelet[1948]: E0412 18:47:25.941997 1948 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5998b5945c-h9m42" Apr 12 18:47:25.943795 kubelet[1948]: E0412 18:47:25.942235 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5998b5945c-h9m42_calico-system(c51a9672-65ae-41a7-838f-2a70d21a8fe9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5998b5945c-h9m42_calico-system(c51a9672-65ae-41a7-838f-2a70d21a8fe9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5998b5945c-h9m42" podUID="c51a9672-65ae-41a7-838f-2a70d21a8fe9" Apr 12 18:47:26.198153 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca-shm.mount: Deactivated successfully. Apr 12 18:47:26.300741 kubelet[1948]: I0412 18:47:26.299645 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:26.301721 env[1058]: time="2024-04-12T18:47:26.301658082Z" level=info msg="StopPodSandbox for \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\"" Apr 12 18:47:26.385504 env[1058]: time="2024-04-12T18:47:26.385391274Z" level=error msg="StopPodSandbox for \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\" failed" error="failed to destroy network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:26.386660 kubelet[1948]: E0412 18:47:26.386235 1948 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:26.386660 kubelet[1948]: E0412 18:47:26.386428 1948 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca"} Apr 12 18:47:26.386660 kubelet[1948]: E0412 18:47:26.386531 1948 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c51a9672-65ae-41a7-838f-2a70d21a8fe9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:47:26.386660 kubelet[1948]: E0412 18:47:26.386615 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c51a9672-65ae-41a7-838f-2a70d21a8fe9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5998b5945c-h9m42" podUID="c51a9672-65ae-41a7-838f-2a70d21a8fe9" Apr 12 18:47:26.489001 kubelet[1948]: E0412 18:47:26.488732 1948 configmap.go:199] Couldn't get configMap kube-system/coredns: failed to sync configmap cache: timed out waiting for the condition Apr 12 18:47:26.489001 kubelet[1948]: E0412 18:47:26.488899 1948 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/d7831c02-9f32-4301-9f74-a40401274cca-config-volume podName:d7831c02-9f32-4301-9f74-a40401274cca nodeName:}" failed. No retries permitted until 2024-04-12 18:47:26.988838871 +0000 UTC m=+44.401789340 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config-volume" (UniqueName: "kubernetes.io/configmap/d7831c02-9f32-4301-9f74-a40401274cca-config-volume") pod "coredns-5dd5756b68-k4fhh" (UID: "d7831c02-9f32-4301-9f74-a40401274cca") : failed to sync configmap cache: timed out waiting for the condition Apr 12 18:47:26.490425 kubelet[1948]: E0412 18:47:26.489651 1948 configmap.go:199] Couldn't get configMap kube-system/coredns: failed to sync configmap cache: timed out waiting for the condition Apr 12 18:47:26.490425 kubelet[1948]: E0412 18:47:26.489794 1948 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/6bd894e1-4052-4c12-9758-c2cc6246af88-config-volume podName:6bd894e1-4052-4c12-9758-c2cc6246af88 nodeName:}" failed. No retries permitted until 2024-04-12 18:47:26.989755584 +0000 UTC m=+44.402706063 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config-volume" (UniqueName: "kubernetes.io/configmap/6bd894e1-4052-4c12-9758-c2cc6246af88-config-volume") pod "coredns-5dd5756b68-w5pf6" (UID: "6bd894e1-4052-4c12-9758-c2cc6246af88") : failed to sync configmap cache: timed out waiting for the condition Apr 12 18:47:26.769110 systemd[1]: Created slice kubepods-besteffort-poda9886980_cb6a_4a27_818b_a7549d00deb2.slice. Apr 12 18:47:26.778222 env[1058]: time="2024-04-12T18:47:26.778091355Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-kqnk6,Uid:a9886980-cb6a-4a27-818b-a7549d00deb2,Namespace:calico-system,Attempt:0,}" Apr 12 18:47:26.934399 env[1058]: time="2024-04-12T18:47:26.934318104Z" level=error msg="Failed to destroy network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:26.936399 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6-shm.mount: Deactivated successfully. Apr 12 18:47:26.937413 env[1058]: time="2024-04-12T18:47:26.937371379Z" level=error msg="encountered an error cleaning up failed sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:26.937480 env[1058]: time="2024-04-12T18:47:26.937443235Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-kqnk6,Uid:a9886980-cb6a-4a27-818b-a7549d00deb2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:26.937766 kubelet[1948]: E0412 18:47:26.937737 1948 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:26.937826 kubelet[1948]: E0412 18:47:26.937807 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-kqnk6" Apr 12 18:47:26.937866 kubelet[1948]: E0412 18:47:26.937835 1948 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-kqnk6" Apr 12 18:47:26.937927 kubelet[1948]: E0412 18:47:26.937907 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-kqnk6_calico-system(a9886980-cb6a-4a27-818b-a7549d00deb2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-kqnk6_calico-system(a9886980-cb6a-4a27-818b-a7549d00deb2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:27.074412 env[1058]: time="2024-04-12T18:47:27.074203899Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-w5pf6,Uid:6bd894e1-4052-4c12-9758-c2cc6246af88,Namespace:kube-system,Attempt:0,}" Apr 12 18:47:27.133192 env[1058]: time="2024-04-12T18:47:27.133029774Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-k4fhh,Uid:d7831c02-9f32-4301-9f74-a40401274cca,Namespace:kube-system,Attempt:0,}" Apr 12 18:47:27.289618 env[1058]: time="2024-04-12T18:47:27.289523643Z" level=error msg="Failed to destroy network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.291834 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b-shm.mount: Deactivated successfully. Apr 12 18:47:27.293026 env[1058]: time="2024-04-12T18:47:27.292966070Z" level=error msg="encountered an error cleaning up failed sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.293084 env[1058]: time="2024-04-12T18:47:27.293039057Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-w5pf6,Uid:6bd894e1-4052-4c12-9758-c2cc6246af88,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.293654 kubelet[1948]: E0412 18:47:27.293351 1948 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.293654 kubelet[1948]: E0412 18:47:27.293419 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-w5pf6" Apr 12 18:47:27.293654 kubelet[1948]: E0412 18:47:27.293446 1948 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-w5pf6" Apr 12 18:47:27.293951 kubelet[1948]: E0412 18:47:27.293518 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-w5pf6_kube-system(6bd894e1-4052-4c12-9758-c2cc6246af88)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-w5pf6_kube-system(6bd894e1-4052-4c12-9758-c2cc6246af88)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-w5pf6" podUID="6bd894e1-4052-4c12-9758-c2cc6246af88" Apr 12 18:47:27.303116 kubelet[1948]: I0412 18:47:27.302964 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:27.305579 env[1058]: time="2024-04-12T18:47:27.304236071Z" level=info msg="StopPodSandbox for \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\"" Apr 12 18:47:27.325510 kubelet[1948]: I0412 18:47:27.325387 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:27.329011 env[1058]: time="2024-04-12T18:47:27.328960847Z" level=info msg="StopPodSandbox for \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\"" Apr 12 18:47:27.338748 env[1058]: time="2024-04-12T18:47:27.338654107Z" level=error msg="Failed to destroy network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.340842 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5-shm.mount: Deactivated successfully. Apr 12 18:47:27.341895 env[1058]: time="2024-04-12T18:47:27.341851202Z" level=error msg="encountered an error cleaning up failed sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.341967 env[1058]: time="2024-04-12T18:47:27.341921924Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-k4fhh,Uid:d7831c02-9f32-4301-9f74-a40401274cca,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.342328 kubelet[1948]: E0412 18:47:27.342299 1948 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.342445 kubelet[1948]: E0412 18:47:27.342423 1948 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-k4fhh" Apr 12 18:47:27.342515 kubelet[1948]: E0412 18:47:27.342476 1948 kuberuntime_manager.go:1119] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-5dd5756b68-k4fhh" Apr 12 18:47:27.342598 kubelet[1948]: E0412 18:47:27.342577 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-5dd5756b68-k4fhh_kube-system(d7831c02-9f32-4301-9f74-a40401274cca)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-5dd5756b68-k4fhh_kube-system(d7831c02-9f32-4301-9f74-a40401274cca)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-k4fhh" podUID="d7831c02-9f32-4301-9f74-a40401274cca" Apr 12 18:47:27.391114 env[1058]: time="2024-04-12T18:47:27.391041338Z" level=error msg="StopPodSandbox for \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\" failed" error="failed to destroy network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.391736 kubelet[1948]: E0412 18:47:27.391676 1948 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:27.391844 kubelet[1948]: E0412 18:47:27.391810 1948 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6"} Apr 12 18:47:27.391943 kubelet[1948]: E0412 18:47:27.391924 1948 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a9886980-cb6a-4a27-818b-a7549d00deb2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:47:27.392038 kubelet[1948]: E0412 18:47:27.391976 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a9886980-cb6a-4a27-818b-a7549d00deb2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-kqnk6" podUID="a9886980-cb6a-4a27-818b-a7549d00deb2" Apr 12 18:47:27.407635 env[1058]: time="2024-04-12T18:47:27.407564326Z" level=error msg="StopPodSandbox for \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\" failed" error="failed to destroy network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:27.408171 kubelet[1948]: E0412 18:47:27.408145 1948 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:27.408276 kubelet[1948]: E0412 18:47:27.408200 1948 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b"} Apr 12 18:47:27.408355 kubelet[1948]: E0412 18:47:27.408285 1948 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6bd894e1-4052-4c12-9758-c2cc6246af88\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:47:27.408444 kubelet[1948]: E0412 18:47:27.408376 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6bd894e1-4052-4c12-9758-c2cc6246af88\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-w5pf6" podUID="6bd894e1-4052-4c12-9758-c2cc6246af88" Apr 12 18:47:28.333881 kubelet[1948]: I0412 18:47:28.329790 1948 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:28.337108 env[1058]: time="2024-04-12T18:47:28.336917707Z" level=info msg="StopPodSandbox for \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\"" Apr 12 18:47:28.452415 env[1058]: time="2024-04-12T18:47:28.452292102Z" level=error msg="StopPodSandbox for \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\" failed" error="failed to destroy network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:47:28.453670 kubelet[1948]: E0412 18:47:28.453235 1948 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:28.453670 kubelet[1948]: E0412 18:47:28.453412 1948 kuberuntime_manager.go:1315] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5"} Apr 12 18:47:28.453670 kubelet[1948]: E0412 18:47:28.453522 1948 kuberuntime_manager.go:1028] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d7831c02-9f32-4301-9f74-a40401274cca\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:47:28.453670 kubelet[1948]: E0412 18:47:28.453603 1948 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d7831c02-9f32-4301-9f74-a40401274cca\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-5dd5756b68-k4fhh" podUID="d7831c02-9f32-4301-9f74-a40401274cca" Apr 12 18:47:34.772911 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1276406688.mount: Deactivated successfully. Apr 12 18:47:34.957172 env[1058]: time="2024-04-12T18:47:34.957047128Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:34.966427 env[1058]: time="2024-04-12T18:47:34.966347345Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5c6ffd2b2a1d03e9506d4669a91587cd464de04cb141392742fbf4dff2fbd931,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:34.983422 env[1058]: time="2024-04-12T18:47:34.983293951Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:34.994340 env[1058]: time="2024-04-12T18:47:34.990438579Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:0dec3ede02137c9bc7a49b50006739ddb7c20fc2b8fa12d2bd8234c680e8df34,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:34.994340 env[1058]: time="2024-04-12T18:47:34.991420903Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.3\" returns image reference \"sha256:5c6ffd2b2a1d03e9506d4669a91587cd464de04cb141392742fbf4dff2fbd931\"" Apr 12 18:47:35.044418 env[1058]: time="2024-04-12T18:47:35.044281674Z" level=info msg="CreateContainer within sandbox \"5b6563d0b77b8db71f3c0556fb000ade8d5ae4e96eaa586c38e311c8034e98b1\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Apr 12 18:47:35.088658 env[1058]: time="2024-04-12T18:47:35.088603450Z" level=info msg="CreateContainer within sandbox \"5b6563d0b77b8db71f3c0556fb000ade8d5ae4e96eaa586c38e311c8034e98b1\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"d156ff8b02e2a078bf4fce2402f3e830a4fcc2d8c67c4057a43f0a88ed866c74\"" Apr 12 18:47:35.089513 env[1058]: time="2024-04-12T18:47:35.089489533Z" level=info msg="StartContainer for \"d156ff8b02e2a078bf4fce2402f3e830a4fcc2d8c67c4057a43f0a88ed866c74\"" Apr 12 18:47:35.116801 systemd[1]: Started cri-containerd-d156ff8b02e2a078bf4fce2402f3e830a4fcc2d8c67c4057a43f0a88ed866c74.scope. Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.153993 kernel: kauditd_printk_skb: 52 callbacks suppressed Apr 12 18:47:35.154065 kernel: audit: type=1400 audit(1712947655.149:1114): avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f97df459928 items=0 ppid=2393 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:35.165346 kernel: audit: type=1300 audit(1712947655.149:1114): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f97df459928 items=0 ppid=2393 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:35.165473 kernel: audit: type=1327 audit(1712947655.149:1114): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353666663862303265326130373862663466636532343032663365 Apr 12 18:47:35.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353666663862303265326130373862663466636532343032663365 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.182086 kernel: audit: type=1400 audit(1712947655.149:1115): avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.182272 kernel: audit: type=1400 audit(1712947655.149:1115): avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.190362 kernel: audit: type=1400 audit(1712947655.149:1115): avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.200113 kernel: audit: type=1400 audit(1712947655.149:1115): avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.200564 kernel: audit: type=1400 audit(1712947655.149:1115): avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.200600 kernel: audit: type=1400 audit(1712947655.149:1115): avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.204666 kernel: audit: type=1400 audit(1712947655.149:1115): avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.149000 audit: BPF prog-id=142 op=LOAD Apr 12 18:47:35.149000 audit[2907]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c00021a518 items=0 ppid=2393 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:35.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353666663862303265326130373862663466636532343032663365 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit: BPF prog-id=143 op=LOAD Apr 12 18:47:35.157000 audit[2907]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c00021a568 items=0 ppid=2393 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:35.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353666663862303265326130373862663466636532343032663365 Apr 12 18:47:35.157000 audit: BPF prog-id=143 op=UNLOAD Apr 12 18:47:35.157000 audit: BPF prog-id=142 op=UNLOAD Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { perfmon } for pid=2907 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit[2907]: AVC avc: denied { bpf } for pid=2907 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:35.157000 audit: BPF prog-id=144 op=LOAD Apr 12 18:47:35.157000 audit[2907]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c00021a5f8 items=0 ppid=2393 pid=2907 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:35.157000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431353666663862303265326130373862663466636532343032663365 Apr 12 18:47:35.218625 env[1058]: time="2024-04-12T18:47:35.218575181Z" level=info msg="StartContainer for \"d156ff8b02e2a078bf4fce2402f3e830a4fcc2d8c67c4057a43f0a88ed866c74\" returns successfully" Apr 12 18:47:35.369110 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Apr 12 18:47:35.369337 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Apr 12 18:47:36.386278 systemd[1]: run-containerd-runc-k8s.io-d156ff8b02e2a078bf4fce2402f3e830a4fcc2d8c67c4057a43f0a88ed866c74-runc.Iga42J.mount: Deactivated successfully. Apr 12 18:47:37.056000 audit[3061]: AVC avc: denied { write } for pid=3061 comm="tee" name="fd" dev="proc" ino=25225 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:47:37.056000 audit[3061]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff03083961 a2=241 a3=1b6 items=1 ppid=3017 pid=3061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:37.056000 audit: CWD cwd="/etc/service/enabled/felix/log" Apr 12 18:47:37.056000 audit: PATH item=0 name="/dev/fd/63" inode=26575 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:47:37.067000 audit[3070]: AVC avc: denied { write } for pid=3070 comm="tee" name="fd" dev="proc" ino=26581 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:47:37.067000 audit[3070]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffee6852961 a2=241 a3=1b6 items=1 ppid=3015 pid=3070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:37.067000 audit: CWD cwd="/etc/service/enabled/bird6/log" Apr 12 18:47:37.067000 audit: PATH item=0 name="/dev/fd/63" inode=26578 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:47:37.067000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:47:37.074000 audit[3058]: AVC avc: denied { write } for pid=3058 comm="tee" name="fd" dev="proc" ino=25235 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:47:37.074000 audit[3058]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc7ae7f952 a2=241 a3=1b6 items=1 ppid=3023 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:37.074000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Apr 12 18:47:37.074000 audit: PATH item=0 name="/dev/fd/63" inode=26572 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:47:37.056000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:47:37.074000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:47:37.085000 audit[3075]: AVC avc: denied { write } for pid=3075 comm="tee" name="fd" dev="proc" ino=26586 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:47:37.085000 audit[3075]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe4693f961 a2=241 a3=1b6 items=1 ppid=3021 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:37.085000 audit: CWD cwd="/etc/service/enabled/confd/log" Apr 12 18:47:37.085000 audit: PATH item=0 name="/dev/fd/63" inode=26583 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:47:37.085000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:47:37.106000 audit[3066]: AVC avc: denied { write } for pid=3066 comm="tee" name="fd" dev="proc" ino=25250 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:47:37.106000 audit[3066]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe72340963 a2=241 a3=1b6 items=1 ppid=3011 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:37.106000 audit: CWD cwd="/etc/service/enabled/cni/log" Apr 12 18:47:37.106000 audit: PATH item=0 name="/dev/fd/63" inode=25220 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:47:37.106000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:47:37.117000 audit[3073]: AVC avc: denied { write } for pid=3073 comm="tee" name="fd" dev="proc" ino=26595 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:47:37.117000 audit[3073]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffecdf8e962 a2=241 a3=1b6 items=1 ppid=3013 pid=3073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:37.117000 audit: CWD cwd="/etc/service/enabled/bird/log" Apr 12 18:47:37.117000 audit: PATH item=0 name="/dev/fd/63" inode=25229 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:47:37.117000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:47:37.144000 audit[3085]: AVC avc: denied { write } for pid=3085 comm="tee" name="fd" dev="proc" ino=25259 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:47:37.144000 audit[3085]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffa9f86951 a2=241 a3=1b6 items=1 ppid=3025 pid=3085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:37.144000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Apr 12 18:47:37.144000 audit: PATH item=0 name="/dev/fd/63" inode=25252 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:47:37.144000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:47:37.301000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:37.301000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:37.301000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f14150 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:47:37.301000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:47:37.301000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000831f60 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:47:37.301000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:47:37.759064 env[1058]: time="2024-04-12T18:47:37.758862546Z" level=info msg="StopPodSandbox for \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\"" Apr 12 18:47:38.413698 kubelet[1948]: I0412 18:47:38.413637 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-8zqll" podStartSLOduration=4.474618819 podCreationTimestamp="2024-04-12 18:47:04 +0000 UTC" firstStartedPulling="2024-04-12 18:47:05.081148506 +0000 UTC m=+22.494098945" lastFinishedPulling="2024-04-12 18:47:34.995682316 +0000 UTC m=+52.408632786" observedRunningTime="2024-04-12 18:47:35.437658542 +0000 UTC m=+52.850608981" watchObservedRunningTime="2024-04-12 18:47:38.38915266 +0000 UTC m=+55.802103089" Apr 12 18:47:38.695113 systemd[1]: run-containerd-runc-k8s.io-d156ff8b02e2a078bf4fce2402f3e830a4fcc2d8c67c4057a43f0a88ed866c74-runc.xkR2nV.mount: Deactivated successfully. Apr 12 18:47:38.759391 env[1058]: time="2024-04-12T18:47:38.759351274Z" level=info msg="StopPodSandbox for \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\"" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.389 [INFO][3109] k8s.go 585: Cleaning up netns ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.395 [INFO][3109] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" iface="eth0" netns="/var/run/netns/cni-41ed2522-0b4a-2de5-415e-5b03bd8dae0f" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.395 [INFO][3109] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" iface="eth0" netns="/var/run/netns/cni-41ed2522-0b4a-2de5-415e-5b03bd8dae0f" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.398 [INFO][3109] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" iface="eth0" netns="/var/run/netns/cni-41ed2522-0b4a-2de5-415e-5b03bd8dae0f" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.399 [INFO][3109] k8s.go 592: Releasing IP address(es) ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.399 [INFO][3109] utils.go 188: Calico CNI releasing IP address ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.753 [INFO][3120] ipam_plugin.go 415: Releasing address using handleID ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" HandleID="k8s-pod-network.682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.755 [INFO][3120] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.755 [INFO][3120] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.784 [WARNING][3120] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" HandleID="k8s-pod-network.682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.784 [INFO][3120] ipam_plugin.go 443: Releasing address using workloadID ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" HandleID="k8s-pod-network.682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.791 [INFO][3120] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:38.804276 env[1058]: 2024-04-12 18:47:38.797 [INFO][3109] k8s.go 598: Teardown processing complete. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:38.808928 env[1058]: time="2024-04-12T18:47:38.807772659Z" level=info msg="TearDown network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\" successfully" Apr 12 18:47:38.808928 env[1058]: time="2024-04-12T18:47:38.807821060Z" level=info msg="StopPodSandbox for \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\" returns successfully" Apr 12 18:47:38.806894 systemd[1]: run-netns-cni\x2d41ed2522\x2d0b4a\x2d2de5\x2d415e\x2d5b03bd8dae0f.mount: Deactivated successfully. Apr 12 18:47:38.809708 env[1058]: time="2024-04-12T18:47:38.809645335Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-w5pf6,Uid:6bd894e1-4052-4c12-9758-c2cc6246af88,Namespace:kube-system,Attempt:1,}" Apr 12 18:47:38.868000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.868000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.868000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.868000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.868000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.868000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.868000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.868000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.868000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.868000 audit: BPF prog-id=145 op=LOAD Apr 12 18:47:38.868000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe68c0c5b0 a2=70 a3=7f2406716000 items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.868000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.869000 audit: BPF prog-id=145 op=UNLOAD Apr 12 18:47:38.869000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.869000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.869000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.869000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.869000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.869000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.869000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.869000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.869000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.869000 audit: BPF prog-id=146 op=LOAD Apr 12 18:47:38.869000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe68c0c5b0 a2=70 a3=6f items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.869000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.870000 audit: BPF prog-id=146 op=UNLOAD Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe68c0c560 a2=70 a3=470860 items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit: BPF prog-id=147 op=LOAD Apr 12 18:47:38.870000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7ffe68c0c540 a2=70 a3=7ffe68c0c5b0 items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.870000 audit: BPF prog-id=147 op=UNLOAD Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe68c0c620 a2=70 a3=0 items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe68c0c610 a2=70 a3=0 items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.870000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.870000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe68c0c580 a2=70 a3=0 items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.870000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.871000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.871000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffe68c0c650 a2=70 a3=fe00 items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.871000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.871000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.871000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe68c0c650 a2=70 a3=fe00 items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.871000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { perfmon } for pid=3223 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit[3223]: AVC avc: denied { bpf } for pid=3223 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.872000 audit: BPF prog-id=148 op=LOAD Apr 12 18:47:38.872000 audit[3223]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe68c0c570 a2=70 a3=0 items=0 ppid=3018 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.872000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:47:38.882000 audit[3227]: AVC avc: denied { bpf } for pid=3227 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.882000 audit[3227]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd6d0bd890 a2=70 a3=ffff items=0 ppid=3018 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Apr 12 18:47:38.882000 audit[3227]: AVC avc: denied { bpf } for pid=3227 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:38.882000 audit[3227]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd6d0bd760 a2=70 a3=3 items=0 ppid=3018 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:38.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Apr 12 18:47:38.884000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=524886 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:38.884000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c007590960 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:47:38.884000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:47:38.891000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=524892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:38.891000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c007346270 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:47:38.891000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:47:38.892000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:38.892000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c0073462a0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:47:38.892000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:47:38.896000 audit: BPF prog-id=148 op=UNLOAD Apr 12 18:47:38.918000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:38.918000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c003e024e0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:47:38.918000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:47:38.918000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:38.918000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c006e26390 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:47:38.918000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:47:38.920000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:38.920000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c003e02580 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:47:38.920000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:38.950 [INFO][3204] k8s.go 585: Cleaning up netns ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:38.950 [INFO][3204] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" iface="eth0" netns="/var/run/netns/cni-6147609d-ff7b-4b65-210a-78922ba058a3" Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:38.950 [INFO][3204] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" iface="eth0" netns="/var/run/netns/cni-6147609d-ff7b-4b65-210a-78922ba058a3" Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:38.950 [INFO][3204] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" iface="eth0" netns="/var/run/netns/cni-6147609d-ff7b-4b65-210a-78922ba058a3" Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:38.950 [INFO][3204] k8s.go 592: Releasing IP address(es) ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:38.950 [INFO][3204] utils.go 188: Calico CNI releasing IP address ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:38.997 [INFO][3247] ipam_plugin.go 415: Releasing address using handleID ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" HandleID="k8s-pod-network.ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:38.997 [INFO][3247] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:38.998 [INFO][3247] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:39.010 [WARNING][3247] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" HandleID="k8s-pod-network.ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:39.010 [INFO][3247] ipam_plugin.go 443: Releasing address using workloadID ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" HandleID="k8s-pod-network.ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:39.019 [INFO][3247] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:39.033108 env[1058]: 2024-04-12 18:47:39.024 [INFO][3204] k8s.go 598: Teardown processing complete. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:39.034673 env[1058]: time="2024-04-12T18:47:39.034632551Z" level=info msg="TearDown network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\" successfully" Apr 12 18:47:39.034767 env[1058]: time="2024-04-12T18:47:39.034748780Z" level=info msg="StopPodSandbox for \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\" returns successfully" Apr 12 18:47:39.035803 env[1058]: time="2024-04-12T18:47:39.035779144Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-kqnk6,Uid:a9886980-cb6a-4a27-818b-a7549d00deb2,Namespace:calico-system,Attempt:1,}" Apr 12 18:47:39.173000 audit[3287]: NETFILTER_CFG table=nat:101 family=2 entries=15 op=nft_register_chain pid=3287 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:47:39.173000 audit[3287]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffd8b772cf0 a2=0 a3=7ffd8b772cdc items=0 ppid=3018 pid=3287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.173000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:47:39.175000 audit[3286]: NETFILTER_CFG table=raw:102 family=2 entries=19 op=nft_register_chain pid=3286 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:47:39.175000 audit[3286]: SYSCALL arch=c000003e syscall=46 success=yes exit=6992 a0=3 a1=7ffcaf4edd80 a2=0 a3=0 items=0 ppid=3018 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.175000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:47:39.178000 audit[3289]: NETFILTER_CFG table=mangle:103 family=2 entries=16 op=nft_register_chain pid=3289 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:47:39.178000 audit[3289]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffde8efd560 a2=0 a3=7ffde8efd54c items=0 ppid=3018 pid=3289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.178000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:47:39.211000 audit[3296]: NETFILTER_CFG table=filter:104 family=2 entries=39 op=nft_register_chain pid=3296 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:47:39.211000 audit[3296]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffe4e4099d0 a2=0 a3=7ffe4e4099bc items=0 ppid=3018 pid=3296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.211000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:47:39.257278 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliee98d3daa20: link becomes ready Apr 12 18:47:39.258976 systemd-networkd[976]: caliee98d3daa20: Link UP Apr 12 18:47:39.260943 systemd-networkd[976]: caliee98d3daa20: Gained carrier Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:38.987 [INFO][3229] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0 coredns-5dd5756b68- kube-system 6bd894e1-4052-4c12-9758-c2cc6246af88 711 0 2024-04-12 18:46:56 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-3-9-b9e221dcee.novalocal coredns-5dd5756b68-w5pf6 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliee98d3daa20 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Namespace="kube-system" Pod="coredns-5dd5756b68-w5pf6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:38.987 [INFO][3229] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Namespace="kube-system" Pod="coredns-5dd5756b68-w5pf6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.120 [INFO][3258] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" HandleID="k8s-pod-network.300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.141 [INFO][3258] ipam_plugin.go 268: Auto assigning IP ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" HandleID="k8s-pod-network.300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000294420), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-3-9-b9e221dcee.novalocal", "pod":"coredns-5dd5756b68-w5pf6", "timestamp":"2024-04-12 18:47:39.120300182 +0000 UTC"}, Hostname:"ci-3510-3-3-9-b9e221dcee.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.141 [INFO][3258] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.141 [INFO][3258] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.141 [INFO][3258] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-3-9-b9e221dcee.novalocal' Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.145 [INFO][3258] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.176 [INFO][3258] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.199 [INFO][3258] ipam.go 489: Trying affinity for 192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.204 [INFO][3258] ipam.go 155: Attempting to load block cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.208 [INFO][3258] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.208 [INFO][3258] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.111.0/26 handle="k8s-pod-network.300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.212 [INFO][3258] ipam.go 1682: Creating new handle: k8s-pod-network.300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.217 [INFO][3258] ipam.go 1203: Writing block in order to claim IPs block=192.168.111.0/26 handle="k8s-pod-network.300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.230 [INFO][3258] ipam.go 1216: Successfully claimed IPs: [192.168.111.1/26] block=192.168.111.0/26 handle="k8s-pod-network.300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.230 [INFO][3258] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.111.1/26] handle="k8s-pod-network.300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.230 [INFO][3258] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:39.282024 env[1058]: 2024-04-12 18:47:39.231 [INFO][3258] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.111.1/26] IPv6=[] ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" HandleID="k8s-pod-network.300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:39.287454 env[1058]: 2024-04-12 18:47:39.237 [INFO][3229] k8s.go 385: Populated endpoint ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Namespace="kube-system" Pod="coredns-5dd5756b68-w5pf6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"6bd894e1-4052-4c12-9758-c2cc6246af88", ResourceVersion:"711", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 46, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"", Pod:"coredns-5dd5756b68-w5pf6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.111.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliee98d3daa20", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:39.287454 env[1058]: 2024-04-12 18:47:39.238 [INFO][3229] k8s.go 386: Calico CNI using IPs: [192.168.111.1/32] ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Namespace="kube-system" Pod="coredns-5dd5756b68-w5pf6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:39.287454 env[1058]: 2024-04-12 18:47:39.238 [INFO][3229] dataplane_linux.go 68: Setting the host side veth name to caliee98d3daa20 ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Namespace="kube-system" Pod="coredns-5dd5756b68-w5pf6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:39.287454 env[1058]: 2024-04-12 18:47:39.257 [INFO][3229] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Namespace="kube-system" Pod="coredns-5dd5756b68-w5pf6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:39.287454 env[1058]: 2024-04-12 18:47:39.257 [INFO][3229] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Namespace="kube-system" Pod="coredns-5dd5756b68-w5pf6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"6bd894e1-4052-4c12-9758-c2cc6246af88", ResourceVersion:"711", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 46, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f", Pod:"coredns-5dd5756b68-w5pf6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.111.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliee98d3daa20", MAC:"f2:d9:98:b5:e9:5e", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:39.287454 env[1058]: 2024-04-12 18:47:39.278 [INFO][3229] k8s.go 498: Wrote updated endpoint to datastore ContainerID="300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f" Namespace="kube-system" Pod="coredns-5dd5756b68-w5pf6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:39.325661 env[1058]: time="2024-04-12T18:47:39.325566727Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:47:39.326311 env[1058]: time="2024-04-12T18:47:39.326241434Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:47:39.326389 env[1058]: time="2024-04-12T18:47:39.326326614Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:47:39.326968 env[1058]: time="2024-04-12T18:47:39.326580220Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f pid=3323 runtime=io.containerd.runc.v2 Apr 12 18:47:39.343642 systemd[1]: Started cri-containerd-300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f.scope. Apr 12 18:47:39.353283 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1f28f64c859: link becomes ready Apr 12 18:47:39.358547 systemd-networkd[976]: cali1f28f64c859: Link UP Apr 12 18:47:39.358764 systemd-networkd[976]: cali1f28f64c859: Gained carrier Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.160 [INFO][3266] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0 csi-node-driver- calico-system a9886980-cb6a-4a27-818b-a7549d00deb2 715 0 2024-04-12 18:47:04 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:64699887c5 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s ci-3510-3-3-9-b9e221dcee.novalocal csi-node-driver-kqnk6 eth0 default [] [] [kns.calico-system ksa.calico-system.default] cali1f28f64c859 [] []}} ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Namespace="calico-system" Pod="csi-node-driver-kqnk6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.160 [INFO][3266] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Namespace="calico-system" Pod="csi-node-driver-kqnk6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.243 [INFO][3298] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" HandleID="k8s-pod-network.2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.288 [INFO][3298] ipam_plugin.go 268: Auto assigning IP ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" HandleID="k8s-pod-network.2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002814c0), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-3-9-b9e221dcee.novalocal", "pod":"csi-node-driver-kqnk6", "timestamp":"2024-04-12 18:47:39.243516789 +0000 UTC"}, Hostname:"ci-3510-3-3-9-b9e221dcee.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.288 [INFO][3298] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.288 [INFO][3298] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.288 [INFO][3298] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-3-9-b9e221dcee.novalocal' Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.291 [INFO][3298] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.297 [INFO][3298] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.314 [INFO][3298] ipam.go 489: Trying affinity for 192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.318 [INFO][3298] ipam.go 155: Attempting to load block cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.323 [INFO][3298] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.323 [INFO][3298] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.111.0/26 handle="k8s-pod-network.2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.327 [INFO][3298] ipam.go 1682: Creating new handle: k8s-pod-network.2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887 Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.333 [INFO][3298] ipam.go 1203: Writing block in order to claim IPs block=192.168.111.0/26 handle="k8s-pod-network.2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.345 [INFO][3298] ipam.go 1216: Successfully claimed IPs: [192.168.111.2/26] block=192.168.111.0/26 handle="k8s-pod-network.2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.345 [INFO][3298] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.111.2/26] handle="k8s-pod-network.2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.345 [INFO][3298] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:39.385497 env[1058]: 2024-04-12 18:47:39.345 [INFO][3298] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.111.2/26] IPv6=[] ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" HandleID="k8s-pod-network.2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.386305 env[1058]: 2024-04-12 18:47:39.347 [INFO][3266] k8s.go 385: Populated endpoint ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Namespace="calico-system" Pod="csi-node-driver-kqnk6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a9886980-cb6a-4a27-818b-a7549d00deb2", ResourceVersion:"715", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"64699887c5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"", Pod:"csi-node-driver-kqnk6", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.111.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali1f28f64c859", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:39.386305 env[1058]: 2024-04-12 18:47:39.348 [INFO][3266] k8s.go 386: Calico CNI using IPs: [192.168.111.2/32] ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Namespace="calico-system" Pod="csi-node-driver-kqnk6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.386305 env[1058]: 2024-04-12 18:47:39.348 [INFO][3266] dataplane_linux.go 68: Setting the host side veth name to cali1f28f64c859 ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Namespace="calico-system" Pod="csi-node-driver-kqnk6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.386305 env[1058]: 2024-04-12 18:47:39.352 [INFO][3266] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Namespace="calico-system" Pod="csi-node-driver-kqnk6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.386305 env[1058]: 2024-04-12 18:47:39.352 [INFO][3266] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Namespace="calico-system" Pod="csi-node-driver-kqnk6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a9886980-cb6a-4a27-818b-a7549d00deb2", ResourceVersion:"715", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"64699887c5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887", Pod:"csi-node-driver-kqnk6", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.111.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali1f28f64c859", MAC:"96:5f:c4:77:60:fd", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:39.386305 env[1058]: 2024-04-12 18:47:39.382 [INFO][3266] k8s.go 498: Wrote updated endpoint to datastore ContainerID="2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887" Namespace="calico-system" Pod="csi-node-driver-kqnk6" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:39.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.409000 audit: BPF prog-id=149 op=LOAD Apr 12 18:47:39.411000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.411000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3323 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330306432373539363137336465353566383432323664316664633035 Apr 12 18:47:39.411000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.411000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3323 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.411000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330306432373539363137336465353566383432323664316664633035 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.412000 audit: BPF prog-id=150 op=LOAD Apr 12 18:47:39.412000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002f5110 items=0 ppid=3323 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.412000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330306432373539363137336465353566383432323664316664633035 Apr 12 18:47:39.413000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.413000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.413000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.413000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.413000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.413000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.413000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.413000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.413000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.413000 audit: BPF prog-id=151 op=LOAD Apr 12 18:47:39.413000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002f5158 items=0 ppid=3323 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330306432373539363137336465353566383432323664316664633035 Apr 12 18:47:39.415000 audit: BPF prog-id=151 op=UNLOAD Apr 12 18:47:39.415000 audit: BPF prog-id=150 op=UNLOAD Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { perfmon } for pid=3333 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit[3333]: AVC avc: denied { bpf } for pid=3333 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.415000 audit: BPF prog-id=152 op=LOAD Apr 12 18:47:39.415000 audit[3333]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002f5568 items=0 ppid=3323 pid=3333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.415000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330306432373539363137336465353566383432323664316664633035 Apr 12 18:47:39.427726 env[1058]: time="2024-04-12T18:47:39.427623252Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:47:39.428021 env[1058]: time="2024-04-12T18:47:39.427994389Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:47:39.428138 env[1058]: time="2024-04-12T18:47:39.428114474Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:47:39.428481 env[1058]: time="2024-04-12T18:47:39.428450085Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887 pid=3373 runtime=io.containerd.runc.v2 Apr 12 18:47:39.438000 audit[3384]: NETFILTER_CFG table=filter:105 family=2 entries=36 op=nft_register_chain pid=3384 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:47:39.438000 audit[3384]: SYSCALL arch=c000003e syscall=46 success=yes exit=20404 a0=3 a1=7fffcfd4c3b0 a2=0 a3=7fffcfd4c39c items=0 ppid=3018 pid=3384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.438000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:47:39.459650 systemd[1]: Started cri-containerd-2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887.scope. Apr 12 18:47:39.