Apr 12 18:52:14.727045 kernel: Linux version 5.15.154-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Fri Apr 12 17:19:00 -00 2024 Apr 12 18:52:14.727078 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=189121f7c8c0a24098d3bb1e040d34611f7c276be43815ff7fe409fce185edaf Apr 12 18:52:14.727093 kernel: BIOS-provided physical RAM map: Apr 12 18:52:14.727102 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ffff] usable Apr 12 18:52:14.727110 kernel: BIOS-e820: [mem 0x0000000000100000-0x00000000007fffff] usable Apr 12 18:52:14.727118 kernel: BIOS-e820: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Apr 12 18:52:14.727128 kernel: BIOS-e820: [mem 0x0000000000808000-0x000000000080afff] usable Apr 12 18:52:14.727137 kernel: BIOS-e820: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Apr 12 18:52:14.727145 kernel: BIOS-e820: [mem 0x000000000080c000-0x000000000080ffff] usable Apr 12 18:52:14.727156 kernel: BIOS-e820: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Apr 12 18:52:14.727165 kernel: BIOS-e820: [mem 0x0000000000900000-0x000000009c8eefff] usable Apr 12 18:52:14.727173 kernel: BIOS-e820: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Apr 12 18:52:14.727197 kernel: BIOS-e820: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Apr 12 18:52:14.727207 kernel: BIOS-e820: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Apr 12 18:52:14.727218 kernel: BIOS-e820: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Apr 12 18:52:14.727229 kernel: BIOS-e820: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Apr 12 18:52:14.727239 kernel: BIOS-e820: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Apr 12 18:52:14.727248 kernel: NX (Execute Disable) protection: active Apr 12 18:52:14.727257 kernel: e820: update [mem 0x9b3f7018-0x9b400c57] usable ==> usable Apr 12 18:52:14.727266 kernel: e820: update [mem 0x9b3f7018-0x9b400c57] usable ==> usable Apr 12 18:52:14.727276 kernel: e820: update [mem 0x9b1aa018-0x9b1e6e57] usable ==> usable Apr 12 18:52:14.727285 kernel: e820: update [mem 0x9b1aa018-0x9b1e6e57] usable ==> usable Apr 12 18:52:14.727299 kernel: extended physical RAM map: Apr 12 18:52:14.727309 kernel: reserve setup_data: [mem 0x0000000000000000-0x000000000009ffff] usable Apr 12 18:52:14.727318 kernel: reserve setup_data: [mem 0x0000000000100000-0x00000000007fffff] usable Apr 12 18:52:14.727330 kernel: reserve setup_data: [mem 0x0000000000800000-0x0000000000807fff] ACPI NVS Apr 12 18:52:14.727339 kernel: reserve setup_data: [mem 0x0000000000808000-0x000000000080afff] usable Apr 12 18:52:14.727362 kernel: reserve setup_data: [mem 0x000000000080b000-0x000000000080bfff] ACPI NVS Apr 12 18:52:14.727371 kernel: reserve setup_data: [mem 0x000000000080c000-0x000000000080ffff] usable Apr 12 18:52:14.727380 kernel: reserve setup_data: [mem 0x0000000000810000-0x00000000008fffff] ACPI NVS Apr 12 18:52:14.727389 kernel: reserve setup_data: [mem 0x0000000000900000-0x000000009b1aa017] usable Apr 12 18:52:14.727399 kernel: reserve setup_data: [mem 0x000000009b1aa018-0x000000009b1e6e57] usable Apr 12 18:52:14.727408 kernel: reserve setup_data: [mem 0x000000009b1e6e58-0x000000009b3f7017] usable Apr 12 18:52:14.727417 kernel: reserve setup_data: [mem 0x000000009b3f7018-0x000000009b400c57] usable Apr 12 18:52:14.727426 kernel: reserve setup_data: [mem 0x000000009b400c58-0x000000009c8eefff] usable Apr 12 18:52:14.727435 kernel: reserve setup_data: [mem 0x000000009c8ef000-0x000000009cb6efff] reserved Apr 12 18:52:14.727447 kernel: reserve setup_data: [mem 0x000000009cb6f000-0x000000009cb7efff] ACPI data Apr 12 18:52:14.727456 kernel: reserve setup_data: [mem 0x000000009cb7f000-0x000000009cbfefff] ACPI NVS Apr 12 18:52:14.727466 kernel: reserve setup_data: [mem 0x000000009cbff000-0x000000009cf3ffff] usable Apr 12 18:52:14.727476 kernel: reserve setup_data: [mem 0x000000009cf40000-0x000000009cf5ffff] reserved Apr 12 18:52:14.727490 kernel: reserve setup_data: [mem 0x000000009cf60000-0x000000009cffffff] ACPI NVS Apr 12 18:52:14.727499 kernel: efi: EFI v2.70 by EDK II Apr 12 18:52:14.727510 kernel: efi: SMBIOS=0x9c9ab000 ACPI=0x9cb7e000 ACPI 2.0=0x9cb7e014 MEMATTR=0x9b773018 RNG=0x9cb75018 Apr 12 18:52:14.727522 kernel: random: crng init done Apr 12 18:52:14.727532 kernel: SMBIOS 2.8 present. Apr 12 18:52:14.727542 kernel: DMI: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 0.0.0 02/06/2015 Apr 12 18:52:14.727552 kernel: Hypervisor detected: KVM Apr 12 18:52:14.727562 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Apr 12 18:52:14.727572 kernel: kvm-clock: cpu 0, msr 3a191001, primary cpu clock Apr 12 18:52:14.727582 kernel: kvm-clock: using sched offset of 8937959719 cycles Apr 12 18:52:14.727592 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Apr 12 18:52:14.727602 kernel: tsc: Detected 2794.750 MHz processor Apr 12 18:52:14.727620 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Apr 12 18:52:14.727630 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Apr 12 18:52:14.727640 kernel: last_pfn = 0x9cf40 max_arch_pfn = 0x400000000 Apr 12 18:52:14.727650 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Apr 12 18:52:14.727661 