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.484000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.484000 audit: BPF prog-id=153 op=LOAD Apr 12 18:47:39.485000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.485000 audit[3383]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3373 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.485000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261356337636565303434623933636333326238353739323462323666 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3373 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261356337636565303434623933636333326238353739323462323666 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.486000 audit: BPF prog-id=154 op=LOAD Apr 12 18:47:39.486000 audit[3383]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a88e0 items=0 ppid=3373 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261356337636565303434623933636333326238353739323462323666 Apr 12 18:47:39.487000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.487000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.487000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.487000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.487000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.487000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.487000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.487000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.487000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.487000 audit: BPF prog-id=155 op=LOAD Apr 12 18:47:39.487000 audit[3383]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a8928 items=0 ppid=3373 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.487000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261356337636565303434623933636333326238353739323462323666 Apr 12 18:47:39.487000 audit: BPF prog-id=155 op=UNLOAD Apr 12 18:47:39.488000 audit: BPF prog-id=154 op=UNLOAD Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { perfmon } for pid=3383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit[3383]: AVC avc: denied { bpf } for pid=3383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.488000 audit: BPF prog-id=156 op=LOAD Apr 12 18:47:39.488000 audit[3383]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a8d38 items=0 ppid=3373 pid=3383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261356337636565303434623933636333326238353739323462323666 Apr 12 18:47:39.494854 env[1058]: time="2024-04-12T18:47:39.494772189Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-w5pf6,Uid:6bd894e1-4052-4c12-9758-c2cc6246af88,Namespace:kube-system,Attempt:1,} returns sandbox id \"300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f\"" Apr 12 18:47:39.499756 env[1058]: time="2024-04-12T18:47:39.499720681Z" level=info msg="CreateContainer within sandbox \"300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Apr 12 18:47:39.518786 env[1058]: time="2024-04-12T18:47:39.518729234Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-kqnk6,Uid:a9886980-cb6a-4a27-818b-a7549d00deb2,Namespace:calico-system,Attempt:1,} returns sandbox id \"2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887\"" Apr 12 18:47:39.522558 env[1058]: time="2024-04-12T18:47:39.522516486Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.3\"" Apr 12 18:47:39.549686 systemd-networkd[976]: vxlan.calico: Link UP Apr 12 18:47:39.549694 systemd-networkd[976]: vxlan.calico: Gained carrier Apr 12 18:47:39.559706 env[1058]: time="2024-04-12T18:47:39.559661925Z" level=info msg="CreateContainer within sandbox \"300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"ff4bc7b6dcb4a7e32389ea06278f901f8d8dfd6346a956f0274512c0d449cc60\"" Apr 12 18:47:39.567912 env[1058]: time="2024-04-12T18:47:39.567863074Z" level=info msg="StartContainer for \"ff4bc7b6dcb4a7e32389ea06278f901f8d8dfd6346a956f0274512c0d449cc60\"" Apr 12 18:47:39.612222 systemd[1]: Started cri-containerd-ff4bc7b6dcb4a7e32389ea06278f901f8d8dfd6346a956f0274512c0d449cc60.scope. Apr 12 18:47:39.628000 audit[3440]: NETFILTER_CFG table=filter:106 family=2 entries=40 op=nft_register_chain pid=3440 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:47:39.628000 audit[3440]: SYSCALL arch=c000003e syscall=46 success=yes exit=21592 a0=3 a1=7fff5e5579c0 a2=0 a3=7fff5e5579ac items=0 ppid=3018 pid=3440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.628000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:47:39.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.639000 audit: BPF prog-id=157 op=LOAD Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3323 pid=3422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666346263376236646362346137653332333839656130363237386639 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3323 pid=3422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666346263376236646362346137653332333839656130363237386639 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit: BPF prog-id=158 op=LOAD Apr 12 18:47:39.640000 audit[3422]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000306d90 items=0 ppid=3323 pid=3422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666346263376236646362346137653332333839656130363237386639 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit: BPF prog-id=159 op=LOAD Apr 12 18:47:39.640000 audit[3422]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000306dd8 items=0 ppid=3323 pid=3422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666346263376236646362346137653332333839656130363237386639 Apr 12 18:47:39.640000 audit: BPF prog-id=159 op=UNLOAD Apr 12 18:47:39.640000 audit: BPF prog-id=158 op=UNLOAD Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { perfmon } for pid=3422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit[3422]: AVC avc: denied { bpf } for pid=3422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:39.640000 audit: BPF prog-id=160 op=LOAD Apr 12 18:47:39.640000 audit[3422]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003071e8 items=0 ppid=3323 pid=3422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:39.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666346263376236646362346137653332333839656130363237386639 Apr 12 18:47:39.682109 env[1058]: time="2024-04-12T18:47:39.682054735Z" level=info msg="StartContainer for \"ff4bc7b6dcb4a7e32389ea06278f901f8d8dfd6346a956f0274512c0d449cc60\" returns successfully" Apr 12 18:47:39.693940 systemd[1]: run-netns-cni\x2d6147609d\x2dff7b\x2d4b65\x2d210a\x2d78922ba058a3.mount: Deactivated successfully. Apr 12 18:47:39.758119 env[1058]: time="2024-04-12T18:47:39.758061986Z" level=info msg="StopPodSandbox for \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\"" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.826 [INFO][3464] k8s.go 585: Cleaning up netns ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.826 [INFO][3464] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" iface="eth0" netns="/var/run/netns/cni-d9b71ab7-6a92-aa84-7c05-59abfa3ffcb2" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.828 [INFO][3464] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" iface="eth0" netns="/var/run/netns/cni-d9b71ab7-6a92-aa84-7c05-59abfa3ffcb2" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.829 [INFO][3464] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" iface="eth0" netns="/var/run/netns/cni-d9b71ab7-6a92-aa84-7c05-59abfa3ffcb2" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.829 [INFO][3464] k8s.go 592: Releasing IP address(es) ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.829 [INFO][3464] utils.go 188: Calico CNI releasing IP address ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.863 [INFO][3470] ipam_plugin.go 415: Releasing address using handleID ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" HandleID="k8s-pod-network.f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.863 [INFO][3470] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.864 [INFO][3470] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.871 [WARNING][3470] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" HandleID="k8s-pod-network.f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.872 [INFO][3470] ipam_plugin.go 443: Releasing address using workloadID ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" HandleID="k8s-pod-network.f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.874 [INFO][3470] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:39.880134 env[1058]: 2024-04-12 18:47:39.875 [INFO][3464] k8s.go 598: Teardown processing complete. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:39.883109 systemd[1]: run-netns-cni\x2dd9b71ab7\x2d6a92\x2daa84\x2d7c05\x2d59abfa3ffcb2.mount: Deactivated successfully. Apr 12 18:47:39.885379 env[1058]: time="2024-04-12T18:47:39.884365510Z" level=info msg="TearDown network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\" successfully" Apr 12 18:47:39.885379 env[1058]: time="2024-04-12T18:47:39.884409593Z" level=info msg="StopPodSandbox for \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\" returns successfully" Apr 12 18:47:39.885663 env[1058]: time="2024-04-12T18:47:39.885633571Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-k4fhh,Uid:d7831c02-9f32-4301-9f74-a40401274cca,Namespace:kube-system,Attempt:1,}" Apr 12 18:47:40.097467 systemd-networkd[976]: cali3b2925861ae: Link UP Apr 12 18:47:40.103239 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Apr 12 18:47:40.103638 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3b2925861ae: link becomes ready Apr 12 18:47:40.103818 systemd-networkd[976]: cali3b2925861ae: Gained carrier Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:39.962 [INFO][3477] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0 coredns-5dd5756b68- kube-system d7831c02-9f32-4301-9f74-a40401274cca 727 0 2024-04-12 18:46:56 +0000 UTC map[k8s-app:kube-dns pod-template-hash:5dd5756b68 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s ci-3510-3-3-9-b9e221dcee.novalocal coredns-5dd5756b68-k4fhh eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3b2925861ae [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Namespace="kube-system" Pod="coredns-5dd5756b68-k4fhh" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:39.962 [INFO][3477] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Namespace="kube-system" Pod="coredns-5dd5756b68-k4fhh" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.004 [INFO][3487] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" HandleID="k8s-pod-network.4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.022 [INFO][3487] ipam_plugin.go 268: Auto assigning IP ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" HandleID="k8s-pod-network.4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002813f0), Attrs:map[string]string{"namespace":"kube-system", "node":"ci-3510-3-3-9-b9e221dcee.novalocal", "pod":"coredns-5dd5756b68-k4fhh", "timestamp":"2024-04-12 18:47:40.00426557 +0000 UTC"}, Hostname:"ci-3510-3-3-9-b9e221dcee.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.022 [INFO][3487] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.022 [INFO][3487] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.022 [INFO][3487] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-3-9-b9e221dcee.novalocal' Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.026 [INFO][3487] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.048 [INFO][3487] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.056 [INFO][3487] ipam.go 489: Trying affinity for 192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.060 [INFO][3487] ipam.go 155: Attempting to load block cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.066 [INFO][3487] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.066 [INFO][3487] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.111.0/26 handle="k8s-pod-network.4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.071 [INFO][3487] ipam.go 1682: Creating new handle: k8s-pod-network.4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526 Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.083 [INFO][3487] ipam.go 1203: Writing block in order to claim IPs block=192.168.111.0/26 handle="k8s-pod-network.4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.090 [INFO][3487] ipam.go 1216: Successfully claimed IPs: [192.168.111.3/26] block=192.168.111.0/26 handle="k8s-pod-network.4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.090 [INFO][3487] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.111.3/26] handle="k8s-pod-network.4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.090 [INFO][3487] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:40.124363 env[1058]: 2024-04-12 18:47:40.090 [INFO][3487] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.111.3/26] IPv6=[] ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" HandleID="k8s-pod-network.4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:40.125344 env[1058]: 2024-04-12 18:47:40.092 [INFO][3477] k8s.go 385: Populated endpoint ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Namespace="kube-system" Pod="coredns-5dd5756b68-k4fhh" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"d7831c02-9f32-4301-9f74-a40401274cca", ResourceVersion:"727", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 46, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"", Pod:"coredns-5dd5756b68-k4fhh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.111.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3b2925861ae", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:40.125344 env[1058]: 2024-04-12 18:47:40.093 [INFO][3477] k8s.go 386: Calico CNI using IPs: [192.168.111.3/32] ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Namespace="kube-system" Pod="coredns-5dd5756b68-k4fhh" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:40.125344 env[1058]: 2024-04-12 18:47:40.093 [INFO][3477] dataplane_linux.go 68: Setting the host side veth name to cali3b2925861ae ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Namespace="kube-system" Pod="coredns-5dd5756b68-k4fhh" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:40.125344 env[1058]: 2024-04-12 18:47:40.101 [INFO][3477] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Namespace="kube-system" Pod="coredns-5dd5756b68-k4fhh" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:40.125344 env[1058]: 2024-04-12 18:47:40.111 [INFO][3477] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Namespace="kube-system" Pod="coredns-5dd5756b68-k4fhh" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"d7831c02-9f32-4301-9f74-a40401274cca", ResourceVersion:"727", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 46, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526", Pod:"coredns-5dd5756b68-k4fhh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.111.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3b2925861ae", MAC:"fe:ea:5a:8b:f1:fd", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:40.125344 env[1058]: 2024-04-12 18:47:40.122 [INFO][3477] k8s.go 498: Wrote updated endpoint to datastore ContainerID="4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526" Namespace="kube-system" Pod="coredns-5dd5756b68-k4fhh" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:40.151000 audit[3507]: NETFILTER_CFG table=filter:107 family=2 entries=34 op=nft_register_chain pid=3507 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:47:40.219976 kernel: kauditd_printk_skb: 358 callbacks suppressed Apr 12 18:47:40.220084 kernel: audit: type=1325 audit(1712947660.151:1211): table=filter:107 family=2 entries=34 op=nft_register_chain pid=3507 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:47:40.220114 kernel: audit: type=1300 audit(1712947660.151:1211): arch=c000003e syscall=46 success=yes exit=18220 a0=3 a1=7fff4491ec20 a2=0 a3=7fff4491ec0c items=0 ppid=3018 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.220152 kernel: audit: type=1327 audit(1712947660.151:1211): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:47:40.151000 audit[3507]: SYSCALL arch=c000003e syscall=46 success=yes exit=18220 a0=3 a1=7fff4491ec20 a2=0 a3=7fff4491ec0c items=0 ppid=3018 pid=3507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.151000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:47:40.436526 env[1058]: time="2024-04-12T18:47:40.436391694Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:47:40.436829 env[1058]: time="2024-04-12T18:47:40.436477154Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:47:40.436829 env[1058]: time="2024-04-12T18:47:40.436494286Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:47:40.436829 env[1058]: time="2024-04-12T18:47:40.436746569Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526 pid=3516 runtime=io.containerd.runc.v2 Apr 12 18:47:40.457808 systemd[1]: Started cri-containerd-4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526.scope. Apr 12 18:47:40.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.491778 kernel: audit: type=1400 audit(1712947660.483:1212): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492094 kernel: audit: type=1400 audit(1712947660.483:1213): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.499383 kernel: audit: type=1400 audit(1712947660.483:1214): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.508649 kernel: audit: type=1400 audit(1712947660.483:1215): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.508750 kernel: audit: type=1400 audit(1712947660.483:1216): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.517331 kernel: audit: type=1400 audit(1712947660.483:1217): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.523335 kernel: audit: type=1400 audit(1712947660.483:1218): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.483000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.483000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.491000 audit: BPF prog-id=161 op=LOAD Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3516 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465353064366233313934313861613864323461306331663234313234 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3516 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465353064366233313934313861613864323461306331663234313234 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.492000 audit: BPF prog-id=162 op=LOAD Apr 12 18:47:40.492000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000390ec0 items=0 ppid=3516 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465353064366233313934313861613864323461306331663234313234 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit: BPF prog-id=163 op=LOAD Apr 12 18:47:40.497000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000390f08 items=0 ppid=3516 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465353064366233313934313861613864323461306331663234313234 Apr 12 18:47:40.497000 audit: BPF prog-id=163 op=UNLOAD Apr 12 18:47:40.497000 audit: BPF prog-id=162 op=UNLOAD Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { perfmon } for pid=3524 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit[3524]: AVC avc: denied { bpf } for pid=3524 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.497000 audit: BPF prog-id=164 op=LOAD Apr 12 18:47:40.497000 audit[3524]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000391318 items=0 ppid=3516 pid=3524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.497000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3465353064366233313934313861613864323461306331663234313234 Apr 12 18:47:40.554475 systemd-networkd[976]: caliee98d3daa20: Gained IPv6LL Apr 12 18:47:40.596981 env[1058]: time="2024-04-12T18:47:40.596917299Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-5dd5756b68-k4fhh,Uid:d7831c02-9f32-4301-9f74-a40401274cca,Namespace:kube-system,Attempt:1,} returns sandbox id \"4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526\"" Apr 12 18:47:40.605706 env[1058]: time="2024-04-12T18:47:40.605657179Z" level=info msg="CreateContainer within sandbox \"4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Apr 12 18:47:40.640184 env[1058]: time="2024-04-12T18:47:40.640103218Z" level=info msg="CreateContainer within sandbox \"4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"7231aa75336092cd9fc28946b3103a1d8f8c82612804da9668adab8f6c7c69da\"" Apr 12 18:47:40.641693 env[1058]: time="2024-04-12T18:47:40.641665020Z" level=info msg="StartContainer for \"7231aa75336092cd9fc28946b3103a1d8f8c82612804da9668adab8f6c7c69da\"" Apr 12 18:47:40.664457 systemd[1]: Started cri-containerd-7231aa75336092cd9fc28946b3103a1d8f8c82612804da9668adab8f6c7c69da.scope. Apr 12 18:47:40.670000 audit[3566]: NETFILTER_CFG table=filter:108 family=2 entries=14 op=nft_register_rule pid=3566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:40.670000 audit[3566]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffca9845490 a2=0 a3=7ffca984547c items=0 ppid=2126 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.670000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:40.673000 audit[3566]: NETFILTER_CFG table=nat:109 family=2 entries=14 op=nft_register_rule pid=3566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:40.673000 audit[3566]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffca9845490 a2=0 a3=0 items=0 ppid=2126 pid=3566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.673000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:40.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.697000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.697000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.698000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.698000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.698000 audit: BPF prog-id=165 op=LOAD Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3516 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333161613735333336303932636439666332383934366233313033 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3516 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333161613735333336303932636439666332383934366233313033 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.699000 audit: BPF prog-id=166 op=LOAD Apr 12 18:47:40.699000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001bd4b0 items=0 ppid=3516 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.699000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333161613735333336303932636439666332383934366233313033 Apr 12 18:47:40.702000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.702000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.702000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.702000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.702000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.702000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.702000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.702000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.702000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.702000 audit: BPF prog-id=167 op=LOAD Apr 12 18:47:40.702000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001bd4f8 items=0 ppid=3516 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333161613735333336303932636439666332383934366233313033 Apr 12 18:47:40.702000 audit: BPF prog-id=167 op=UNLOAD Apr 12 18:47:40.703000 audit: BPF prog-id=166 op=UNLOAD Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:40.703000 audit: BPF prog-id=168 op=LOAD Apr 12 18:47:40.703000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001bd908 items=0 ppid=3516 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:40.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732333161613735333336303932636439666332383934366233313033 Apr 12 18:47:40.765816 env[1058]: time="2024-04-12T18:47:40.763560100Z" level=info msg="StopPodSandbox for \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\"" Apr 12 18:47:40.769364 env[1058]: time="2024-04-12T18:47:40.769311870Z" level=info msg="StartContainer for \"7231aa75336092cd9fc28946b3103a1d8f8c82612804da9668adab8f6c7c69da\" returns successfully" Apr 12 18:47:40.861501 systemd-networkd[976]: vxlan.calico: Gained IPv6LL Apr 12 18:47:40.919914 kubelet[1948]: I0412 18:47:40.919882 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-w5pf6" podStartSLOduration=44.919828241 podCreationTimestamp="2024-04-12 18:46:56 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:47:40.435631476 +0000 UTC m=+57.848581935" watchObservedRunningTime="2024-04-12 18:47:40.919828241 +0000 UTC m=+58.332778680" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.921 [INFO][3603] k8s.go 585: Cleaning up netns ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.921 [INFO][3603] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" iface="eth0" netns="/var/run/netns/cni-87bf58b0-b825-579f-f53f-b7f67e6725e0" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.922 [INFO][3603] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" iface="eth0" netns="/var/run/netns/cni-87bf58b0-b825-579f-f53f-b7f67e6725e0" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.922 [INFO][3603] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" iface="eth0" netns="/var/run/netns/cni-87bf58b0-b825-579f-f53f-b7f67e6725e0" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.922 [INFO][3603] k8s.go 592: Releasing IP address(es) ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.922 [INFO][3603] utils.go 188: Calico CNI releasing IP address ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.971 [INFO][3612] ipam_plugin.go 415: Releasing address using handleID ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" HandleID="k8s-pod-network.81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.971 [INFO][3612] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.971 [INFO][3612] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.984 [WARNING][3612] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" HandleID="k8s-pod-network.81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.984 [INFO][3612] ipam_plugin.go 443: Releasing address using workloadID ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" HandleID="k8s-pod-network.81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.986 [INFO][3612] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:40.993569 env[1058]: 2024-04-12 18:47:40.988 [INFO][3603] k8s.go 598: Teardown processing complete. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:40.993569 env[1058]: time="2024-04-12T18:47:40.993166046Z" level=info msg="TearDown network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\" successfully" Apr 12 18:47:40.993569 env[1058]: time="2024-04-12T18:47:40.993205930Z" level=info msg="StopPodSandbox for \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\" returns successfully" Apr 12 18:47:40.992874 systemd[1]: run-netns-cni\x2d87bf58b0\x2db825\x2d579f\x2df53f\x2db7f67e6725e0.mount: Deactivated successfully. Apr 12 18:47:40.998408 env[1058]: time="2024-04-12T18:47:40.998362282Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5998b5945c-h9m42,Uid:c51a9672-65ae-41a7-838f-2a70d21a8fe9,Namespace:calico-system,Attempt:1,}" Apr 12 18:47:41.342298 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif114b759678: link becomes ready Apr 12 18:47:41.343286 systemd-networkd[976]: calif114b759678: Link UP Apr 12 18:47:41.343493 systemd-networkd[976]: calif114b759678: Gained carrier Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.239 [INFO][3618] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0 calico-kube-controllers-5998b5945c- calico-system c51a9672-65ae-41a7-838f-2a70d21a8fe9 745 0 2024-04-12 18:47:04 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5998b5945c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s ci-3510-3-3-9-b9e221dcee.novalocal calico-kube-controllers-5998b5945c-h9m42 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calif114b759678 [] []}} ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Namespace="calico-system" Pod="calico-kube-controllers-5998b5945c-h9m42" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.239 [INFO][3618] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Namespace="calico-system" Pod="calico-kube-controllers-5998b5945c-h9m42" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.281 [INFO][3630] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" HandleID="k8s-pod-network.a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.298 [INFO][3630] ipam_plugin.go 268: Auto assigning IP ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" HandleID="k8s-pod-network.a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002f9850), Attrs:map[string]string{"namespace":"calico-system", "node":"ci-3510-3-3-9-b9e221dcee.novalocal", "pod":"calico-kube-controllers-5998b5945c-h9m42", "timestamp":"2024-04-12 18:47:41.281412034 +0000 UTC"}, Hostname:"ci-3510-3-3-9-b9e221dcee.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.298 [INFO][3630] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.298 [INFO][3630] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.298 [INFO][3630] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-3-9-b9e221dcee.novalocal' Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.300 [INFO][3630] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.306 [INFO][3630] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.311 [INFO][3630] ipam.go 489: Trying affinity for 192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.313 [INFO][3630] ipam.go 155: Attempting to load block cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.316 [INFO][3630] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.316 [INFO][3630] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.111.0/26 handle="k8s-pod-network.a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.319 [INFO][3630] ipam.go 1682: Creating new handle: k8s-pod-network.a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.327 [INFO][3630] ipam.go 1203: Writing block in order to claim IPs block=192.168.111.0/26 handle="k8s-pod-network.a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.336 [INFO][3630] ipam.go 1216: Successfully claimed IPs: [192.168.111.4/26] block=192.168.111.0/26 handle="k8s-pod-network.a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.336 [INFO][3630] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.111.4/26] handle="k8s-pod-network.a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.336 [INFO][3630] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:41.364477 env[1058]: 2024-04-12 18:47:41.336 [INFO][3630] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.111.4/26] IPv6=[] ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" HandleID="k8s-pod-network.a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:41.365452 env[1058]: 2024-04-12 18:47:41.338 [INFO][3618] k8s.go 385: Populated endpoint ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Namespace="calico-system" Pod="calico-kube-controllers-5998b5945c-h9m42" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0", GenerateName:"calico-kube-controllers-5998b5945c-", Namespace:"calico-system", SelfLink:"", UID:"c51a9672-65ae-41a7-838f-2a70d21a8fe9", ResourceVersion:"745", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5998b5945c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"", Pod:"calico-kube-controllers-5998b5945c-h9m42", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.111.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif114b759678", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:41.365452 env[1058]: 2024-04-12 18:47:41.338 [INFO][3618] k8s.go 386: Calico CNI using IPs: [192.168.111.4/32] ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Namespace="calico-system" Pod="calico-kube-controllers-5998b5945c-h9m42" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:41.365452 env[1058]: 2024-04-12 18:47:41.338 [INFO][3618] dataplane_linux.go 68: Setting the host side veth name to calif114b759678 ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Namespace="calico-system" Pod="calico-kube-controllers-5998b5945c-h9m42" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:41.365452 env[1058]: 2024-04-12 18:47:41.340 [INFO][3618] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Namespace="calico-system" Pod="calico-kube-controllers-5998b5945c-h9m42" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:41.365452 env[1058]: 2024-04-12 18:47:41.352 [INFO][3618] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Namespace="calico-system" Pod="calico-kube-controllers-5998b5945c-h9m42" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0", GenerateName:"calico-kube-controllers-5998b5945c-", Namespace:"calico-system", SelfLink:"", UID:"c51a9672-65ae-41a7-838f-2a70d21a8fe9", ResourceVersion:"745", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5998b5945c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b", Pod:"calico-kube-controllers-5998b5945c-h9m42", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.111.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif114b759678", MAC:"fe:b2:e9:04:6a:4b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:41.365452 env[1058]: 2024-04-12 18:47:41.361 [INFO][3618] k8s.go 498: Wrote updated endpoint to datastore ContainerID="a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b" Namespace="calico-system" Pod="calico-kube-controllers-5998b5945c-h9m42" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:41.373493 systemd-networkd[976]: cali1f28f64c859: Gained IPv6LL Apr 12 18:47:41.403513 env[1058]: time="2024-04-12T18:47:41.403273052Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:47:41.403513 env[1058]: time="2024-04-12T18:47:41.403433894Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:47:41.403513 env[1058]: time="2024-04-12T18:47:41.403464852Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:47:41.421854 env[1058]: time="2024-04-12T18:47:41.404350706Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b pid=3653 runtime=io.containerd.runc.v2 Apr 12 18:47:41.436012 kubelet[1948]: I0412 18:47:41.435766 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-5dd5756b68-k4fhh" podStartSLOduration=45.435715718 podCreationTimestamp="2024-04-12 18:46:56 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:47:41.428167395 +0000 UTC m=+58.841117854" watchObservedRunningTime="2024-04-12 18:47:41.435715718 +0000 UTC m=+58.848666157" Apr 12 18:47:41.449823 systemd[1]: Started cri-containerd-a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b.scope. Apr 12 18:47:41.502519 systemd-networkd[976]: cali3b2925861ae: Gained IPv6LL Apr 12 18:47:41.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.568000 audit: BPF prog-id=169 op=LOAD Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3653 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139376434623761396230386162343534303134666462393765353630 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3653 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139376434623761396230386162343534303134666462393765353630 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.569000 audit: BPF prog-id=170 op=LOAD Apr 12 18:47:41.569000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003806c0 items=0 ppid=3653 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139376434623761396230386162343534303134666462393765353630 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit: BPF prog-id=171 op=LOAD Apr 12 18:47:41.570000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000380708 items=0 ppid=3653 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139376434623761396230386162343534303134666462393765353630 Apr 12 18:47:41.570000 audit: BPF prog-id=171 op=UNLOAD Apr 12 18:47:41.570000 audit: BPF prog-id=170 op=UNLOAD Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:41.570000 audit: BPF prog-id=172 op=LOAD Apr 12 18:47:41.570000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000380b18 items=0 ppid=3653 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.570000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139376434623761396230386162343534303134666462393765353630 Apr 12 18:47:41.564000 audit[3684]: NETFILTER_CFG table=filter:110 family=2 entries=11 op=nft_register_rule pid=3684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:41.564000 audit[3684]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7fffb78141f0 a2=0 a3=7fffb78141dc items=0 ppid=2126 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.564000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:41.616000 audit[3684]: NETFILTER_CFG table=nat:111 family=2 entries=47 op=nft_register_chain pid=3684 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:41.616000 audit[3684]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7fffb78141f0 a2=0 a3=7fffb78141dc items=0 ppid=2126 pid=3684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.616000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:41.623000 audit[3685]: NETFILTER_CFG table=filter:112 family=2 entries=42 op=nft_register_chain pid=3685 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:47:41.623000 audit[3685]: SYSCALL arch=c000003e syscall=46 success=yes exit=21016 a0=3 a1=7ffc59c7de50 a2=0 a3=0 items=0 ppid=3018 pid=3685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.623000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:47:41.654820 env[1058]: time="2024-04-12T18:47:41.654744160Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5998b5945c-h9m42,Uid:c51a9672-65ae-41a7-838f-2a70d21a8fe9,Namespace:calico-system,Attempt:1,} returns sandbox id \"a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b\"" Apr 12 18:47:41.665000 audit[3695]: NETFILTER_CFG table=filter:113 family=2 entries=8 op=nft_register_rule pid=3695 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:41.665000 audit[3695]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffe136d5b80 a2=0 a3=7ffe136d5b6c items=0 ppid=2126 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.665000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:41.667000 audit[3695]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=3695 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:47:41.667000 audit[3695]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe136d5b80 a2=0 a3=7ffe136d5b6c items=0 ppid=2126 pid=3695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:41.667000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:47:42.093274 env[1058]: time="2024-04-12T18:47:42.093166208Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:42.096059 env[1058]: time="2024-04-12T18:47:42.096026649Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f457bd778a36f01fbbc41cd8b9ac45cf5e7e3a09e4d619cfa819328acd45ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:42.098590 env[1058]: time="2024-04-12T18:47:42.098557150Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:42.101052 env[1058]: time="2024-04-12T18:47:42.101017098Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e6e9be3e67df7388eae74d419fff785fdb35b0c3456e3d27a0251c7bdb55f0fd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:42.101770 env[1058]: time="2024-04-12T18:47:42.101732923Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.3\" returns image reference \"sha256:f457bd778a36f01fbbc41cd8b9ac45cf5e7e3a09e4d619cfa819328acd45ea0b\"" Apr 12 18:47:42.103691 env[1058]: time="2024-04-12T18:47:42.103638430Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.3\"" Apr 12 18:47:42.105648 env[1058]: time="2024-04-12T18:47:42.105326239Z" level=info msg="CreateContainer within sandbox \"2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Apr 12 18:47:42.138459 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1190387568.mount: Deactivated successfully. Apr 12 18:47:42.146756 env[1058]: time="2024-04-12T18:47:42.146713186Z" level=info msg="CreateContainer within sandbox \"2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"42156258dd0345ff8b83f7ae4f157a04486c2a514abd166f85b2d41557ac1383\"" Apr 12 18:47:42.148677 env[1058]: time="2024-04-12T18:47:42.147855300Z" level=info msg="StartContainer for \"42156258dd0345ff8b83f7ae4f157a04486c2a514abd166f85b2d41557ac1383\"" Apr 12 18:47:42.178416 systemd[1]: Started cri-containerd-42156258dd0345ff8b83f7ae4f157a04486c2a514abd166f85b2d41557ac1383.scope. Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f4dfb4d77c8 items=0 ppid=3373 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:42.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432313536323538646430333435666638623833663761653466313537 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.194000 audit: BPF prog-id=173 op=LOAD Apr 12 18:47:42.194000 audit[3706]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c00032fbd8 items=0 ppid=3373 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:42.194000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432313536323538646430333435666638623833663761653466313537 Apr 12 18:47:42.196000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.196000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.196000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.196000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.196000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.196000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.196000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.196000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.196000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.196000 audit: BPF prog-id=174 op=LOAD Apr 12 18:47:42.196000 audit[3706]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c00032fc28 items=0 ppid=3373 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:42.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432313536323538646430333435666638623833663761653466313537 Apr 12 18:47:42.197000 audit: BPF prog-id=174 op=UNLOAD Apr 12 18:47:42.198000 audit: BPF prog-id=173 op=UNLOAD Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { perfmon } for pid=3706 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit[3706]: AVC avc: denied { bpf } for pid=3706 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:42.198000 audit: BPF prog-id=175 op=LOAD Apr 12 18:47:42.198000 audit[3706]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c00032fcb8 items=0 ppid=3373 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:42.198000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3432313536323538646430333435666638623833663761653466313537 Apr 12 18:47:42.221235 env[1058]: time="2024-04-12T18:47:42.221164214Z" level=info msg="StartContainer for \"42156258dd0345ff8b83f7ae4f157a04486c2a514abd166f85b2d41557ac1383\" returns successfully" Apr 12 18:47:42.755449 env[1058]: time="2024-04-12T18:47:42.755370155Z" level=info msg="StopPodSandbox for \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\"" Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.850 [WARNING][3748] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0", GenerateName:"calico-kube-controllers-5998b5945c-", Namespace:"calico-system", SelfLink:"", UID:"c51a9672-65ae-41a7-838f-2a70d21a8fe9", ResourceVersion:"748", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5998b5945c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b", Pod:"calico-kube-controllers-5998b5945c-h9m42", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.111.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif114b759678", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.851 [INFO][3748] k8s.go 585: Cleaning up netns ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.851 [INFO][3748] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" iface="eth0" netns="" Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.852 [INFO][3748] k8s.go 592: Releasing IP address(es) ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.852 [INFO][3748] utils.go 188: Calico CNI releasing IP address ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.884 [INFO][3754] ipam_plugin.go 415: Releasing address using handleID ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" HandleID="k8s-pod-network.81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.884 [INFO][3754] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.884 [INFO][3754] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.895 [WARNING][3754] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" HandleID="k8s-pod-network.81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.895 [INFO][3754] ipam_plugin.go 443: Releasing address using workloadID ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" HandleID="k8s-pod-network.81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.897 [INFO][3754] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:42.904095 env[1058]: 2024-04-12 18:47:42.900 [INFO][3748] k8s.go 598: Teardown processing complete. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:42.905844 env[1058]: time="2024-04-12T18:47:42.904116998Z" level=info msg="TearDown network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\" successfully" Apr 12 18:47:42.905844 env[1058]: time="2024-04-12T18:47:42.904156362Z" level=info msg="StopPodSandbox for \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\" returns successfully" Apr 12 18:47:42.907702 env[1058]: time="2024-04-12T18:47:42.907597813Z" level=info msg="RemovePodSandbox for \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\"" Apr 12 18:47:42.908155 env[1058]: time="2024-04-12T18:47:42.908016289Z" level=info msg="Forcibly stopping sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\"" Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:42.967 [WARNING][3775] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0", GenerateName:"calico-kube-controllers-5998b5945c-", Namespace:"calico-system", SelfLink:"", UID:"c51a9672-65ae-41a7-838f-2a70d21a8fe9", ResourceVersion:"748", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5998b5945c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b", Pod:"calico-kube-controllers-5998b5945c-h9m42", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.111.4/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif114b759678", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:42.967 [INFO][3775] k8s.go 585: Cleaning up netns ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:42.967 [INFO][3775] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" iface="eth0" netns="" Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:42.967 [INFO][3775] k8s.go 592: Releasing IP address(es) ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:42.967 [INFO][3775] utils.go 188: Calico CNI releasing IP address ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:42.992 [INFO][3783] ipam_plugin.go 415: Releasing address using handleID ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" HandleID="k8s-pod-network.81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:42.992 [INFO][3783] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:42.992 [INFO][3783] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:43.006 [WARNING][3783] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" HandleID="k8s-pod-network.81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:43.006 [INFO][3783] ipam_plugin.go 443: Releasing address using workloadID ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" HandleID="k8s-pod-network.81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--kube--controllers--5998b5945c--h9m42-eth0" Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:43.008 [INFO][3783] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:43.017150 env[1058]: 2024-04-12 18:47:43.013 [INFO][3775] k8s.go 598: Teardown processing complete. ContainerID="81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca" Apr 12 18:47:43.018970 env[1058]: time="2024-04-12T18:47:43.018900722Z" level=info msg="TearDown network for sandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\" successfully" Apr 12 18:47:43.030950 env[1058]: time="2024-04-12T18:47:43.030854916Z" level=info msg="RemovePodSandbox \"81d2e19b2c9ebd87e0bb05d02be15234b03ee7e2fdd2907c4fbc32e8b68bd1ca\" returns successfully" Apr 12 18:47:43.032311 env[1058]: time="2024-04-12T18:47:43.032261808Z" level=info msg="StopPodSandbox for \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\"" Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.088 [WARNING][3802] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"d7831c02-9f32-4301-9f74-a40401274cca", ResourceVersion:"756", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 46, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526", Pod:"coredns-5dd5756b68-k4fhh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.111.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3b2925861ae", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.088 [INFO][3802] k8s.go 585: Cleaning up netns ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.088 [INFO][3802] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" iface="eth0" netns="" Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.088 [INFO][3802] k8s.go 592: Releasing IP address(es) ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.088 [INFO][3802] utils.go 188: Calico CNI releasing IP address ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.115 [INFO][3809] ipam_plugin.go 415: Releasing address using handleID ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" HandleID="k8s-pod-network.f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.116 [INFO][3809] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.116 [INFO][3809] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.124 [WARNING][3809] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" HandleID="k8s-pod-network.f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.125 [INFO][3809] ipam_plugin.go 443: Releasing address using workloadID ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" HandleID="k8s-pod-network.f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.128 [INFO][3809] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:43.132209 env[1058]: 2024-04-12 18:47:43.130 [INFO][3802] k8s.go 598: Teardown processing complete. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:43.132975 env[1058]: time="2024-04-12T18:47:43.132281588Z" level=info msg="TearDown network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\" successfully" Apr 12 18:47:43.132975 env[1058]: time="2024-04-12T18:47:43.132325721Z" level=info msg="StopPodSandbox for \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\" returns successfully" Apr 12 18:47:43.133609 env[1058]: time="2024-04-12T18:47:43.133576309Z" level=info msg="RemovePodSandbox for \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\"" Apr 12 18:47:43.133742 env[1058]: time="2024-04-12T18:47:43.133700532Z" level=info msg="Forcibly stopping sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\"" Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.177 [WARNING][3829] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"d7831c02-9f32-4301-9f74-a40401274cca", ResourceVersion:"756", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 46, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"4e50d6b319418aa8d24a0c1f24124263082eb55d8efc272f3598bcd1f6e2f526", Pod:"coredns-5dd5756b68-k4fhh", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.111.3/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3b2925861ae", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.177 [INFO][3829] k8s.go 585: Cleaning up netns ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.177 [INFO][3829] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" iface="eth0" netns="" Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.177 [INFO][3829] k8s.go 592: Releasing IP address(es) ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.177 [INFO][3829] utils.go 188: Calico CNI releasing IP address ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.228 [INFO][3835] ipam_plugin.go 415: Releasing address using handleID ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" HandleID="k8s-pod-network.f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.228 [INFO][3835] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.228 [INFO][3835] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.236 [WARNING][3835] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" HandleID="k8s-pod-network.f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.236 [INFO][3835] ipam_plugin.go 443: Releasing address using workloadID ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" HandleID="k8s-pod-network.f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--k4fhh-eth0" Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.238 [INFO][3835] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:43.241298 env[1058]: 2024-04-12 18:47:43.239 [INFO][3829] k8s.go 598: Teardown processing complete. ContainerID="f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5" Apr 12 18:47:43.242021 env[1058]: time="2024-04-12T18:47:43.241947709Z" level=info msg="TearDown network for sandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\" successfully" Apr 12 18:47:43.284653 env[1058]: time="2024-04-12T18:47:43.283377474Z" level=info msg="RemovePodSandbox \"f8243e77ed7005c5b21e92c70ee3f73b6f9dc7a34a1d481bb948aa0bcc1f41c5\" returns successfully" Apr 12 18:47:43.285505 env[1058]: time="2024-04-12T18:47:43.285461758Z" level=info msg="StopPodSandbox for \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\"" Apr 12 18:47:43.293751 systemd-networkd[976]: calif114b759678: Gained IPv6LL Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.379 [WARNING][3855] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a9886980-cb6a-4a27-818b-a7549d00deb2", ResourceVersion:"721", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"64699887c5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887", Pod:"csi-node-driver-kqnk6", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.111.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali1f28f64c859", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.383 [INFO][3855] k8s.go 585: Cleaning up netns ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.383 [INFO][3855] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" iface="eth0" netns="" Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.383 [INFO][3855] k8s.go 592: Releasing IP address(es) ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.383 [INFO][3855] utils.go 188: Calico CNI releasing IP address ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.435 [INFO][3861] ipam_plugin.go 415: Releasing address using handleID ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" HandleID="k8s-pod-network.ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.436 [INFO][3861] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.436 [INFO][3861] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.444 [WARNING][3861] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" HandleID="k8s-pod-network.ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.444 [INFO][3861] ipam_plugin.go 443: Releasing address using workloadID ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" HandleID="k8s-pod-network.ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.446 [INFO][3861] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:43.450064 env[1058]: 2024-04-12 18:47:43.448 [INFO][3855] k8s.go 598: Teardown processing complete. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:43.450783 env[1058]: time="2024-04-12T18:47:43.450732167Z" level=info msg="TearDown network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\" successfully" Apr 12 18:47:43.450872 env[1058]: time="2024-04-12T18:47:43.450852983Z" level=info msg="StopPodSandbox for \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\" returns successfully" Apr 12 18:47:43.451639 env[1058]: time="2024-04-12T18:47:43.451587944Z" level=info msg="RemovePodSandbox for \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\"" Apr 12 18:47:43.451695 env[1058]: time="2024-04-12T18:47:43.451643478Z" level=info msg="Forcibly stopping sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\"" Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.494 [WARNING][3879] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a9886980-cb6a-4a27-818b-a7549d00deb2", ResourceVersion:"721", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"64699887c5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887", Pod:"csi-node-driver-kqnk6", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.111.2/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"cali1f28f64c859", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.495 [INFO][3879] k8s.go 585: Cleaning up netns ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.495 [INFO][3879] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" iface="eth0" netns="" Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.495 [INFO][3879] k8s.go 592: Releasing IP address(es) ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.495 [INFO][3879] utils.go 188: Calico CNI releasing IP address ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.521 [INFO][3885] ipam_plugin.go 415: Releasing address using handleID ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" HandleID="k8s-pod-network.ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.522 [INFO][3885] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.522 [INFO][3885] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.531 [WARNING][3885] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" HandleID="k8s-pod-network.ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.531 [INFO][3885] ipam_plugin.go 443: Releasing address using workloadID ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" HandleID="k8s-pod-network.ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-csi--node--driver--kqnk6-eth0" Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.533 [INFO][3885] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:43.537989 env[1058]: 2024-04-12 18:47:43.536 [INFO][3879] k8s.go 598: Teardown processing complete. ContainerID="ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6" Apr 12 18:47:43.539128 env[1058]: time="2024-04-12T18:47:43.537947536Z" level=info msg="TearDown network for sandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\" successfully" Apr 12 18:47:43.542396 env[1058]: time="2024-04-12T18:47:43.542364519Z" level=info msg="RemovePodSandbox \"ac892a754e83bf53168249a92d1e7d50be5a4133a78adc318e87beb92ec2e6a6\" returns successfully" Apr 12 18:47:43.543062 env[1058]: time="2024-04-12T18:47:43.543007005Z" level=info msg="StopPodSandbox for \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\"" Apr 12 18:47:43.584000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:43.584000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00216c3c0 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:47:43.584000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:47:43.587000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:43.587000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00216c3e0 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:47:43.587000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:47:43.597000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:43.597000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00216c580 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:47:43.597000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:47:43.597000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:47:43.597000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002076040 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:47:43.597000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.590 [WARNING][3905] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"6bd894e1-4052-4c12-9758-c2cc6246af88", ResourceVersion:"751", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 46, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f", Pod:"coredns-5dd5756b68-w5pf6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.111.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliee98d3daa20", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.590 [INFO][3905] k8s.go 585: Cleaning up netns ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.590 [INFO][3905] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" iface="eth0" netns="" Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.590 [INFO][3905] k8s.go 592: Releasing IP address(es) ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.590 [INFO][3905] utils.go 188: Calico CNI releasing IP address ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.628 [INFO][3911] ipam_plugin.go 415: Releasing address using handleID ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" HandleID="k8s-pod-network.682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.628 [INFO][3911] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.628 [INFO][3911] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.636 [WARNING][3911] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" HandleID="k8s-pod-network.682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.636 [INFO][3911] ipam_plugin.go 443: Releasing address using workloadID ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" HandleID="k8s-pod-network.682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.638 [INFO][3911] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:43.642309 env[1058]: 2024-04-12 18:47:43.640 [INFO][3905] k8s.go 598: Teardown processing complete. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:43.642309 env[1058]: time="2024-04-12T18:47:43.642288148Z" level=info msg="TearDown network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\" successfully" Apr 12 18:47:43.642932 env[1058]: time="2024-04-12T18:47:43.642329886Z" level=info msg="StopPodSandbox for \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\" returns successfully" Apr 12 18:47:43.642932 env[1058]: time="2024-04-12T18:47:43.642798626Z" level=info msg="RemovePodSandbox for \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\"" Apr 12 18:47:43.642932 env[1058]: time="2024-04-12T18:47:43.642827711Z" level=info msg="Forcibly stopping sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\"" Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.686 [WARNING][3930] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0", GenerateName:"coredns-5dd5756b68-", Namespace:"kube-system", SelfLink:"", UID:"6bd894e1-4052-4c12-9758-c2cc6246af88", ResourceVersion:"751", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 46, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"5dd5756b68", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"300d27596173de55f84226d1fdc0565ed232a31c5ef5230494569a2a27d0739f", Pod:"coredns-5dd5756b68-w5pf6", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.111.1/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliee98d3daa20", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.687 [INFO][3930] k8s.go 585: Cleaning up netns ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.687 [INFO][3930] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" iface="eth0" netns="" Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.687 [INFO][3930] k8s.go 592: Releasing IP address(es) ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.687 [INFO][3930] utils.go 188: Calico CNI releasing IP address ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.709 [INFO][3937] ipam_plugin.go 415: Releasing address using handleID ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" HandleID="k8s-pod-network.682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.709 [INFO][3937] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.709 [INFO][3937] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.717 [WARNING][3937] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" HandleID="k8s-pod-network.682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.717 [INFO][3937] ipam_plugin.go 443: Releasing address using workloadID ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" HandleID="k8s-pod-network.682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-coredns--5dd5756b68--w5pf6-eth0" Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.719 [INFO][3937] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:47:43.723896 env[1058]: 2024-04-12 18:47:43.721 [INFO][3930] k8s.go 598: Teardown processing complete. ContainerID="682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b" Apr 12 18:47:43.724674 env[1058]: time="2024-04-12T18:47:43.724634856Z" level=info msg="TearDown network for sandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\" successfully" Apr 12 18:47:43.728680 env[1058]: time="2024-04-12T18:47:43.728651687Z" level=info msg="RemovePodSandbox \"682972e8c8860d6b84cf99540581fe4882f670fe80da91d1335ef76c20f3460b\" returns successfully" Apr 12 18:47:47.801809 env[1058]: time="2024-04-12T18:47:47.801710412Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:47.804871 env[1058]: time="2024-04-12T18:47:47.804811084Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e4fd05c0c1c037d7b99e8aab4e14d2f54e8150b91b06776fb019a2d51611a88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:47.808826 env[1058]: time="2024-04-12T18:47:47.808772080Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:47.812031 env[1058]: time="2024-04-12T18:47:47.811996182Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c74026de594a0e40b9aa63b33f41fa42fb311e35d65a10dfb642293292368c51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:47.813861 env[1058]: time="2024-04-12T18:47:47.813835416Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.3\" returns image reference \"sha256:3e4fd05c0c1c037d7b99e8aab4e14d2f54e8150b91b06776fb019a2d51611a88\"" Apr 12 18:47:47.819856 env[1058]: time="2024-04-12T18:47:47.819787480Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3\"" Apr 12 18:47:47.852268 env[1058]: time="2024-04-12T18:47:47.852118056Z" level=info msg="CreateContainer within sandbox \"a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Apr 12 18:47:47.878243 env[1058]: time="2024-04-12T18:47:47.878169874Z" level=info msg="CreateContainer within sandbox \"a97d4b7a9b08ab454014fdb97e5609c9c88ff5764295e9261635ef10632fce8b\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"91d174e6219acd2ae17e186bc3ec7e0733934e848910c32fe0be63e268736617\"" Apr 12 18:47:47.879540 env[1058]: time="2024-04-12T18:47:47.879496885Z" level=info msg="StartContainer for \"91d174e6219acd2ae17e186bc3ec7e0733934e848910c32fe0be63e268736617\"" Apr 12 18:47:47.887992 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1889414381.mount: Deactivated successfully. Apr 12 18:47:47.907182 systemd[1]: Started cri-containerd-91d174e6219acd2ae17e186bc3ec7e0733934e848910c32fe0be63e268736617.scope. Apr 12 18:47:47.940449 kernel: kauditd_printk_skb: 240 callbacks suppressed Apr 12 18:47:47.940598 kernel: audit: type=1400 audit(1712947667.932:1283): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.940632 kernel: audit: type=1400 audit(1712947667.932:1284): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.943272 kernel: audit: type=1400 audit(1712947667.932:1285): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.948538 kernel: audit: type=1400 audit(1712947667.932:1286): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.948620 kernel: audit: type=1400 audit(1712947667.932:1287): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.960032 kernel: audit: type=1400 audit(1712947667.932:1288): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.963452 kernel: audit: type=1400 audit(1712947667.932:1289): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.963566 kernel: audit: type=1400 audit(1712947667.932:1290): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.970509 kernel: audit: type=1400 audit(1712947667.932:1291): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.974000 kernel: audit: type=1400 audit(1712947667.939:1292): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.939000 audit: BPF prog-id=176 op=LOAD Apr 12 18:47:47.939000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.939000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3653 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:47.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643137346536323139616364326165313765313836626333656337 Apr 12 18:47:47.939000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.939000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3653 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:47.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643137346536323139616364326165313765313836626333656337 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.942000 audit: BPF prog-id=177 op=LOAD Apr 12 18:47:47.942000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00032fa60 items=0 ppid=3653 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:47.942000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643137346536323139616364326165313765313836626333656337 Apr 12 18:47:47.944000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.944000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.944000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.944000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.944000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.944000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.944000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.944000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.944000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.944000 audit: BPF prog-id=178 op=LOAD Apr 12 18:47:47.944000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00032faa8 items=0 ppid=3653 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:47.944000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643137346536323139616364326165313765313836626333656337 Apr 12 18:47:47.951000 audit: BPF prog-id=178 op=UNLOAD Apr 12 18:47:47.951000 audit: BPF prog-id=177 op=UNLOAD Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:47.951000 audit: BPF prog-id=179 op=LOAD Apr 12 18:47:47.951000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00032feb8 items=0 ppid=3653 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:47.951000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931643137346536323139616364326165313765313836626333656337 Apr 12 18:47:48.019800 env[1058]: time="2024-04-12T18:47:48.019727616Z" level=info msg="StartContainer for \"91d174e6219acd2ae17e186bc3ec7e0733934e848910c32fe0be63e268736617\" returns successfully" Apr 12 18:47:48.461794 kubelet[1948]: I0412 18:47:48.460457 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-5998b5945c-h9m42" podStartSLOduration=38.302522704 podCreationTimestamp="2024-04-12 18:47:04 +0000 UTC" firstStartedPulling="2024-04-12 18:47:41.656587271 +0000 UTC m=+59.069537710" lastFinishedPulling="2024-04-12 18:47:47.814457163 +0000 UTC m=+65.227407592" observedRunningTime="2024-04-12 18:47:48.460024185 +0000 UTC m=+65.872974614" watchObservedRunningTime="2024-04-12 18:47:48.460392586 +0000 UTC m=+65.873343015" Apr 12 18:47:48.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.238:22-172.24.4.1:48252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:47:48.926535 systemd[1]: Started sshd@7-172.24.4.238:22-172.24.4.1:48252.service. Apr 12 18:47:50.189000 audit[4008]: USER_ACCT pid=4008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:50.191000 audit[4008]: CRED_ACQ pid=4008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:50.191000 audit[4008]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc0c95d3f0 a2=3 a3=0 items=0 ppid=1 pid=4008 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:50.191000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:47:50.194982 sshd[4008]: Accepted publickey for core from 172.24.4.1 port 48252 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:47:50.200220 sshd[4008]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:47:50.213924 systemd[1]: Started session-8.scope. Apr 12 18:47:50.215318 systemd-logind[1047]: New session 8 of user core. Apr 12 18:47:50.223000 audit[4008]: USER_START pid=4008 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:50.226000 audit[4021]: CRED_ACQ pid=4021 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:50.346290 env[1058]: time="2024-04-12T18:47:50.346227159Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:50.349352 env[1058]: time="2024-04-12T18:47:50.349277545Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7ac3827a6231c88089a78b3c48feee265627f54838c750d32163d73364a5aae1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:50.352623 env[1058]: time="2024-04-12T18:47:50.352574625Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:50.356055 env[1058]: time="2024-04-12T18:47:50.355960521Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:f3c7cf1e4b85038d77b3568a1103d3c5174b07bd4435b22a8891b167ef28a50a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:47:50.358113 env[1058]: time="2024-04-12T18:47:50.357732808Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3\" returns image reference \"sha256:7ac3827a6231c88089a78b3c48feee265627f54838c750d32163d73364a5aae1\"" Apr 12 18:47:50.382706 env[1058]: time="2024-04-12T18:47:50.382578990Z" level=info msg="CreateContainer within sandbox \"2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Apr 12 18:47:50.419674 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3131303750.mount: Deactivated successfully. Apr 12 18:47:50.420916 env[1058]: time="2024-04-12T18:47:50.420874529Z" level=info msg="CreateContainer within sandbox \"2a5c7cee044b93cc32b857924b26f8487e96f25703a087ccfe216aa38b47b887\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"11efc8126567c5b1301c59c6ca0b7c9d866cd267a0ce06ffea76e0136f82d18a\"" Apr 12 18:47:50.422844 env[1058]: time="2024-04-12T18:47:50.421674961Z" level=info msg="StartContainer for \"11efc8126567c5b1301c59c6ca0b7c9d866cd267a0ce06ffea76e0136f82d18a\"" Apr 12 18:47:50.454605 systemd[1]: Started cri-containerd-11efc8126567c5b1301c59c6ca0b7c9d866cd267a0ce06ffea76e0136f82d18a.scope. Apr 12 18:47:50.458427 systemd[1]: run-containerd-runc-k8s.io-11efc8126567c5b1301c59c6ca0b7c9d866cd267a0ce06ffea76e0136f82d18a-runc.OGioQN.mount: Deactivated successfully. Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f6118e560e8 items=0 ppid=3373 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:50.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131656663383132363536376335623133303163353963366361306237 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.477000 audit: BPF prog-id=180 op=LOAD Apr 12 18:47:50.477000 audit[4029]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003d63e8 items=0 ppid=3373 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:50.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131656663383132363536376335623133303163353963366361306237 Apr 12 18:47:50.480000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.480000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.480000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.480000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.480000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.480000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.480000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.480000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.480000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.480000 audit: BPF prog-id=181 op=LOAD Apr 12 18:47:50.480000 audit[4029]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003d6438 items=0 ppid=3373 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:50.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131656663383132363536376335623133303163353963366361306237 Apr 12 18:47:50.481000 audit: BPF prog-id=181 op=UNLOAD Apr 12 18:47:50.481000 audit: BPF prog-id=180 op=UNLOAD Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { perfmon } for pid=4029 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit[4029]: AVC avc: denied { bpf } for pid=4029 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:47:50.481000 audit: BPF prog-id=182 op=LOAD Apr 12 18:47:50.481000 audit[4029]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003d64c8 items=0 ppid=3373 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:50.481000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131656663383132363536376335623133303163353963366361306237 Apr 12 18:47:50.508725 env[1058]: time="2024-04-12T18:47:50.508682243Z" level=info msg="StartContainer for \"11efc8126567c5b1301c59c6ca0b7c9d866cd267a0ce06ffea76e0136f82d18a\" returns successfully" Apr 12 18:47:50.948813 kubelet[1948]: I0412 18:47:50.948732 1948 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Apr 12 18:47:50.950365 kubelet[1948]: I0412 18:47:50.950294 1948 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Apr 12 18:47:51.415910 sshd[4008]: pam_unix(sshd:session): session closed for user core Apr 12 18:47:51.417000 audit[4008]: USER_END pid=4008 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:51.418000 audit[4008]: CRED_DISP pid=4008 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:51.424147 systemd-logind[1047]: Session 8 logged out. Waiting for processes to exit. Apr 12 18:47:51.423000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.24.4.238:22-172.24.4.1:48252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:47:51.424641 systemd[1]: sshd@7-172.24.4.238:22-172.24.4.1:48252.service: Deactivated successfully. Apr 12 18:47:51.426455 systemd[1]: session-8.scope: Deactivated successfully. Apr 12 18:47:51.429108 systemd-logind[1047]: Removed session 8. Apr 12 18:47:51.498376 kubelet[1948]: I0412 18:47:51.498298 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-kqnk6" podStartSLOduration=36.660473716 podCreationTimestamp="2024-04-12 18:47:04 +0000 UTC" firstStartedPulling="2024-04-12 18:47:39.521024804 +0000 UTC m=+56.933975233" lastFinishedPulling="2024-04-12 18:47:50.35867698 +0000 UTC m=+67.771627459" observedRunningTime="2024-04-12 18:47:51.496280056 +0000 UTC m=+68.909230535" watchObservedRunningTime="2024-04-12 18:47:51.498125942 +0000 UTC m=+68.911076421" Apr 12 18:47:55.631774 systemd[1]: run-containerd-runc-k8s.io-91d174e6219acd2ae17e186bc3ec7e0733934e848910c32fe0be63e268736617-runc.H7V5bN.mount: Deactivated successfully. Apr 12 18:47:56.427090 systemd[1]: Started sshd@8-172.24.4.238:22-172.24.4.1:54270.service. Apr 12 18:47:56.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.238:22-172.24.4.1:54270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:47:56.430528 kernel: kauditd_printk_skb: 101 callbacks suppressed Apr 12 18:47:56.431460 kernel: audit: type=1130 audit(1712947676.426:1316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.238:22-172.24.4.1:54270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:47:58.170000 audit[4095]: USER_ACCT pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:58.172655 sshd[4095]: Accepted publickey for core from 172.24.4.1 port 54270 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:47:58.181000 audit[4095]: CRED_ACQ pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:58.183952 sshd[4095]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:47:58.192922 kernel: audit: type=1101 audit(1712947678.170:1317): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:58.193065 kernel: audit: type=1103 audit(1712947678.181:1318): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:58.200314 kernel: audit: type=1006 audit(1712947678.181:1319): pid=4095 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Apr 12 18:47:58.181000 audit[4095]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0d044500 a2=3 a3=0 items=0 ppid=1 pid=4095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:58.214661 kernel: audit: type=1300 audit(1712947678.181:1319): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff0d044500 a2=3 a3=0 items=0 ppid=1 pid=4095 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:47:58.214798 kernel: audit: type=1327 audit(1712947678.181:1319): proctitle=737368643A20636F7265205B707269765D Apr 12 18:47:58.181000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:47:58.225782 systemd-logind[1047]: New session 9 of user core. Apr 12 18:47:58.229941 systemd[1]: Started session-9.scope. Apr 12 18:47:58.243000 audit[4095]: USER_START pid=4095 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:58.257305 kernel: audit: type=1105 audit(1712947678.243:1320): pid=4095 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:58.256000 audit[4097]: CRED_ACQ pid=4097 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:58.268511 kernel: audit: type=1103 audit(1712947678.256:1321): pid=4097 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:59.136736 sshd[4095]: pam_unix(sshd:session): session closed for user core Apr 12 18:47:59.137000 audit[4095]: USER_END pid=4095 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:59.152300 kernel: audit: type=1106 audit(1712947679.137:1322): pid=4095 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:59.152518 systemd[1]: sshd@8-172.24.4.238:22-172.24.4.1:54270.service: Deactivated successfully. Apr 12 18:47:59.154120 systemd[1]: session-9.scope: Deactivated successfully. Apr 12 18:47:59.137000 audit[4095]: CRED_DISP pid=4095 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:59.155673 systemd-logind[1047]: Session 9 logged out. Waiting for processes to exit. Apr 12 18:47:59.151000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.24.4.238:22-172.24.4.1:54270 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:47:59.166314 kernel: audit: type=1104 audit(1712947679.137:1323): pid=4095 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:47:59.166666 systemd-logind[1047]: Removed session 9. Apr 12 18:48:04.148406 systemd[1]: Started sshd@9-172.24.4.238:22-172.24.4.1:54280.service. Apr 12 18:48:04.