kernel: Using GB pages for direct mapping Apr 12 18:52:14.727671 kernel: Secure boot disabled Apr 12 18:52:14.727681 kernel: ACPI: Early table checksum verification disabled Apr 12 18:52:14.727691 kernel: ACPI: RSDP 0x000000009CB7E014 000024 (v02 BOCHS ) Apr 12 18:52:14.727701 kernel: ACPI: XSDT 0x000000009CB7D0E8 00004C (v01 BOCHS BXPC 00000001 01000013) Apr 12 18:52:14.727714 kernel: ACPI: FACP 0x000000009CB7A000 000074 (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:52:14.727724 kernel: ACPI: DSDT 0x000000009CB7B000 001A39 (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:52:14.727734 kernel: ACPI: FACS 0x000000009CBDD000 000040 Apr 12 18:52:14.727744 kernel: ACPI: APIC 0x000000009CB79000 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:52:14.727755 kernel: ACPI: HPET 0x000000009CB78000 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:52:14.727765 kernel: ACPI: WAET 0x000000009CB77000 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Apr 12 18:52:14.727775 kernel: ACPI: BGRT 0x000000009CB76000 000038 (v01 INTEL EDK2 00000002 01000013) Apr 12 18:52:14.727788 kernel: ACPI: Reserving FACP table memory at [mem 0x9cb7a000-0x9cb7a073] Apr 12 18:52:14.727804 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cb7b000-0x9cb7ca38] Apr 12 18:52:14.727820 kernel: ACPI: Reserving FACS table memory at [mem 0x9cbdd000-0x9cbdd03f] Apr 12 18:52:14.727832 kernel: ACPI: Reserving APIC table memory at [mem 0x9cb79000-0x9cb7908f] Apr 12 18:52:14.727843 kernel: ACPI: Reserving HPET table memory at [mem 0x9cb78000-0x9cb78037] Apr 12 18:52:14.727853 kernel: ACPI: Reserving WAET table memory at [mem 0x9cb77000-0x9cb77027] Apr 12 18:52:14.727864 kernel: ACPI: Reserving BGRT table memory at [mem 0x9cb76000-0x9cb76037] Apr 12 18:52:14.727874 kernel: No NUMA configuration found Apr 12 18:52:14.727884 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cf3ffff] Apr 12 18:52:14.727895 kernel: NODE_DATA(0) allocated [mem 0x9cea6000-0x9ceabfff] Apr 12 18:52:14.727906 kernel: Zone ranges: Apr 12 18:52:14.727918 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Apr 12 18:52:14.727929 kernel: DMA32 [mem 0x0000000001000000-0x000000009cf3ffff] Apr 12 18:52:14.727939 kernel: Normal empty Apr 12 18:52:14.727954 kernel: Movable zone start for each node Apr 12 18:52:14.727964 kernel: Early memory node ranges Apr 12 18:52:14.727974 kernel: node 0: [mem 0x0000000000001000-0x000000000009ffff] Apr 12 18:52:14.727985 kernel: node 0: [mem 0x0000000000100000-0x00000000007fffff] Apr 12 18:52:14.727995 kernel: node 0: [mem 0x0000000000808000-0x000000000080afff] Apr 12 18:52:14.728006 kernel: node 0: [mem 0x000000000080c000-0x000000000080ffff] Apr 12 18:52:14.728018 kernel: node 0: [mem 0x0000000000900000-0x000000009c8eefff] Apr 12 18:52:14.728029 kernel: node 0: [mem 0x000000009cbff000-0x000000009cf3ffff] Apr 12 18:52:14.728039 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cf3ffff] Apr 12 18:52:14.728049 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Apr 12 18:52:14.728058 kernel: On node 0, zone DMA: 96 pages in unavailable ranges Apr 12 18:52:14.728068 kernel: On node 0, zone DMA: 8 pages in unavailable ranges Apr 12 18:52:14.728078 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Apr 12 18:52:14.728088 kernel: On node 0, zone DMA: 240 pages in unavailable ranges Apr 12 18:52:14.728098 kernel: On node 0, zone DMA32: 784 pages in unavailable ranges Apr 12 18:52:14.728110 kernel: On node 0, zone DMA32: 12480 pages in unavailable ranges Apr 12 18:52:14.728119 kernel: ACPI: PM-Timer IO Port: 0xb008 Apr 12 18:52:14.728128 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Apr 12 18:52:14.728138 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Apr 12 18:52:14.728148 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Apr 12 18:52:14.728158 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Apr 12 18:52:14.728167 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Apr 12 18:52:14.728177 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Apr 12 18:52:14.728214 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Apr 12 18:52:14.728242 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Apr 12 18:52:14.728265 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Apr 12 18:52:14.728275 kernel: TSC deadline timer available Apr 12 18:52:14.728284 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Apr 12 18:52:14.728297 kernel: kvm-guest: KVM setup pv remote TLB flush Apr 12 18:52:14.728306 kernel: kvm-guest: setup PV sched yield Apr 12 18:52:14.728320 kernel: [mem 0x9d000000-0xffffffff] available for PCI devices Apr 12 18:52:14.728330 kernel: Booting paravirtualized kernel on KVM Apr 12 18:52:14.728340 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Apr 12 18:52:14.729928 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Apr 12 18:52:14.729943 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Apr 12 18:52:14.729954 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Apr 12 18:52:14.729970 kernel: pcpu-alloc: [0] 0 1 2 3 Apr 12 18:52:14.729982 kernel: kvm-guest: setup async PF for cpu 0 Apr 12 18:52:14.729992 kernel: kvm-guest: stealtime: cpu 0, msr 9ae1c0c0 Apr 12 18:52:14.730002 kernel: kvm-guest: PV spinlocks enabled Apr 12 18:52:14.730012 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Apr 12 18:52:14.730023 kernel: Built 1 zonelists, mobility grouping on. Total pages: 629759 Apr 12 18:52:14.730608 kernel: Policy zone: DMA32 Apr 12 18:52:14.730624 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=189121f7c8c0a24098d3bb1e040d34611f7c276be43815ff7fe409fce185edaf Apr 12 18:52:14.730635 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Apr 12 18:52:14.730650 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Apr 12 18:52:14.730659 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Apr 12 18:52:14.730669 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Apr 12 18:52:14.730679 kernel: Memory: 2398372K/2567000K available (12294K kernel code, 2275K rwdata, 13708K rodata, 47440K init, 4148K bss, 168368K reserved, 0K cma-reserved) Apr 12 18:52:14.730691 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Apr 12 18:52:14.730701 kernel: ftrace: allocating 34508 entries in 135 pages Apr 12 18:52:14.730710 kernel: ftrace: allocated 135 pages with 4 groups Apr 12 18:52:14.730720 kernel: rcu: Hierarchical RCU implementation. Apr 12 18:52:14.730731 kernel: rcu: RCU event tracing is enabled. Apr 12 18:52:14.730742 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Apr 12 18:52:14.730752 kernel: Rude variant of Tasks RCU enabled. Apr 12 18:52:14.730762 kernel: Tracing variant of Tasks RCU enabled. Apr 12 18:52:14.730771 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Apr 12 18:52:14.730783 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Apr 12 18:52:14.730793 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Apr 12 18:52:14.730803 kernel: Console: colour dummy device 80x25 Apr 12 18:52:14.730813 kernel: printk: console [ttyS0] enabled Apr 12 18:52:14.730822 kernel: ACPI: Core revision 20210730 Apr 12 18:52:14.730832 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Apr 12 18:52:14.730842 kernel: APIC: Switch to symmetric I/O mode setup Apr 12 18:52:14.730852 kernel: x2apic enabled Apr 12 18:52:14.730862 kernel: Switched APIC routing to physical x2apic. Apr 12 18:52:14.730873 kernel: kvm-guest: setup PV IPIs Apr 12 18:52:14.730883 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Apr 12 18:52:14.730893 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Apr 12 18:52:14.730904 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Apr 12 18:52:14.730914 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Apr 12 18:52:14.730923 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Apr 12 18:52:14.730933 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Apr 12 18:52:14.730943 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Apr 12 18:52:14.730953 kernel: Spectre V2 : Mitigation: Retpolines Apr 12 18:52:14.730965 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Apr 12 18:52:14.730975 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Apr 12 18:52:14.730985 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Apr 12 18:52:14.730994 kernel: RETBleed: Mitigation: untrained return thunk Apr 12 18:52:14.731009 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Apr 12 18:52:14.731020 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Apr 12 18:52:14.731031 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Apr 12 18:52:14.731041 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Apr 12 18:52:14.731054 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Apr 12 18:52:14.731066 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Apr 12 18:52:14.731077 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Apr 12 18:52:14.731087 kernel: Freeing SMP alternatives memory: 32K Apr 12 18:52:14.731097 kernel: pid_max: default: 32768 minimum: 301 Apr 12 18:52:14.731107 kernel: LSM: Security Framework initializing Apr 12 18:52:14.731118 kernel: SELinux: Initializing. Apr 12 18:52:14.731128 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Apr 12 18:52:14.731138 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Apr 12 18:52:14.731148 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Apr 12 18:52:14.731161 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Apr 12 18:52:14.731171 kernel: ... version: 0 Apr 12 18:52:14.731195 kernel: ... bit width: 48 Apr 12 18:52:14.731206 kernel: ... generic registers: 6 Apr 12 18:52:14.731216 kernel: ... value mask: 0000ffffffffffff Apr 12 18:52:14.731226 kernel: ... max period: 00007fffffffffff Apr 12 18:52:14.731236 kernel: ... fixed-purpose events: 0 Apr 12 18:52:14.731246 kernel: ... event mask: 000000000000003f Apr 12 18:52:14.731256 kernel: signal: max sigframe size: 1776 Apr 12 18:52:14.731266 kernel: rcu: Hierarchical SRCU implementation. Apr 12 18:52:14.731278 kernel: smp: Bringing up secondary CPUs ... Apr 12 18:52:14.731288 kernel: x86: Booting SMP configuration: Apr 12 18:52:14.731298 kernel: .... node #0, CPUs: #1 Apr 12 18:52:14.731307 kernel: kvm-clock: cpu 1, msr 3a191041, secondary cpu clock Apr 12 18:52:14.731317 kernel: kvm-guest: setup async PF for cpu 1 Apr 12 18:52:14.731327 kernel: kvm-guest: stealtime: cpu 1, msr 9ae9c0c0 Apr 12 18:52:14.731337 kernel: #2 Apr 12 18:52:14.731356 kernel: kvm-clock: cpu 2, msr 3a191081, secondary cpu clock Apr 12 18:52:14.731366 kernel: kvm-guest: setup async PF for cpu 2 Apr 12 18:52:14.731378 kernel: kvm-guest: stealtime: cpu 2, msr 9af1c0c0 Apr 12 18:52:14.731387 kernel: #3 Apr 12 18:52:14.731396 kernel: kvm-clock: cpu 3, msr 3a1910c1, secondary cpu clock Apr 12 18:52:14.731406 kernel: kvm-guest: setup async PF for cpu 3 Apr 12 18:52:14.731416 kernel: kvm-guest: stealtime: cpu 3, msr 9af9c0c0 Apr 12 18:52:14.731425 kernel: smp: Brought up 1 node, 4 CPUs Apr 12 18:52:14.731434 kernel: smpboot: Max logical packages: 1 Apr 12 18:52:14.731444 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Apr 12 18:52:14.731454 kernel: devtmpfs: initialized Apr 12 18:52:14.731465 kernel: x86/mm: Memory block size: 128MB Apr 12 18:52:14.731475 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00800000-0x00807fff] (32768 bytes) Apr 12 18:52:14.731486 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x0080b000-0x0080bfff] (4096 bytes) Apr 12 18:52:14.731495 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x00810000-0x008fffff] (983040 bytes) Apr 12 18:52:14.731510 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cb7f000-0x9cbfefff] (524288 bytes) Apr 12 18:52:14.731520 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x9cf60000-0x9cffffff] (655360 bytes) Apr 12 18:52:14.731531 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Apr 12 18:52:14.731541 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Apr 12 18:52:14.731551 kernel: pinctrl core: initialized pinctrl subsystem Apr 12 18:52:14.731562 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Apr 12 18:52:14.731572 kernel: audit: initializing netlink subsys (disabled) Apr 12 18:52:14.731582 kernel: audit: type=2000 audit(1712947933.461:1): state=initialized audit_enabled=0 res=1 Apr 12 18:52:14.731592 kernel: thermal_sys: Registered thermal governor 'step_wise' Apr 12 18:52:14.731601 kernel: thermal_sys: Registered thermal governor 'user_space' Apr 12 18:52:14.731611 kernel: cpuidle: using governor menu Apr 12 18:52:14.731621 kernel: ACPI: bus type PCI registered Apr 12 18:52:14.731631 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Apr 12 18:52:14.731640 kernel: dca service started, version 1.12.1 Apr 12 18:52:14.731651 kernel: PCI: Using configuration type 1 for base access Apr 12 18:52:14.731660 kernel: PCI: Using configuration type 1 for extended access Apr 12 18:52:14.731670 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Apr 12 18:52:14.731678 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Apr 12 18:52:14.731688 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Apr 12 18:52:14.731697 kernel: ACPI: Added _OSI(Module Device) Apr 12 18:52:14.731706 kernel: ACPI: Added _OSI(Processor Device) Apr 12 18:52:14.731716 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Apr 12 18:52:14.731725 kernel: ACPI: Added _OSI(Processor Aggregator Device) Apr 12 18:52:14.731736 kernel: ACPI: Added _OSI(Linux-Dell-Video) Apr 12 18:52:14.731745 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Apr 12 18:52:14.731754 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Apr 12 18:52:14.731765 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Apr 12 18:52:14.731775 kernel: ACPI: Interpreter enabled Apr 12 18:52:14.731787 kernel: ACPI: PM: (supports S0 S3 S5) Apr 12 18:52:14.731797 kernel: ACPI: Using IOAPIC for interrupt routing Apr 12 18:52:14.731806 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Apr 12 18:52:14.731815 kernel: ACPI: Enabled 2 GPEs in block 00 to 0F Apr 12 18:52:14.731826 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Apr 12 18:52:14.732051 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Apr 12 18:52:14.732067 kernel: acpiphp: Slot [3] registered Apr 12 18:52:14.732077 kernel: acpiphp: Slot [4] registered Apr 12 18:52:14.732086 kernel: acpiphp: Slot [5] registered Apr 12 18:52:14.732095 kernel: acpiphp: Slot [6] registered Apr 12 18:52:14.732104 kernel: acpiphp: Slot [7] registered Apr 12 18:52:14.732113 kernel: acpiphp: Slot [8] registered Apr 12 18:52:14.732123 kernel: acpiphp: Slot [9] registered Apr 12 18:52:14.732134 kernel: acpiphp: Slot [10] registered Apr 12 18:52:14.732144 kernel: acpiphp: Slot [11] registered Apr 12 18:52:14.732153 kernel: acpiphp: Slot [12] registered Apr 12 18:52:14.732162 kernel: acpiphp: Slot [13] registered Apr 12 18:52:14.732172 kernel: acpiphp: Slot [14] registered Apr 12 18:52:14.732194 kernel: acpiphp: Slot [15] registered Apr 12 18:52:14.732203 kernel: acpiphp: Slot [16] registered Apr 12 18:52:14.732212 kernel: acpiphp: Slot [17] registered Apr 12 18:52:14.732222 kernel: acpiphp: Slot [18] registered Apr 12 18:52:14.732233 kernel: acpiphp: Slot [19] registered Apr 12 18:52:14.732242 kernel: acpiphp: Slot [20] registered Apr 12 18:52:14.732251 kernel: acpiphp: Slot [21] registered Apr 12 18:52:14.732260 kernel: acpiphp: Slot [22] registered Apr 12 18:52:14.732270 kernel: acpiphp: Slot [23] registered Apr 12 18:52:14.732278 kernel: acpiphp: Slot [24] registered Apr 12 18:52:14.732288 kernel: acpiphp: Slot [25] registered Apr 12 18:52:14.732297 kernel: acpiphp: Slot [26] registered Apr 12 18:52:14.732306 kernel: acpiphp: Slot [27] registered Apr 12 18:52:14.732315 kernel: acpiphp: Slot [28] registered Apr 12 18:52:14.732325 kernel: acpiphp: Slot [29] registered Apr 12 18:52:14.732334 kernel: acpiphp: Slot [30] registered Apr 12 18:52:14.732350 kernel: acpiphp: Slot [31] registered Apr 12 18:52:14.732360 kernel: PCI host bridge to bus 0000:00 Apr 12 18:52:14.732482 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Apr 12 18:52:14.732585 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Apr 12 18:52:14.732686 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Apr 12 18:52:14.732788 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xfebfffff window] Apr 12 18:52:14.732887 kernel: pci_bus 0000:00: root bus resource [mem 0x800000000-0x87fffffff window] Apr 12 18:52:14.732985 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Apr 12 18:52:14.733128 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Apr 12 18:52:14.733290 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Apr 12 18:52:14.735536 kernel: pci 0000:00:01.1: [8086:7010] type 00 class 0x010180 Apr 12 18:52:14.735661 kernel: pci 0000:00:01.1: reg 0x20: [io 0xc0c0-0xc0cf] Apr 12 18:52:14.735779 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Apr 12 18:52:14.735888 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Apr 12 18:52:14.735998 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Apr 12 18:52:14.736110 kernel: pci 0000:00:01.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Apr 12 18:52:14.736299 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 Apr 12 18:52:14.736419 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Apr 12 18:52:14.736531 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Apr 12 18:52:14.736662 kernel: pci 0000:00:02.0: [1234:1111] type 00 class 0x030000 Apr 12 18:52:14.736769 kernel: pci 0000:00:02.0: reg 0x10: [mem 0xc0000000-0xc0ffffff pref] Apr 12 18:52:14.736887 kernel: pci 0000:00:02.0: reg 0x18: [mem 0xc1043000-0xc1043fff] Apr 12 18:52:14.737001 kernel: pci 0000:00:02.0: reg 0x30: [mem 0xffff0000-0xffffffff pref] Apr 12 18:52:14.737112 kernel: pci 0000:00:02.0: BAR 0: assigned to efifb Apr 12 18:52:14.737238 kernel: pci 0000:00:02.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Apr 12 18:52:14.737393 kernel: pci 0000:00:03.0: [1af4:1005] type 00 class 0x00ff00 Apr 12 18:52:14.737509 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc0a0-0xc0bf] Apr 12 18:52:14.737626 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xc1042000-0xc1042fff] Apr 12 18:52:14.737730 kernel: pci 0000:00:03.0: reg 0x20: [mem 0x800000000-0x800003fff 64bit pref] Apr 12 18:52:14.737860 kernel: pci 0000:00:04.0: [1af4:1001] type 00 class 0x010000 Apr 12 18:52:14.737971 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc000-0xc07f] Apr 12 18:52:14.738080 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xc1041000-0xc1041fff] Apr 12 18:52:14.738835 kernel: pci 0000:00:04.0: reg 0x20: [mem 0x800004000-0x800007fff 64bit pref] Apr 12 18:52:14.739033 kernel: pci 0000:00:05.0: [1af4:1000] type 00 class 0x020000 Apr 12 18:52:14.739141 kernel: pci 0000:00:05.0: reg 0x10: [io 0xc080-0xc09f] Apr 12 18:52:14.739300 kernel: pci 0000:00:05.0: reg 0x14: [mem 0xc1040000-0xc1040fff] Apr 12 18:52:14.739417 kernel: pci 0000:00:05.0: reg 0x20: [mem 0x800008000-0x80000bfff 64bit pref] Apr 12 18:52:14.739524 kernel: pci 0000:00:05.0: reg 0x30: [mem 0xfffc0000-0xffffffff pref] Apr 12 18:52:14.739539 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Apr 12 18:52:14.739556 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Apr 12 18:52:14.739567 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Apr 12 18:52:14.739578 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Apr 12 18:52:14.739588 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Apr 12 18:52:14.739599 kernel: iommu: Default domain type: Translated Apr 12 18:52:14.739609 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Apr 12 18:52:14.739715 kernel: pci 0000:00:02.0: vgaarb: setting as boot VGA device Apr 12 18:52:14.739818 kernel: pci 0000:00:02.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Apr 12 18:52:14.739918 kernel: pci 0000:00:02.0: vgaarb: bridge control possible Apr 12 18:52:14.739936 kernel: vgaarb: loaded Apr 12 18:52:14.739947 kernel: pps_core: LinuxPPS API ver. 1 registered Apr 12 18:52:14.739958 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Apr 12 18:52:14.739969 kernel: PTP clock support registered Apr 12 18:52:14.739979 kernel: Registered efivars operations Apr 12 18:52:14.739990 kernel: PCI: Using ACPI for IRQ routing Apr 12 18:52:14.740000 kernel: PCI: pci_cache_line_size set to 64 bytes Apr 12 18:52:14.740010 kernel: e820: reserve RAM buffer [mem 0x0080b000-0x008fffff] Apr 12 18:52:14.740020 kernel: e820: reserve RAM buffer [mem 0x00810000-0x008fffff] Apr 12 18:52:14.740032 kernel: e820: reserve RAM buffer [mem 0x9b1aa018-0x9bffffff] Apr 12 18:52:14.740041 kernel: e820: reserve RAM buffer [mem 0x9b3f7018-0x9bffffff] Apr 12 18:52:14.740051 kernel: e820: reserve RAM buffer [mem 0x9c8ef000-0x9fffffff] Apr 12 18:52:14.740060 kernel: e820: reserve RAM buffer [mem 0x9cf40000-0x9fffffff] Apr 12 18:52:14.740070 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Apr 12 18:52:14.740080 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Apr 12 18:52:14.740090 kernel: clocksource: Switched to clocksource kvm-clock Apr 12 18:52:14.740101 kernel: VFS: Disk quotas dquot_6.6.0 Apr 12 18:52:14.740113 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Apr 12 18:52:14.740129 kernel: pnp: PnP ACPI init Apr 12 18:52:14.740285 kernel: pnp 00:02: [dma 2] Apr 12 18:52:14.740303 kernel: pnp: PnP ACPI: found 6 devices Apr 12 18:52:14.740314 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Apr 12 18:52:14.740325 kernel: NET: Registered PF_INET protocol family Apr 12 18:52:14.740335 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Apr 12 18:52:14.740357 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Apr 12 18:52:14.740368 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Apr 12 18:52:14.740382 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Apr 12 18:52:14.740392 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Apr 12 18:52:14.740403 kernel: TCP: Hash tables configured (established 32768 bind 32768) Apr 12 18:52:14.740414 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Apr 12 18:52:14.740424 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Apr 12 18:52:14.740434 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Apr 12 18:52:14.740445 kernel: NET: Registered PF_XDP protocol family Apr 12 18:52:14.740549 kernel: pci 0000:00:05.0: can't claim BAR 6 [mem 0xfffc0000-0xffffffff pref]: no compatible bridge window Apr 12 18:52:14.740661 kernel: pci 0000:00:05.0: BAR 6: assigned [mem 0x9d000000-0x9d03ffff pref] Apr 12 18:52:14.740756 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Apr 12 18:52:14.740840 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Apr 12 18:52:14.740923 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Apr 12 18:52:14.741004 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xfebfffff window] Apr 12 18:52:14.741088 kernel: pci_bus 0000:00: resource 8 [mem 0x800000000-0x87fffffff window] Apr 12 18:52:14.741202 kernel: pci 0000:00:01.0: PIIX3: Enabling Passive Release Apr 12 18:52:14.741306 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Apr 12 18:52:14.741418 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Apr 12 18:52:14.741432 kernel: PCI: CLS 0 bytes, default 64 Apr 12 18:52:14.741443 kernel: Initialise system trusted keyrings Apr 12 18:52:14.741454 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Apr 12 18:52:14.741465 kernel: Key type asymmetric registered Apr 12 18:52:14.741476 kernel: Asymmetric key parser 'x509' registered Apr 12 18:52:14.741486 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Apr 12 18:52:14.741497 kernel: io scheduler mq-deadline registered Apr 12 18:52:14.741508 kernel: io scheduler kyber registered Apr 12 18:52:14.741521 kernel: io scheduler bfq registered Apr 12 18:52:14.741532 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Apr 12 18:52:14.741543 kernel: ACPI: \_SB_.LNKC: Enabled at IRQ 11 Apr 12 18:52:14.741554 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 10 Apr 12 18:52:14.741565 kernel: ACPI: \_SB_.LNKA: Enabled at IRQ 10 Apr 12 18:52:14.741575 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Apr 12 18:52:14.741586 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Apr 12 18:52:14.741598 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Apr 12 18:52:14.741608 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Apr 12 18:52:14.741621 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Apr 12 18:52:14.741632 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Apr 12 18:52:14.741742 kernel: rtc_cmos 00:05: RTC can wake from S4 Apr 12 18:52:14.741830 kernel: rtc_cmos 00:05: registered as rtc0 Apr 12 18:52:14.741913 kernel: rtc_cmos 00:05: setting system clock to 2024-04-12T18:52:13 UTC (1712947933) Apr 12 18:52:14.742000 kernel: rtc_cmos 00:05: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Apr 12 18:52:14.742013 kernel: efifb: probing for efifb Apr 12 18:52:14.742025 kernel: efifb: framebuffer at 0xc0000000, using 4000k, total 4000k Apr 12 18:52:14.742035 kernel: efifb: mode is 1280x800x32, linelength=5120, pages=1 Apr 12 18:52:14.742046 kernel: efifb: scrolling: redraw Apr 12 18:52:14.742057 kernel: efifb: Truecolor: size=8:8:8:8, shift=24:16:8:0 Apr 12 18:52:14.742068 kernel: Console: switching to colour frame buffer device 160x50 Apr 12 18:52:14.742079 kernel: fb0: EFI VGA frame buffer device Apr 12 18:52:14.742092 kernel: pstore: Registered efi as persistent store backend Apr 12 18:52:14.742102 kernel: NET: Registered PF_INET6 protocol family Apr 12 18:52:14.742113 kernel: Segment Routing with IPv6 Apr 12 18:52:14.742124 kernel: In-situ OAM (IOAM) with IPv6 Apr 12 18:52:14.742135 kernel: NET: Registered PF_PACKET protocol family Apr 12 18:52:14.742146 kernel: Key type dns_resolver registered Apr 12 18:52:14.742156 kernel: IPI shorthand broadcast: enabled Apr 12 18:52:14.742167 kernel: sched_clock: Marking stable (797537188, 175304075)->(1088852188, -116010925) Apr 12 18:52:14.742178 kernel: registered taskstats version 1 Apr 12 18:52:14.742205 kernel: Loading compiled-in X.509 certificates Apr 12 18:52:14.742218 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.154-flatcar: 1fa140a38fc6bd27c8b56127e4d1eb4f665c7ec4' Apr 12 18:52:14.742229 kernel: Key type .fscrypt registered Apr 12 18:52:14.742240 kernel: Key type fscrypt-provisioning registered Apr 12 18:52:14.742251 kernel: pstore: Using crash dump compression: deflate Apr 12 18:52:14.742262 kernel: ima: No TPM chip found, activating TPM-bypass! Apr 12 18:52:14.742273 kernel: ima: Allocated hash algorithm: sha1 Apr 12 18:52:14.742283 kernel: ima: No architecture policies found Apr 12 18:52:14.742294 kernel: Freeing unused kernel image (initmem) memory: 47440K Apr 12 18:52:14.742306 kernel: Write protecting the kernel read-only data: 28672k Apr 12 18:52:14.742317 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Apr 12 18:52:14.742329 kernel: Freeing unused kernel image (rodata/data gap) memory: 628K Apr 12 18:52:14.742339 kernel: Run /init as init process Apr 12 18:52:14.742360 kernel: with arguments: Apr 12 18:52:14.742372 kernel: /init Apr 12 18:52:14.742382 kernel: with environment: Apr 12 18:52:14.742393 kernel: HOME=/ Apr 12 18:52:14.742403 kernel: TERM=linux Apr 12 18:52:14.742414 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Apr 12 18:52:14.742430 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Apr 12 18:52:14.742444 systemd[1]: Detected virtualization kvm. Apr 12 18:52:14.742456 systemd[1]: Detected architecture x86-64. Apr 12 18:52:14.742467 systemd[1]: Running in initrd. Apr 12 18:52:14.742480 systemd[1]: No hostname configured, using default hostname. Apr 12 18:52:14.742491 systemd[1]: Hostname set to . Apr 12 18:52:14.742505 systemd[1]: Initializing machine ID from VM UUID. Apr 12 18:52:14.742516 systemd[1]: Queued start job for default target initrd.target. Apr 12 18:52:14.742527 systemd[1]: Started systemd-ask-password-console.path. Apr 12 18:52:14.742538 systemd[1]: Reached target cryptsetup.target. Apr 12 18:52:14.742549 systemd[1]: Reached target paths.target. Apr 12 18:52:14.742560 systemd[1]: Reached target slices.target. Apr 12 18:52:14.742571 systemd[1]: Reached target swap.target. Apr 12 18:52:14.742582 systemd[1]: Reached target timers.target. Apr 12 18:52:14.742595 systemd[1]: Listening on iscsid.socket. Apr 12 18:52:14.742607 systemd[1]: Listening on iscsiuio.socket. Apr 12 18:52:14.742618 systemd[1]: Listening on systemd-journald-audit.socket. Apr 12 18:52:14.742630 systemd[1]: Listening on systemd-journald-dev-log.socket. Apr 12 18:52:14.742641 systemd[1]: Listening on systemd-journald.socket. Apr 12 18:52:14.742653 systemd[1]: Listening on systemd-networkd.socket. Apr 12 18:52:14.742664 systemd[1]: Listening on systemd-udevd-control.socket. Apr 12 18:52:14.742675 systemd[1]: Listening on systemd-udevd-kernel.socket. Apr 12 18:52:14.742687 systemd[1]: Reached target sockets.target. Apr 12 18:52:14.742700 systemd[1]: Starting kmod-static-nodes.service... Apr 12 18:52:14.742711 systemd[1]: Finished network-cleanup.service. Apr 12 18:52:14.742722 systemd[1]: Starting systemd-fsck-usr.service... Apr 12 18:52:14.742734 systemd[1]: Starting systemd-journald.service... Apr 12 18:52:14.742745 systemd[1]: Starting systemd-modules-load.service... Apr 12 18:52:14.742757 systemd[1]: Starting systemd-resolved.service... Apr 12 18:52:14.742768 systemd[1]: Starting systemd-vconsole-setup.service... Apr 12 18:52:14.742779 systemd[1]: Finished kmod-static-nodes.service. Apr 12 18:52:14.742790 systemd[1]: Finished systemd-fsck-usr.service. Apr 12 18:52:14.742803 systemd[1]: Finished systemd-vconsole-setup.service. Apr 12 18:52:14.742814 systemd[1]: Starting dracut-cmdline-ask.service... Apr 12 18:52:14.742826 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Apr 12 18:52:14.742837 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Apr 12 18:52:14.742848 systemd[1]: Finished dracut-cmdline-ask.service. Apr 12 18:52:14.742860 systemd[1]: Starting dracut-cmdline.service... Apr 12 18:52:14.742876 systemd-journald[197]: Journal started Apr 12 18:52:14.742940 systemd-journald[197]: Runtime Journal (/run/log/journal/5676d36d41724972a95c3aea3d4d5bd5) is 6.0M, max 48.4M, 42.4M free. Apr 12 18:52:14.665902 systemd-modules-load[198]: Inserted module 'overlay' Apr 12 18:52:14.745978 systemd[1]: Started systemd-journald.service. Apr 12 18:52:14.739109 systemd-resolved[199]: Positive Trust Anchors: Apr 12 18:52:14.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:14.739152 systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Apr 12 18:52:14.761219 kernel: audit: type=1130 audit(1712947934.747:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:14.761256 kernel: audit: type=1130 audit(1712947934.754:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:14.