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.238:22-172.24.4.1:54280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:04.152621 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:48:04.152816 kernel: audit: type=1130 audit(1712947684.147:1325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.238:22-172.24.4.1:54280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:05.634000 audit[4123]: USER_ACCT pid=4123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:05.636194 sshd[4123]: Accepted publickey for core from 172.24.4.1 port 54280 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:05.647000 audit[4123]: CRED_ACQ pid=4123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:05.650064 sshd[4123]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:05.661349 kernel: audit: type=1101 audit(1712947685.634:1326): pid=4123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:05.661544 kernel: audit: type=1103 audit(1712947685.647:1327): pid=4123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:05.648000 audit[4123]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8b85ed20 a2=3 a3=0 items=0 ppid=1 pid=4123 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:05.672415 kernel: audit: type=1006 audit(1712947685.648:1328): pid=4123 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Apr 12 18:48:05.672579 kernel: audit: type=1300 audit(1712947685.648:1328): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8b85ed20 a2=3 a3=0 items=0 ppid=1 pid=4123 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:05.672671 kernel: audit: type=1327 audit(1712947685.648:1328): proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:05.648000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:05.681586 systemd-logind[1047]: New session 10 of user core. Apr 12 18:48:05.685361 systemd[1]: Started session-10.scope. Apr 12 18:48:05.696000 audit[4123]: USER_START pid=4123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:05.696000 audit[4127]: CRED_ACQ pid=4127 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:05.706941 kernel: audit: type=1105 audit(1712947685.696:1329): pid=4123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:05.707859 kernel: audit: type=1103 audit(1712947685.696:1330): pid=4127 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:06.497061 sshd[4123]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:06.500000 audit[4123]: USER_END pid=4123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:06.506644 systemd[1]: Started sshd@10-172.24.4.238:22-172.24.4.1:60552.service. Apr 12 18:48:06.508524 kernel: audit: type=1106 audit(1712947686.500:1331): pid=4123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:06.507213 systemd[1]: sshd@9-172.24.4.238:22-172.24.4.1:54280.service: Deactivated successfully. Apr 12 18:48:06.500000 audit[4123]: CRED_DISP pid=4123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:06.509155 systemd[1]: session-10.scope: Deactivated successfully. Apr 12 18:48:06.513550 systemd-logind[1047]: Session 10 logged out. Waiting for processes to exit. Apr 12 18:48:06.514289 kernel: audit: type=1104 audit(1712947686.500:1332): pid=4123 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:06.516240 systemd-logind[1047]: Removed session 10. Apr 12 18:48:06.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.238:22-172.24.4.1:60552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:06.507000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.24.4.238:22-172.24.4.1:54280 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:07.705000 audit[4137]: USER_ACCT pid=4137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:07.707769 sshd[4137]: Accepted publickey for core from 172.24.4.1 port 60552 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:07.707000 audit[4137]: CRED_ACQ pid=4137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:07.710024 sshd[4137]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:07.708000 audit[4137]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff52d544c0 a2=3 a3=0 items=0 ppid=1 pid=4137 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:07.708000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:07.719732 systemd[1]: Started session-11.scope. Apr 12 18:48:07.720428 systemd-logind[1047]: New session 11 of user core. Apr 12 18:48:07.727000 audit[4137]: USER_START pid=4137 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:07.730000 audit[4140]: CRED_ACQ pid=4140 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:08.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.238:22-172.24.4.1:60566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:08.909885 systemd[1]: Started sshd@11-172.24.4.238:22-172.24.4.1:60566.service. Apr 12 18:48:08.921953 sshd[4137]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:08.929000 audit[4137]: USER_END pid=4137 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:08.929000 audit[4137]: CRED_DISP pid=4137 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:08.931000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.24.4.238:22-172.24.4.1:60552 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:08.932528 systemd[1]: sshd@10-172.24.4.238:22-172.24.4.1:60552.service: Deactivated successfully. Apr 12 18:48:08.933671 systemd[1]: session-11.scope: Deactivated successfully. Apr 12 18:48:08.934711 systemd-logind[1047]: Session 11 logged out. Waiting for processes to exit. Apr 12 18:48:08.937983 systemd-logind[1047]: Removed session 11. Apr 12 18:48:10.422302 sshd[4168]: Accepted publickey for core from 172.24.4.1 port 60566 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:10.420000 audit[4168]: USER_ACCT pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:10.429262 kernel: kauditd_printk_skb: 13 callbacks suppressed Apr 12 18:48:10.429358 kernel: audit: type=1101 audit(1712947690.420:1344): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:10.429406 kernel: audit: type=1103 audit(1712947690.423:1345): pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:10.423000 audit[4168]: CRED_ACQ pid=4168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:10.434211 sshd[4168]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:10.437321 kernel: audit: type=1006 audit(1712947690.423:1346): pid=4168 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Apr 12 18:48:10.423000 audit[4168]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff300b6b20 a2=3 a3=0 items=0 ppid=1 pid=4168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:10.443274 kernel: audit: type=1300 audit(1712947690.423:1346): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff300b6b20 a2=3 a3=0 items=0 ppid=1 pid=4168 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:10.423000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:10.449854 systemd-logind[1047]: New session 12 of user core. Apr 12 18:48:10.450977 kernel: audit: type=1327 audit(1712947690.423:1346): proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:10.450391 systemd[1]: Started session-12.scope. Apr 12 18:48:10.456000 audit[4168]: USER_START pid=4168 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:10.463699 kernel: audit: type=1105 audit(1712947690.456:1347): pid=4168 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:10.464600 kernel: audit: type=1103 audit(1712947690.462:1348): pid=4176 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:10.462000 audit[4176]: CRED_ACQ pid=4176 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:11.251168 sshd[4168]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:11.251000 audit[4168]: USER_END pid=4168 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:11.251000 audit[4168]: CRED_DISP pid=4168 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:11.267152 systemd[1]: sshd@11-172.24.4.238:22-172.24.4.1:60566.service: Deactivated successfully. Apr 12 18:48:11.268190 systemd[1]: session-12.scope: Deactivated successfully. Apr 12 18:48:11.269668 systemd-logind[1047]: Session 12 logged out. Waiting for processes to exit. Apr 12 18:48:11.270860 systemd-logind[1047]: Removed session 12. Apr 12 18:48:11.277788 kernel: audit: type=1106 audit(1712947691.251:1349): pid=4168 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:11.277918 kernel: audit: type=1104 audit(1712947691.251:1350): pid=4168 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:11.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.238:22-172.24.4.1:60566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:11.290320 kernel: audit: type=1131 audit(1712947691.265:1351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.24.4.238:22-172.24.4.1:60566 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:16.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.238:22-172.24.4.1:55710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:16.258238 systemd[1]: Started sshd@12-172.24.4.238:22-172.24.4.1:55710.service. Apr 12 18:48:16.269539 kernel: audit: type=1130 audit(1712947696.257:1352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.238:22-172.24.4.1:55710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:18.003000 audit[4189]: USER_ACCT pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.007531 sshd[4189]: Accepted publickey for core from 172.24.4.1 port 55710 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:18.017324 kernel: audit: type=1101 audit(1712947698.003:1353): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.015000 audit[4189]: CRED_ACQ pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.018124 sshd[4189]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:18.028476 kernel: audit: type=1103 audit(1712947698.015:1354): pid=4189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.036291 kernel: audit: type=1006 audit(1712947698.016:1355): pid=4189 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Apr 12 18:48:18.016000 audit[4189]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcd7673b0 a2=3 a3=0 items=0 ppid=1 pid=4189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:18.043595 kernel: audit: type=1300 audit(1712947698.016:1355): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcd7673b0 a2=3 a3=0 items=0 ppid=1 pid=4189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:18.043660 kernel: audit: type=1327 audit(1712947698.016:1355): proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:18.016000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:18.045537 systemd-logind[1047]: New session 13 of user core. Apr 12 18:48:18.048303 systemd[1]: Started session-13.scope. Apr 12 18:48:18.055000 audit[4189]: USER_START pid=4189 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.058000 audit[4192]: CRED_ACQ pid=4192 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.067552 kernel: audit: type=1105 audit(1712947698.055:1356): pid=4189 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.067753 kernel: audit: type=1103 audit(1712947698.058:1357): pid=4192 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.671442 sshd[4189]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:18.672000 audit[4189]: USER_END pid=4189 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.690699 kernel: audit: type=1106 audit(1712947698.672:1358): pid=4189 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.688775 systemd[1]: sshd@12-172.24.4.238:22-172.24.4.1:55710.service: Deactivated successfully. Apr 12 18:48:18.673000 audit[4189]: CRED_DISP pid=4189 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.691092 systemd[1]: session-13.scope: Deactivated successfully. Apr 12 18:48:18.704325 kernel: audit: type=1104 audit(1712947698.673:1359): pid=4189 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:18.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.24.4.238:22-172.24.4.1:55710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:18.705624 systemd-logind[1047]: Session 13 logged out. Waiting for processes to exit. Apr 12 18:48:18.709163 systemd-logind[1047]: Removed session 13. Apr 12 18:48:23.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.238:22-172.24.4.1:55724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:23.686791 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:48:23.687041 kernel: audit: type=1130 audit(1712947703.682:1361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.238:22-172.24.4.1:55724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:23.682950 systemd[1]: Started sshd@13-172.24.4.238:22-172.24.4.1:55724.service. Apr 12 18:48:25.003000 audit[4215]: USER_ACCT pid=4215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.025022 sshd[4215]: Accepted publickey for core from 172.24.4.1 port 55724 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:25.025717 kernel: audit: type=1101 audit(1712947705.003:1362): pid=4215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.025654 sshd[4215]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:25.023000 audit[4215]: CRED_ACQ pid=4215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.038351 kernel: audit: type=1103 audit(1712947705.023:1363): pid=4215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.046376 kernel: audit: type=1006 audit(1712947705.023:1364): pid=4215 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Apr 12 18:48:25.023000 audit[4215]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff51dfc370 a2=3 a3=0 items=0 ppid=1 pid=4215 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:25.023000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:25.061774 kernel: audit: type=1300 audit(1712947705.023:1364): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff51dfc370 a2=3 a3=0 items=0 ppid=1 pid=4215 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:25.062743 kernel: audit: type=1327 audit(1712947705.023:1364): proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:25.068287 systemd-logind[1047]: New session 14 of user core. Apr 12 18:48:25.069393 systemd[1]: Started session-14.scope. Apr 12 18:48:25.083000 audit[4215]: USER_START pid=4215 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.083000 audit[4217]: CRED_ACQ pid=4217 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.106174 kernel: audit: type=1105 audit(1712947705.083:1365): pid=4215 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.106236 kernel: audit: type=1103 audit(1712947705.083:1366): pid=4217 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.640724 systemd[1]: run-containerd-runc-k8s.io-91d174e6219acd2ae17e186bc3ec7e0733934e848910c32fe0be63e268736617-runc.CLDGJL.mount: Deactivated successfully. Apr 12 18:48:25.875598 sshd[4215]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:25.876000 audit[4215]: USER_END pid=4215 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.890350 kernel: audit: type=1106 audit(1712947705.876:1367): pid=4215 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.890502 systemd[1]: sshd@13-172.24.4.238:22-172.24.4.1:55724.service: Deactivated successfully. Apr 12 18:48:25.877000 audit[4215]: CRED_DISP pid=4215 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.892527 systemd[1]: session-14.scope: Deactivated successfully. Apr 12 18:48:25.910588 kernel: audit: type=1104 audit(1712947705.877:1368): pid=4215 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:25.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.24.4.238:22-172.24.4.1:55724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:25.911170 systemd-logind[1047]: Session 14 logged out. Waiting for processes to exit. Apr 12 18:48:25.912752 systemd-logind[1047]: Removed session 14. Apr 12 18:48:30.888050 systemd[1]: Started sshd@14-172.24.4.238:22-172.24.4.1:54660.service. Apr 12 18:48:30.888000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.238:22-172.24.4.1:54660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:30.894297 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:48:30.894419 kernel: audit: type=1130 audit(1712947710.888:1370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.238:22-172.24.4.1:54660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:32.423000 audit[4253]: USER_ACCT pid=4253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:32.425026 sshd[4253]: Accepted publickey for core from 172.24.4.1 port 54660 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:32.438392 kernel: audit: type=1101 audit(1712947712.423:1371): pid=4253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:32.437000 audit[4253]: CRED_ACQ pid=4253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:32.440395 sshd[4253]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:32.456333 kernel: audit: type=1103 audit(1712947712.437:1372): pid=4253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:32.437000 audit[4253]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffab328850 a2=3 a3=0 items=0 ppid=1 pid=4253 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:32.474787 kernel: audit: type=1006 audit(1712947712.437:1373): pid=4253 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Apr 12 18:48:32.474973 kernel: audit: type=1300 audit(1712947712.437:1373): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffab328850 a2=3 a3=0 items=0 ppid=1 pid=4253 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:32.475472 kernel: audit: type=1327 audit(1712947712.437:1373): proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:32.437000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:32.488975 systemd[1]: Started session-15.scope. Apr 12 18:48:32.491121 systemd-logind[1047]: New session 15 of user core. Apr 12 18:48:32.503000 audit[4253]: USER_START pid=4253 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:32.517349 kernel: audit: type=1105 audit(1712947712.503:1374): pid=4253 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:32.517000 audit[4255]: CRED_ACQ pid=4255 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:32.529324 kernel: audit: type=1103 audit(1712947712.517:1375): pid=4255 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:33.469778 sshd[4253]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:33.472000 audit[4253]: USER_END pid=4253 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:33.477000 audit[4253]: CRED_DISP pid=4253 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:33.498129 kernel: audit: type=1106 audit(1712947713.472:1376): pid=4253 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:33.498300 kernel: audit: type=1104 audit(1712947713.477:1377): pid=4253 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:33.502155 systemd[1]: Started sshd@15-172.24.4.238:22-172.24.4.1:54664.service. Apr 12 18:48:33.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.238:22-172.24.4.1:54664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:33.504762 systemd[1]: sshd@14-172.24.4.238:22-172.24.4.1:54660.service: Deactivated successfully. Apr 12 18:48:33.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.24.4.238:22-172.24.4.1:54660 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:33.508444 systemd[1]: session-15.scope: Deactivated successfully. Apr 12 18:48:33.511080 systemd-logind[1047]: Session 15 logged out. Waiting for processes to exit. Apr 12 18:48:33.515166 systemd-logind[1047]: Removed session 15. Apr 12 18:48:34.837164 sshd[4264]: Accepted publickey for core from 172.24.4.1 port 54664 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:34.835000 audit[4264]: USER_ACCT pid=4264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:34.839000 audit[4264]: CRED_ACQ pid=4264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:34.840000 audit[4264]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff317f2350 a2=3 a3=0 items=0 ppid=1 pid=4264 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:34.840000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:34.842649 sshd[4264]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:34.856541 systemd-logind[1047]: New session 16 of user core. Apr 12 18:48:34.857675 systemd[1]: Started session-16.scope. Apr 12 18:48:34.870000 audit[4264]: USER_START pid=4264 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:34.875000 audit[4267]: CRED_ACQ pid=4267 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:36.286203 sshd[4264]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:36.288000 audit[4264]: USER_END pid=4264 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:36.291073 kernel: kauditd_printk_skb: 9 callbacks suppressed Apr 12 18:48:36.291221 kernel: audit: type=1106 audit(1712947716.288:1385): pid=4264 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:36.296479 systemd[1]: Started sshd@16-172.24.4.238:22-172.24.4.1:34128.service. Apr 12 18:48:36.294000 audit[4264]: CRED_DISP pid=4264 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:36.298333 systemd[1]: sshd@15-172.24.4.238:22-172.24.4.1:54664.service: Deactivated successfully. Apr 12 18:48:36.299467 systemd[1]: session-16.scope: Deactivated successfully. Apr 12 18:48:36.301111 systemd-logind[1047]: Session 16 logged out. Waiting for processes to exit. Apr 12 18:48:36.302396 kernel: audit: type=1104 audit(1712947716.294:1386): pid=4264 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:36.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.238:22-172.24.4.1:34128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:36.303464 systemd-logind[1047]: Removed session 16. Apr 12 18:48:36.308289 kernel: audit: type=1130 audit(1712947716.295:1387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.238:22-172.24.4.1:34128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:36.297000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.238:22-172.24.4.1:54664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:36.314329 kernel: audit: type=1131 audit(1712947716.297:1388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.24.4.238:22-172.24.4.1:54664 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:37.474000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:37.484307 kernel: audit: type=1400 audit(1712947717.474:1389): avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:37.474000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0007c0f30 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:48:37.474000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:48:37.494901 kernel: audit: type=1300 audit(1712947717.474:1389): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0007c0f30 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:48:37.495030 kernel: audit: type=1327 audit(1712947717.474:1389): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:48:37.495098 kernel: audit: type=1400 audit(1712947717.474:1390): avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:37.474000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:37.474000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013eee80 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:48:37.504593 kernel: audit: type=1300 audit(1712947717.474:1390): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013eee80 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:48:37.504727 kernel: audit: type=1327 audit(1712947717.474:1390): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:48:37.474000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:48:37.721000 audit[4273]: USER_ACCT pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:37.723447 sshd[4273]: Accepted publickey for core from 172.24.4.1 port 34128 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:37.725000 audit[4273]: CRED_ACQ pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:37.725000 audit[4273]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1547f1c0 a2=3 a3=0 items=0 ppid=1 pid=4273 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:37.725000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:37.730635 sshd[4273]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:37.742036 systemd-logind[1047]: New session 17 of user core. Apr 12 18:48:37.746623 systemd[1]: Started session-17.scope. Apr 12 18:48:37.761000 audit[4273]: USER_START pid=4273 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:37.764000 audit[4276]: CRED_ACQ pid=4276 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:38.891000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=524886 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:38.891000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00ace3da0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:48:38.891000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:48:38.897000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=524892 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:38.897000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00ace3dd0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:48:38.897000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:48:38.897000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:38.897000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c00ace3e00 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:48:38.897000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:48:38.919000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:38.919000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c0064370c0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:48:38.919000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:48:38.920000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:38.920000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c0064370e0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:48:38.920000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:48:38.921000 audit[1789]: AVC avc: denied { watch } for pid=1789 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=524890 scontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:38.921000 audit[1789]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c00d6467b0 a2=fc6 a3=0 items=0 ppid=1657 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c161,c723 key=(null) Apr 12 18:48:38.921000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E32342E342E323338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B7562 Apr 12 18:48:39.586000 audit[4328]: NETFILTER_CFG table=filter:115 family=2 entries=20 op=nft_register_rule pid=4328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:39.586000 audit[4328]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffd609c45d0 a2=0 a3=7ffd609c45bc items=0 ppid=2126 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:39.586000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:39.590000 audit[4328]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=4328 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:39.590000 audit[4328]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd609c45d0 a2=0 a3=0 items=0 ppid=2126 pid=4328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:39.590000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:39.627000 audit[4330]: NETFILTER_CFG table=filter:117 family=2 entries=32 op=nft_register_rule pid=4330 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:39.627000 audit[4330]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffd85ad29c0 a2=0 a3=7ffd85ad29ac items=0 ppid=2126 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:39.627000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:39.629000 audit[4330]: NETFILTER_CFG table=nat:118 family=2 entries=20 op=nft_register_rule pid=4330 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:39.629000 audit[4330]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd85ad29c0 a2=0 a3=0 items=0 ppid=2126 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:39.629000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:39.720497 kubelet[1948]: I0412 18:48:39.720432 1948 topology_manager.go:215] "Topology Admit Handler" podUID="e9043fa9-d3c5-47d0-b62c-303b518fa6fd" podNamespace="calico-apiserver" podName="calico-apiserver-5c78b5f789-vrf88" Apr 12 18:48:39.727671 systemd[1]: Created slice kubepods-besteffort-pode9043fa9_d3c5_47d0_b62c_303b518fa6fd.slice. Apr 12 18:48:39.737982 kubelet[1948]: W0412 18:48:39.737941 1948 reflector.go:535] object-"calico-apiserver"/"calico-apiserver-certs": failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:48:39.738224 kubelet[1948]: E0412 18:48:39.737995 1948 reflector.go:147] object-"calico-apiserver"/"calico-apiserver-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "calico-apiserver-certs" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "secrets" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:48:39.738224 kubelet[1948]: W0412 18:48:39.738047 1948 reflector.go:535] object-"calico-apiserver"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:48:39.738224 kubelet[1948]: E0412 18:48:39.738063 1948 reflector.go:147] object-"calico-apiserver"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ci-3510-3-3-9-b9e221dcee.novalocal" cannot list resource "configmaps" in API group "" in the namespace "calico-apiserver": no relationship found between node 'ci-3510-3-3-9-b9e221dcee.novalocal' and this object Apr 12 18:48:39.882767 kubelet[1948]: I0412 18:48:39.882645 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e9043fa9-d3c5-47d0-b62c-303b518fa6fd-calico-apiserver-certs\") pod \"calico-apiserver-5c78b5f789-vrf88\" (UID: \"e9043fa9-d3c5-47d0-b62c-303b518fa6fd\") " pod="calico-apiserver/calico-apiserver-5c78b5f789-vrf88" Apr 12 18:48:39.882767 kubelet[1948]: I0412 18:48:39.882725 1948 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vckfw\" (UniqueName: \"kubernetes.io/projected/e9043fa9-d3c5-47d0-b62c-303b518fa6fd-kube-api-access-vckfw\") pod \"calico-apiserver-5c78b5f789-vrf88\" (UID: \"e9043fa9-d3c5-47d0-b62c-303b518fa6fd\") " pod="calico-apiserver/calico-apiserver-5c78b5f789-vrf88" Apr 12 18:48:39.899932 systemd[1]: Started sshd@17-172.24.4.238:22-172.24.4.1:34142.service. Apr 12 18:48:39.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.238:22-172.24.4.1:34142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:39.904708 sshd[4273]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:39.909000 audit[4273]: USER_END pid=4273 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:39.909000 audit[4273]: CRED_DISP pid=4273 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:39.935167 systemd[1]: sshd@16-172.24.4.238:22-172.24.4.1:34128.service: Deactivated successfully. Apr 12 18:48:39.936185 systemd[1]: session-17.scope: Deactivated successfully. Apr 12 18:48:39.934000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.24.4.238:22-172.24.4.1:34128 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:39.937808 systemd-logind[1047]: Session 17 logged out. Waiting for processes to exit. Apr 12 18:48:39.940503 systemd-logind[1047]: Removed session 17. Apr 12 18:48:40.645000 audit[4341]: NETFILTER_CFG table=filter:119 family=2 entries=33 op=nft_register_rule pid=4341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:40.645000 audit[4341]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7fff3af27e30 a2=0 a3=7fff3af27e1c items=0 ppid=2126 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:40.645000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:40.648000 audit[4341]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=4341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:40.648000 audit[4341]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff3af27e30 a2=0 a3=0 items=0 ppid=2126 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:40.648000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:40.988059 kubelet[1948]: E0412 18:48:40.987300 1948 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: failed to sync secret cache: timed out waiting for the condition Apr 12 18:48:40.988059 kubelet[1948]: E0412 18:48:40.987954 1948 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/e9043fa9-d3c5-47d0-b62c-303b518fa6fd-calico-apiserver-certs podName:e9043fa9-d3c5-47d0-b62c-303b518fa6fd nodeName:}" failed. No retries permitted until 2024-04-12 18:48:41.487933166 +0000 UTC m=+118.900883595 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/e9043fa9-d3c5-47d0-b62c-303b518fa6fd-calico-apiserver-certs") pod "calico-apiserver-5c78b5f789-vrf88" (UID: "e9043fa9-d3c5-47d0-b62c-303b518fa6fd") : failed to sync secret cache: timed out waiting for the condition Apr 12 18:48:41.534591 env[1058]: time="2024-04-12T18:48:41.533599352Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c78b5f789-vrf88,Uid:e9043fa9-d3c5-47d0-b62c-303b518fa6fd,Namespace:calico-apiserver,Attempt:0,}" Apr 12 18:48:41.563000 audit[4332]: USER_ACCT pid=4332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:41.564903 sshd[4332]: Accepted publickey for core from 172.24.4.1 port 34142 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:41.573453 kernel: kauditd_printk_skb: 47 callbacks suppressed Apr 12 18:48:41.573586 kernel: audit: type=1101 audit(1712947721.563:1412): pid=4332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:41.581367 sshd[4332]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:41.579000 audit[4332]: CRED_ACQ pid=4332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:41.608712 kernel: audit: type=1103 audit(1712947721.579:1413): pid=4332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:41.608939 kernel: audit: type=1006 audit(1712947721.579:1414): pid=4332 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Apr 12 18:48:41.579000 audit[4332]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd53f3b520 a2=3 a3=0 items=0 ppid=1 pid=4332 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:41.615275 kernel: audit: type=1300 audit(1712947721.579:1414): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd53f3b520 a2=3 a3=0 items=0 ppid=1 pid=4332 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:41.619303 systemd-logind[1047]: New session 18 of user core. Apr 12 18:48:41.621058 systemd[1]: Started session-18.scope. Apr 12 18:48:41.579000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:41.628296 kernel: audit: type=1327 audit(1712947721.579:1414): proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:41.632000 audit[4332]: USER_START pid=4332 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:41.640288 kernel: audit: type=1105 audit(1712947721.632:1415): pid=4332 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:41.639000 audit[4350]: CRED_ACQ pid=4350 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:41.646293 kernel: audit: type=1103 audit(1712947721.639:1416): pid=4350 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:42.153718 systemd-networkd[976]: calif53148bfb25: Link UP Apr 12 18:48:42.157302 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Apr 12 18:48:42.157404 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif53148bfb25: link becomes ready Apr 12 18:48:42.157518 systemd-networkd[976]: calif53148bfb25: Gained carrier Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.011 [INFO][4344] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0 calico-apiserver-5c78b5f789- calico-apiserver e9043fa9-d3c5-47d0-b62c-303b518fa6fd 1091 0 2024-04-12 18:48:39 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5c78b5f789 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s ci-3510-3-3-9-b9e221dcee.novalocal calico-apiserver-5c78b5f789-vrf88 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calif53148bfb25 [] []}} ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Namespace="calico-apiserver" Pod="calico-apiserver-5c78b5f789-vrf88" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.012 [INFO][4344] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Namespace="calico-apiserver" Pod="calico-apiserver-5c78b5f789-vrf88" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.073 [INFO][4357] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" HandleID="k8s-pod-network.15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.093 [INFO][4357] ipam_plugin.go 268: Auto assigning IP ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" HandleID="k8s-pod-network.15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002656a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"ci-3510-3-3-9-b9e221dcee.novalocal", "pod":"calico-apiserver-5c78b5f789-vrf88", "timestamp":"2024-04-12 18:48:42.073699273 +0000 UTC"}, Hostname:"ci-3510-3-3-9-b9e221dcee.novalocal", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.094 [INFO][4357] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.094 [INFO][4357] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.094 [INFO][4357] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'ci-3510-3-3-9-b9e221dcee.novalocal' Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.103 [INFO][4357] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.109 [INFO][4357] ipam.go 372: Looking up existing affinities for host host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.117 [INFO][4357] ipam.go 489: Trying affinity for 192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.120 [INFO][4357] ipam.go 155: Attempting to load block cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.125 [INFO][4357] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.111.0/26 host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.126 [INFO][4357] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.111.0/26 handle="k8s-pod-network.15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.128 [INFO][4357] ipam.go 1682: Creating new handle: k8s-pod-network.15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.132 [INFO][4357] ipam.go 1203: Writing block in order to claim IPs block=192.168.111.0/26 handle="k8s-pod-network.15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.142 [INFO][4357] ipam.go 1216: Successfully claimed IPs: [192.168.111.5/26] block=192.168.111.0/26 handle="k8s-pod-network.15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.142 [INFO][4357] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.111.5/26] handle="k8s-pod-network.15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" host="ci-3510-3-3-9-b9e221dcee.novalocal" Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.143 [INFO][4357] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:48:42.186978 env[1058]: 2024-04-12 18:48:42.143 [INFO][4357] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.111.5/26] IPv6=[] ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" HandleID="k8s-pod-network.15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Workload="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" Apr 12 18:48:42.188076 env[1058]: 2024-04-12 18:48:42.146 [INFO][4344] k8s.go 385: Populated endpoint ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Namespace="calico-apiserver" Pod="calico-apiserver-5c78b5f789-vrf88" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0", GenerateName:"calico-apiserver-5c78b5f789-", Namespace:"calico-apiserver", SelfLink:"", UID:"e9043fa9-d3c5-47d0-b62c-303b518fa6fd", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 48, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c78b5f789", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"", Pod:"calico-apiserver-5c78b5f789-vrf88", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.111.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif53148bfb25", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:48:42.188076 env[1058]: 2024-04-12 18:48:42.146 [INFO][4344] k8s.go 386: Calico CNI using IPs: [192.168.111.5/32] ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Namespace="calico-apiserver" Pod="calico-apiserver-5c78b5f789-vrf88" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" Apr 12 18:48:42.188076 env[1058]: 2024-04-12 18:48:42.146 [INFO][4344] dataplane_linux.go 68: Setting the host side veth name to calif53148bfb25 ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Namespace="calico-apiserver" Pod="calico-apiserver-5c78b5f789-vrf88" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" Apr 12 18:48:42.188076 env[1058]: 2024-04-12 18:48:42.158 [INFO][4344] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Namespace="calico-apiserver" Pod="calico-apiserver-5c78b5f789-vrf88" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" Apr 12 18:48:42.188076 env[1058]: 2024-04-12 18:48:42.158 [INFO][4344] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Namespace="calico-apiserver" Pod="calico-apiserver-5c78b5f789-vrf88" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0", GenerateName:"calico-apiserver-5c78b5f789-", Namespace:"calico-apiserver", SelfLink:"", UID:"e9043fa9-d3c5-47d0-b62c-303b518fa6fd", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 48, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5c78b5f789", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"ci-3510-3-3-9-b9e221dcee.novalocal", ContainerID:"15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e", Pod:"calico-apiserver-5c78b5f789-vrf88", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.111.5/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calif53148bfb25", MAC:"5e:84:99:f8:3d:99", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:48:42.188076 env[1058]: 2024-04-12 18:48:42.184 [INFO][4344] k8s.go 498: Wrote updated endpoint to datastore ContainerID="15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e" Namespace="calico-apiserver" Pod="calico-apiserver-5c78b5f789-vrf88" WorkloadEndpoint="ci--3510--3--3--9--b9e221dcee.novalocal-k8s-calico--apiserver--5c78b5f789--vrf88-eth0" Apr 12 18:48:42.249387 env[1058]: time="2024-04-12T18:48:42.249297497Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:48:42.250474 env[1058]: time="2024-04-12T18:48:42.249399309Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:48:42.250474 env[1058]: time="2024-04-12T18:48:42.249431619Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:48:42.250474 env[1058]: time="2024-04-12T18:48:42.249594715Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e pid=4390 runtime=io.containerd.runc.v2 Apr 12 18:48:42.292717 systemd[1]: Started cri-containerd-15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e.scope. Apr 12 18:48:42.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331385 kernel: audit: type=1400 audit(1712947722.322:1417): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331454 kernel: audit: type=1400 audit(1712947722.322:1418): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.338519 kernel: audit: type=1400 audit(1712947722.322:1419): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.326000 audit: BPF prog-id=183 op=LOAD Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4390 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:42.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135636531306239643862386538626666343634616139386231633837 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4390 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:42.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135636531306239643862386538626666343634616139386231633837 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit: BPF prog-id=184 op=LOAD Apr 12 18:48:42.330000 audit[4403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000259eb0 items=0 ppid=4390 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:42.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135636531306239643862386538626666343634616139386231633837 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.330000 audit: BPF prog-id=185 op=LOAD Apr 12 18:48:42.330000 audit[4403]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000259ef8 items=0 ppid=4390 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:42.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135636531306239643862386538626666343634616139386231633837 Apr 12 18:48:42.331000 audit: BPF prog-id=185 op=UNLOAD Apr 12 18:48:42.331000 audit: BPF prog-id=184 op=UNLOAD Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { perfmon } for pid=4403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit[4403]: AVC avc: denied { bpf } for pid=4403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:42.331000 audit: BPF prog-id=186 op=LOAD Apr 12 18:48:42.331000 audit[4403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00035c308 items=0 ppid=4390 pid=4403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:42.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135636531306239643862386538626666343634616139386231633837 Apr 12 18:48:42.340000 audit[4420]: NETFILTER_CFG table=filter:121 family=2 entries=65 op=nft_register_chain pid=4420 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:48:42.340000 audit[4420]: SYSCALL arch=c000003e syscall=46 success=yes exit=32992 a0=3 a1=7ffef541bf80 a2=0 a3=7ffef541bf6c items=0 ppid=3018 pid=4420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:42.340000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:48:42.411820 env[1058]: time="2024-04-12T18:48:42.411673664Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5c78b5f789-vrf88,Uid:e9043fa9-d3c5-47d0-b62c-303b518fa6fd,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e\"" Apr 12 18:48:42.421584 env[1058]: time="2024-04-12T18:48:42.421532211Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.3\"" Apr 12 18:48:43.068917 sshd[4332]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:43.069000 audit[4332]: USER_END pid=4332 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:43.069000 audit[4332]: CRED_DISP pid=4332 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:43.075134 systemd[1]: sshd@17-172.24.4.238:22-172.24.4.1:34142.service: Deactivated successfully. Apr 12 18:48:43.074000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.24.4.238:22-172.24.4.1:34142 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:43.077487 systemd[1]: session-18.scope: Deactivated successfully. Apr 12 18:48:43.080187 systemd-logind[1047]: Session 18 logged out. Waiting for processes to exit. Apr 12 18:48:43.083430 systemd[1]: Started sshd@18-172.24.4.238:22-172.24.4.1:34148.service. Apr 12 18:48:43.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.238:22-172.24.4.1:34148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:43.084929 systemd-logind[1047]: Removed session 18. Apr 12 18:48:43.453684 systemd-networkd[976]: calif53148bfb25: Gained IPv6LL Apr 12 18:48:43.585000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:43.585000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002077d20 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:48:43.585000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:48:43.587000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:43.587000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002077d40 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:48:43.587000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:48:43.621000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:43.621000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002077da0 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:48:43.621000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:48:43.624000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=524875 scontext=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:48:43.624000 audit[1841]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0025b0aa0 a2=fc6 a3=0 items=0 ppid=1684 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c87,c107 key=(null) Apr 12 18:48:43.624000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:48:43.948344 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4029622133.mount: Deactivated successfully. Apr 12 18:48:44.423000 audit[4432]: USER_ACCT pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:44.425000 audit[4432]: CRED_ACQ pid=4432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:44.426540 sshd[4432]: Accepted publickey for core from 172.24.4.1 port 34148 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:44.425000 audit[4432]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffade5b2c0 a2=3 a3=0 items=0 ppid=1 pid=4432 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:44.425000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:44.428443 sshd[4432]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:44.438432 systemd[1]: Started session-19.scope. Apr 12 18:48:44.440511 systemd-logind[1047]: New session 19 of user core. Apr 12 18:48:44.446000 audit[4432]: USER_START pid=4432 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:44.447000 audit[4434]: CRED_ACQ pid=4434 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:45.476716 sshd[4432]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:45.476000 audit[4432]: USER_END pid=4432 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:45.477000 audit[4432]: CRED_DISP pid=4432 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:45.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.24.4.238:22-172.24.4.1:34148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:45.485225 systemd[1]: sshd@18-172.24.4.238:22-172.24.4.1:34148.service: Deactivated successfully. Apr 12 18:48:45.486200 systemd[1]: session-19.scope: Deactivated successfully. Apr 12 18:48:45.488059 systemd-logind[1047]: Session 19 logged out. Waiting for processes to exit. Apr 12 18:48:45.489765 systemd-logind[1047]: Removed session 19. Apr 12 18:48:46.027000 audit[4445]: NETFILTER_CFG table=filter:122 family=2 entries=34 op=nft_register_rule pid=4445 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:46.027000 audit[4445]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7ffe8f2a4550 a2=0 a3=7ffe8f2a453c items=0 ppid=2126 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:46.027000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:46.028000 audit[4445]: NETFILTER_CFG table=nat:123 family=2 entries=20 op=nft_register_rule pid=4445 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:46.028000 audit[4445]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe8f2a4550 a2=0 a3=0 items=0 ppid=2126 pid=4445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:46.028000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:47.127869 env[1058]: time="2024-04-12T18:48:47.127760080Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:48:47.134555 env[1058]: time="2024-04-12T18:48:47.134492101Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b1053ac6a81e8635acaa253516add87a758796b61fa4e29b767a8bd31e4b3eb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:48:47.137867 env[1058]: time="2024-04-12T18:48:47.137809505Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:48:47.141081 env[1058]: time="2024-04-12T18:48:47.141024096Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:62b75df90aa008b11fee8f555f22bfc00d3dc6af5053185c293ee3467342f32a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:48:47.142710 env[1058]: time="2024-04-12T18:48:47.142651681Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.3\" returns image reference \"sha256:b1053ac6a81e8635acaa253516add87a758796b61fa4e29b767a8bd31e4b3eb2\"" Apr 12 18:48:47.149512 env[1058]: time="2024-04-12T18:48:47.148544046Z" level=info msg="CreateContainer within sandbox \"15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Apr 12 18:48:47.184883 env[1058]: time="2024-04-12T18:48:47.184795941Z" level=info msg="CreateContainer within sandbox \"15ce10b9d8b8e8bff464aa98b1c877cbfcb8aee8ef90dbe1fdc6743df79b701e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"291c14c84895cefcee1bfa1e73fcc4edd64b9920c2c59c19416208acecab3bc9\"" Apr 12 18:48:47.186464 env[1058]: time="2024-04-12T18:48:47.186322185Z" level=info msg="StartContainer for \"291c14c84895cefcee1bfa1e73fcc4edd64b9920c2c59c19416208acecab3bc9\"" Apr 12 18:48:47.188977 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2052486642.mount: Deactivated successfully. Apr 12 18:48:47.237142 systemd[1]: Started cri-containerd-291c14c84895cefcee1bfa1e73fcc4edd64b9920c2c59c19416208acecab3bc9.scope. Apr 12 18:48:47.262793 kernel: kauditd_printk_skb: 89 callbacks suppressed Apr 12 18:48:47.262929 kernel: audit: type=1400 audit(1712947727.257:1454): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.262961 kernel: audit: type=1400 audit(1712947727.257:1455): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.273306 kernel: audit: type=1400 audit(1712947727.257:1456): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.273439 kernel: audit: type=1400 audit(1712947727.257:1457): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.277119 kernel: audit: type=1400 audit(1712947727.257:1458): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.277393 kernel: audit: type=1400 audit(1712947727.257:1459): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.287124 kernel: audit: type=1400 audit(1712947727.257:1460): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.287177 kernel: audit: type=1400 audit(1712947727.257:1461): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.257000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.257000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.300752 kernel: audit: type=1400 audit(1712947727.257:1462): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.300807 kernel: audit: type=1400 audit(1712947727.261:1463): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.261000 audit: BPF prog-id=187 op=LOAD Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4390 pid=4452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:47.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239316331346338343839356365666365653162666131653733666363 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4390 pid=4452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:47.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239316331346338343839356365666365653162666131653733666363 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit: BPF prog-id=188 op=LOAD Apr 12 18:48:47.264000 audit[4452]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003b20b0 items=0 ppid=4390 pid=4452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:47.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239316331346338343839356365666365653162666131653733666363 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit: BPF prog-id=189 op=LOAD Apr 12 18:48:47.264000 audit[4452]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003b20f8 items=0 ppid=4390 pid=4452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:47.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239316331346338343839356365666365653162666131653733666363 Apr 12 18:48:47.264000 audit: BPF prog-id=189 op=UNLOAD Apr 12 18:48:47.264000 audit: BPF prog-id=188 op=UNLOAD Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { perfmon } for pid=4452 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit[4452]: AVC avc: denied { bpf } for pid=4452 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:48:47.264000 audit: BPF prog-id=190 op=LOAD Apr 12 18:48:47.264000 audit[4452]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b2508 items=0 ppid=4390 pid=4452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:47.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239316331346338343839356365666365653162666131653733666363 Apr 12 18:48:47.332127 env[1058]: time="2024-04-12T18:48:47.332035484Z" level=info msg="StartContainer for \"291c14c84895cefcee1bfa1e73fcc4edd64b9920c2c59c19416208acecab3bc9\" returns successfully" Apr 12 18:48:47.753406 kubelet[1948]: I0412 18:48:47.753346 1948 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5c78b5f789-vrf88" podStartSLOduration=4.030670301 podCreationTimestamp="2024-04-12 18:48:39 +0000 UTC" firstStartedPulling="2024-04-12 18:48:42.420673811 +0000 UTC m=+119.833624250" lastFinishedPulling="2024-04-12 18:48:47.143300227 +0000 UTC m=+124.556250746" observedRunningTime="2024-04-12 18:48:47.751783678 +0000 UTC m=+125.164734127" watchObservedRunningTime="2024-04-12 18:48:47.753296797 +0000 UTC m=+125.166247236" Apr 12 18:48:47.806000 audit[4486]: NETFILTER_CFG table=filter:124 family=2 entries=34 op=nft_register_rule pid=4486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:47.806000 audit[4486]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7fff8538e8e0 a2=0 a3=7fff8538e8cc items=0 ppid=2126 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:47.806000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:47.807000 audit[4486]: NETFILTER_CFG table=nat:125 family=2 entries=20 op=nft_register_rule pid=4486 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:47.807000 audit[4486]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff8538e8e0 a2=0 a3=0 items=0 ppid=2126 pid=4486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:47.807000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:48.475000 audit[4464]: AVC avc: denied { watch } for pid=4464 comm="apiserver" path="/calico-apiserver-certs/..2024_04_12_18_48_41.4034754210/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c127,c829 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c127,c829 tclass=file permissive=0 Apr 12 18:48:48.475000 audit[4464]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e2d360 a2=fc6 a3=0 items=0 ppid=4390 pid=4464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c127,c829 key=(null) Apr 12 18:48:48.475000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Apr 12 18:48:50.486071 systemd[1]: Started sshd@19-172.24.4.238:22-172.24.4.1:43374.service. Apr 12 18:48:50.486000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.238:22-172.24.4.1:43374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:52.070000 audit[4489]: USER_ACCT pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:52.072825 sshd[4489]: Accepted publickey for core from 172.24.4.1 port 43374 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:52.073000 audit[4489]: CRED_ACQ pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:52.073000 audit[4489]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7b038570 a2=3 a3=0 items=0 ppid=1 pid=4489 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:52.073000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:52.081707 sshd[4489]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:52.096888 systemd-logind[1047]: New session 20 of user core. Apr 12 18:48:52.099078 systemd[1]: Started session-20.scope. Apr 12 18:48:52.112000 audit[4489]: USER_START pid=4489 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:52.116000 audit[4496]: CRED_ACQ pid=4496 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:53.211086 sshd[4489]: pam_unix(sshd:session): session closed for user core Apr 12 18:48:53.229700 kernel: kauditd_printk_skb: 64 callbacks suppressed Apr 12 18:48:53.229909 kernel: audit: type=1106 audit(1712947733.213:1481): pid=4489 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:53.213000 audit[4489]: USER_END pid=4489 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:53.213000 audit[4489]: CRED_DISP pid=4489 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:53.231666 systemd-logind[1047]: Session 20 logged out. Waiting for processes to exit. Apr 12 18:48:53.260596 kernel: audit: type=1104 audit(1712947733.213:1482): pid=4489 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:53.260766 kernel: audit: type=1131 audit(1712947733.235:1483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.238:22-172.24.4.1:43374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:53.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.24.4.238:22-172.24.4.1:43374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:53.239130 systemd[1]: sshd@19-172.24.4.238:22-172.24.4.1:43374.service: Deactivated successfully. Apr 12 18:48:53.241222 systemd[1]: session-20.scope: Deactivated successfully. Apr 12 18:48:53.245688 systemd-logind[1047]: Removed session 20. Apr 12 18:48:54.081000 audit[4508]: NETFILTER_CFG table=filter:126 family=2 entries=22 op=nft_register_rule pid=4508 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:54.090377 kernel: audit: type=1325 audit(1712947734.081:1484): table=filter:126 family=2 entries=22 op=nft_register_rule pid=4508 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:54.081000 audit[4508]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffccba05f70 a2=0 a3=7ffccba05f5c items=0 ppid=2126 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:54.081000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:54.112587 kernel: audit: type=1300 audit(1712947734.081:1484): arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffccba05f70 a2=0 a3=7ffccba05f5c items=0 ppid=2126 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:54.112820 kernel: audit: type=1327 audit(1712947734.081:1484): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:54.112929 kernel: audit: type=1325 audit(1712947734.087:1485): table=nat:127 family=2 entries=104 op=nft_register_chain pid=4508 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:54.087000 audit[4508]: NETFILTER_CFG table=nat:127 family=2 entries=104 op=nft_register_chain pid=4508 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:48:54.087000 audit[4508]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffccba05f70 a2=0 a3=7ffccba05f5c items=0 ppid=2126 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:54.133382 kernel: audit: type=1300 audit(1712947734.087:1485): arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffccba05f70 a2=0 a3=7ffccba05f5c items=0 ppid=2126 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:54.087000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:54.136741 kernel: audit: type=1327 audit(1712947734.087:1485): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:48:58.227201 systemd[1]: Started sshd@20-172.24.4.238:22-172.24.4.1:34980.service. Apr 12 18:48:58.226000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.238:22-172.24.4.1:34980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:58.239342 kernel: audit: type=1130 audit(1712947738.226:1486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.238:22-172.24.4.1:34980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:48:59.741000 audit[4530]: USER_ACCT pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:59.744953 sshd[4530]: Accepted publickey for core from 172.24.4.1 port 34980 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:48:59.754304 kernel: audit: type=1101 audit(1712947739.741:1487): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:59.753000 audit[4530]: CRED_ACQ pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:59.764442 kernel: audit: type=1103 audit(1712947739.753:1488): pid=4530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:59.755296 sshd[4530]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:48:59.753000 audit[4530]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff964eeae0 a2=3 a3=0 items=0 ppid=1 pid=4530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:59.782661 kernel: audit: type=1006 audit(1712947739.753:1489): pid=4530 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Apr 12 18:48:59.783484 kernel: audit: type=1300 audit(1712947739.753:1489): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff964eeae0 a2=3 a3=0 items=0 ppid=1 pid=4530 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:48:59.783580 kernel: audit: type=1327 audit(1712947739.753:1489): proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:59.753000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:48:59.794384 systemd-logind[1047]: New session 21 of user core. Apr 12 18:48:59.796471 systemd[1]: Started session-21.scope. Apr 12 18:48:59.808000 audit[4530]: USER_START pid=4530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:59.821927 kernel: audit: type=1105 audit(1712947739.808:1490): pid=4530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:59.822833 kernel: audit: type=1103 audit(1712947739.820:1491): pid=4538 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:48:59.820000 audit[4538]: CRED_ACQ pid=4538 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:00.553937 sshd[4530]: pam_unix(sshd:session): session closed for user core Apr 12 18:49:00.555000 audit[4530]: USER_END pid=4530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:00.560605 systemd-logind[1047]: Session 21 logged out. Waiting for processes to exit. Apr 12 18:49:00.598684 kernel: audit: type=1106 audit(1712947740.555:1492): pid=4530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:00.598821 kernel: audit: type=1104 audit(1712947740.555:1493): pid=4530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:00.555000 audit[4530]: CRED_DISP pid=4530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:00.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.24.4.238:22-172.24.4.1:34980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:00.562317 systemd[1]: sshd@20-172.24.4.238:22-172.24.4.1:34980.service: Deactivated successfully. Apr 12 18:49:00.563883 systemd[1]: session-21.scope: Deactivated successfully. Apr 12 18:49:00.566158 systemd-logind[1047]: Removed session 21. Apr 12 18:49:05.567042 systemd[1]: Started sshd@21-172.24.4.238:22-172.24.4.1:38004.service. Apr 12 18:49:05.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.238:22-172.24.4.1:38004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:05.572466 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:49:05.572614 kernel: audit: type=1130 audit(1712947745.567:1495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.238:22-172.24.4.1:38004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:06.811000 audit[4557]: USER_ACCT pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:06.813118 sshd[4557]: Accepted publickey for core from 172.24.4.1 port 38004 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:49:06.818288 kernel: audit: type=1101 audit(1712947746.811:1496): pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:06.817000 audit[4557]: CRED_ACQ pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:06.819732 sshd[4557]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:49:06.830371 kernel: audit: type=1103 audit(1712947746.817:1497): pid=4557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:06.839547 kernel: audit: type=1006 audit(1712947746.817:1498): pid=4557 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Apr 12 18:49:06.817000 audit[4557]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd0e2dd70 a2=3 a3=0 items=0 ppid=1 pid=4557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:06.841523 systemd-logind[1047]: New session 22 of user core. Apr 12 18:49:06.842675 systemd[1]: Started session-22.scope. Apr 12 18:49:06.850530 kernel: audit: type=1300 audit(1712947746.817:1498): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd0e2dd70 a2=3 a3=0 items=0 ppid=1 pid=4557 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:06.851141 kernel: audit: type=1327 audit(1712947746.817:1498): proctitle=737368643A20636F7265205B707269765D Apr 12 18:49:06.817000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:49:06.860000 audit[4557]: USER_START pid=4557 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:06.867356 kernel: audit: type=1105 audit(1712947746.860:1499): pid=4557 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:06.863000 audit[4559]: CRED_ACQ pid=4559 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:06.874312 kernel: audit: type=1103 audit(1712947746.863:1500): pid=4559 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:07.779532 sshd[4557]: pam_unix(sshd:session): session closed for user core Apr 12 18:49:07.779000 audit[4557]: USER_END pid=4557 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:07.783059 systemd[1]: sshd@21-172.24.4.238:22-172.24.4.1:38004.service: Deactivated successfully. Apr 12 18:49:07.784408 systemd-logind[1047]: Session 22 logged out. Waiting for processes to exit. Apr 12 18:49:07.780000 audit[4557]: CRED_DISP pid=4557 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:07.787890 systemd[1]: session-22.scope: Deactivated successfully. Apr 12 18:49:07.789264 systemd-logind[1047]: Removed session 22. Apr 12 18:49:07.791788 kernel: audit: type=1106 audit(1712947747.779:1501): pid=4557 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:07.791880 kernel: audit: type=1104 audit(1712947747.780:1502): pid=4557 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:07.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.24.4.238:22-172.24.4.1:38004 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:08.717022 systemd[1]: run-containerd-runc-k8s.io-d156ff8b02e2a078bf4fce2402f3e830a4fcc2d8c67c4057a43f0a88ed866c74-runc.APzhZS.mount: Deactivated successfully. Apr 12 18:49:10.189000 audit[4591]: NETFILTER_CFG table=filter:128 family=2 entries=9 op=nft_register_rule pid=4591 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:49:10.189000 audit[4591]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7fffc397eae0 a2=0 a3=7fffc397eacc items=0 ppid=2126 pid=4591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:10.189000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:49:10.191000 audit[4591]: NETFILTER_CFG table=nat:129 family=2 entries=51 op=nft_register_chain pid=4591 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:49:10.191000 audit[4591]: SYSCALL arch=c000003e syscall=46 success=yes exit=18564 a0=3 a1=7fffc397eae0 a2=0 a3=7fffc397eacc items=0 ppid=2126 pid=4591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:10.191000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:49:11.577898 systemd[1]: run-containerd-runc-k8s.io-291c14c84895cefcee1bfa1e73fcc4edd64b9920c2c59c19416208acecab3bc9-runc.FxUyPj.mount: Deactivated successfully. Apr 12 18:49:11.686000 audit[4614]: NETFILTER_CFG table=filter:130 family=2 entries=8 op=nft_register_rule pid=4614 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:49:11.689462 kernel: kauditd_printk_skb: 7 callbacks suppressed Apr 12 18:49:11.689528 kernel: audit: type=1325 audit(1712947751.686:1506): table=filter:130 family=2 entries=8 op=nft_register_rule pid=4614 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:49:11.686000 audit[4614]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffdc4655600 a2=0 a3=7ffdc46555ec items=0 ppid=2126 pid=4614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:11.697457 kernel: audit: type=1300 audit(1712947751.686:1506): arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffdc4655600 a2=0 a3=7ffdc46555ec items=0 ppid=2126 pid=4614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:11.686000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:49:11.700241 kernel: audit: type=1327 audit(1712947751.686:1506): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:49:11.689000 audit[4614]: NETFILTER_CFG table=nat:131 family=2 entries=58 op=nft_register_chain pid=4614 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:49:11.703185 kernel: audit: type=1325 audit(1712947751.689:1507): table=nat:131 family=2 entries=58 op=nft_register_chain pid=4614 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:49:11.703237 kernel: audit: type=1300 audit(1712947751.689:1507): arch=c000003e syscall=46 success=yes exit=20452 a0=3 a1=7ffdc4655600 a2=0 a3=7ffdc46555ec items=0 ppid=2126 pid=4614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:11.689000 audit[4614]: SYSCALL arch=c000003e syscall=46 success=yes exit=20452 a0=3 a1=7ffdc4655600 a2=0 a3=7ffdc46555ec items=0 ppid=2126 pid=4614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:11.689000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:49:11.711276 kernel: audit: type=1327 audit(1712947751.689:1507): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:49:12.794669 systemd[1]: Started sshd@22-172.24.4.238:22-172.24.4.1:38018.service. Apr 12 18:49:12.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.238:22-172.24.4.1:38018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:12.807368 kernel: audit: type=1130 audit(1712947752.794:1508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.238:22-172.24.4.1:38018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:14.252000 audit[4622]: USER_ACCT pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:14.267035 kernel: audit: type=1101 audit(1712947754.252:1509): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:14.267808 sshd[4622]: Accepted publickey for core from 172.24.4.1 port 38018 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:49:14.268761 sshd[4622]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:49:14.266000 audit[4622]: CRED_ACQ pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:14.280994 kernel: audit: type=1103 audit(1712947754.266:1510): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:14.281136 kernel: audit: type=1006 audit(1712947754.266:1511): pid=4622 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Apr 12 18:49:14.266000 audit[4622]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc2f78bbb0 a2=3 a3=0 items=0 ppid=1 pid=4622 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:14.266000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:49:14.297413 systemd-logind[1047]: New session 23 of user core. Apr 12 18:49:14.297993 systemd[1]: Started session-23.scope. Apr 12 18:49:14.311000 audit[4622]: USER_START pid=4622 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:14.315000 audit[4634]: CRED_ACQ pid=4634 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:15.091696 sshd[4622]: pam_unix(sshd:session): session closed for user core Apr 12 18:49:15.092000 audit[4622]: USER_END pid=4622 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:15.092000 audit[4622]: CRED_DISP pid=4622 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:15.097721 systemd[1]: sshd@22-172.24.4.238:22-172.24.4.1:38018.service: Deactivated successfully. Apr 12 18:49:15.099292 systemd[1]: session-23.scope: Deactivated successfully. Apr 12 18:49:15.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.24.4.238:22-172.24.4.1:38018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:15.100647 systemd-logind[1047]: Session 23 logged out. Waiting for processes to exit. Apr 12 18:49:15.102164 systemd-logind[1047]: Removed session 23. Apr 12 18:49:20.210979 systemd[1]: Started sshd@23-172.24.4.238:22-172.24.4.1:60152.service. Apr 12 18:49:20.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.238:22-172.24.4.1:60152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:20.215026 kernel: kauditd_printk_skb: 7 callbacks suppressed Apr 12 18:49:20.215163 kernel: audit: type=1130 audit(1712947760.211:1517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.238:22-172.24.4.1:60152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:21.349676 sshd[4644]: Accepted publickey for core from 172.24.4.1 port 60152 ssh2: RSA SHA256:42mQe97mZjPI509lWDarWO51gHqkCVNTVOmB6aZ8SvU Apr 12 18:49:21.348000 audit[4644]: USER_ACCT pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:21.362443 kernel: audit: type=1101 audit(1712947761.348:1518): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:21.350000 audit[4644]: CRED_ACQ pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:21.362647 sshd[4644]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:49:21.374307 kernel: audit: type=1103 audit(1712947761.350:1519): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:21.382361 kernel: audit: type=1006 audit(1712947761.350:1520): pid=4644 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Apr 12 18:49:21.350000 audit[4644]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc6a491f0 a2=3 a3=0 items=0 ppid=1 pid=4644 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:21.391135 systemd-logind[1047]: New session 24 of user core. Apr 12 18:49:21.392245 systemd[1]: Started session-24.scope. Apr 12 18:49:21.394832 kernel: audit: type=1300 audit(1712947761.350:1520): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc6a491f0 a2=3 a3=0 items=0 ppid=1 pid=4644 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:49:21.394955 kernel: audit: type=1327 audit(1712947761.350:1520): proctitle=737368643A20636F7265205B707269765D Apr 12 18:49:21.350000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:49:21.411000 audit[4644]: USER_START pid=4644 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:21.425346 kernel: audit: type=1105 audit(1712947761.411:1521): pid=4644 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:21.424000 audit[4646]: CRED_ACQ pid=4646 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:21.432431 kernel: audit: type=1103 audit(1712947761.424:1522): pid=4646 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:22.251240 sshd[4644]: pam_unix(sshd:session): session closed for user core Apr 12 18:49:22.255000 audit[4644]: USER_END pid=4644 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:22.280600 kernel: audit: type=1106 audit(1712947762.255:1523): pid=4644 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:22.280506 systemd[1]: sshd@23-172.24.4.238:22-172.24.4.1:60152.service: Deactivated successfully. Apr 12 18:49:22.255000 audit[4644]: CRED_DISP pid=4644 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:22.282225 systemd[1]: session-24.scope: Deactivated successfully. Apr 12 18:49:22.292335 kernel: audit: type=1104 audit(1712947762.255:1524): pid=4644 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=172.24.4.1 addr=172.24.4.1 terminal=ssh res=success' Apr 12 18:49:22.293188 systemd-logind[1047]: Session 24 logged out. Waiting for processes to exit. Apr 12 18:49:22.279000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.24.4.238:22-172.24.4.1:60152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:49:22.296514 systemd-logind[1047]: Removed session 24.