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:14.739224 systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Apr 12 18:52:14.742708 systemd-resolved[199]: Defaulting to hostname 'linux'. Apr 12 18:52:14.747548 systemd[1]: Started systemd-resolved.service. Apr 12 18:52:14.755237 systemd[1]: Reached target nss-lookup.target. Apr 12 18:52:14.784628 dracut-cmdline[215]: dracut-dracut-053 Apr 12 18:52:14.784628 dracut-cmdline[215]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Apr 12 18:52:14.784628 dracut-cmdline[215]: BEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=189121f7c8c0a24098d3bb1e040d34611f7c276be43815ff7fe409fce185edaf Apr 12 18:52:14.797479 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Apr 12 18:52:14.803219 kernel: Bridge firewalling registered Apr 12 18:52:14.803130 systemd-modules-load[198]: Inserted module 'br_netfilter' Apr 12 18:52:14.832382 kernel: SCSI subsystem initialized Apr 12 18:52:14.847283 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Apr 12 18:52:14.847378 kernel: device-mapper: uevent: version 1.0.3 Apr 12 18:52:14.847396 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Apr 12 18:52:14.851980 kernel: Loading iSCSI transport class v2.0-870. Apr 12 18:52:14.856363 systemd-modules-load[198]: Inserted module 'dm_multipath' Apr 12 18:52:14.860655 systemd[1]: Finished systemd-modules-load.service. Apr 12 18:52:14.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:14.870328 kernel: audit: type=1130 audit(1712947934.863:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:14.869137 systemd[1]: Starting systemd-sysctl.service... Apr 12 18:52:14.884873 systemd[1]: Finished systemd-sysctl.service. Apr 12 18:52:14.896544 kernel: audit: type=1130 audit(1712947934.884:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:14.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:14.900224 kernel: iscsi: registered transport (tcp) Apr 12 18:52:14.936398 kernel: iscsi: registered transport (qla4xxx) Apr 12 18:52:14.936486 kernel: QLogic iSCSI HBA Driver Apr 12 18:52:15.051792 systemd[1]: Finished dracut-cmdline.service. Apr 12 18:52:15.069000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:15.071196 systemd[1]: Starting dracut-pre-udev.service... Apr 12 18:52:15.082952 kernel: audit: type=1130 audit(1712947935.069:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:15.216476 kernel: raid6: avx2x4 gen() 14748 MB/s Apr 12 18:52:15.230237 kernel: raid6: avx2x4 xor() 3538 MB/s Apr 12 18:52:15.247235 kernel: raid6: avx2x2 gen() 18208 MB/s Apr 12 18:52:15.263374 kernel: raid6: avx2x2 xor() 11228 MB/s Apr 12 18:52:15.281243 kernel: raid6: avx2x1 gen() 14545 MB/s Apr 12 18:52:15.299235 kernel: raid6: avx2x1 xor() 9228 MB/s Apr 12 18:52:15.318238 kernel: raid6: sse2x4 gen() 9319 MB/s Apr 12 18:52:15.334235 kernel: raid6: sse2x4 xor() 3164 MB/s Apr 12 18:52:15.352265 kernel: raid6: sse2x2 gen() 9451 MB/s Apr 12 18:52:15.370263 kernel: raid6: sse2x2 xor() 5912 MB/s Apr 12 18:52:15.387249 kernel: raid6: sse2x1 gen() 7154 MB/s Apr 12 18:52:15.407304 kernel: raid6: sse2x1 xor() 4652 MB/s Apr 12 18:52:15.407409 kernel: raid6: using algorithm avx2x2 gen() 18208 MB/s Apr 12 18:52:15.407426 kernel: raid6: .... xor() 11228 MB/s, rmw enabled Apr 12 18:52:15.407439 kernel: raid6: using avx2x2 recovery algorithm Apr 12 18:52:15.445063 kernel: xor: automatically using best checksumming function avx Apr 12 18:52:15.650648 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Apr 12 18:52:15.688833 systemd[1]: Finished dracut-pre-udev.service. Apr 12 18:52:15.697565 kernel: audit: type=1130 audit(1712947935.690:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:15.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:15.697000 audit: BPF prog-id=7 op=LOAD Apr 12 18:52:15.699000 audit: BPF prog-id=8 op=LOAD Apr 12 18:52:15.700970 kernel: audit: type=1334 audit(1712947935.697:8): prog-id=7 op=LOAD Apr 12 18:52:15.701003 kernel: audit: type=1334 audit(1712947935.699:9): prog-id=8 op=LOAD Apr 12 18:52:15.707516 systemd[1]: Starting systemd-udevd.service... Apr 12 18:52:15.743947 systemd-udevd[401]: Using default interface naming scheme 'v252'. Apr 12 18:52:15.750584 systemd[1]: Started systemd-udevd.service. Apr 12 18:52:15.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:15.761715 systemd[1]: Starting dracut-pre-trigger.service... Apr 12 18:52:15.780267 kernel: audit: type=1130 audit(1712947935.756:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:15.795625 dracut-pre-trigger[408]: rd.md=0: removing MD RAID activation Apr 12 18:52:15.863131 systemd[1]: Finished dracut-pre-trigger.service. Apr 12 18:52:15.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:15.865411 systemd[1]: Starting systemd-udev-trigger.service... Apr 12 18:52:15.948515 systemd[1]: Finished systemd-udev-trigger.service. Apr 12 18:52:15.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:16.045206 kernel: cryptd: max_cpu_qlen set to 1000 Apr 12 18:52:16.066034 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Apr 12 18:52:16.073166 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Apr 12 18:52:16.073245 kernel: GPT:9289727 != 19775487 Apr 12 18:52:16.073256 kernel: GPT:Alternate GPT header not at the end of the disk. Apr 12 18:52:16.073267 kernel: GPT:9289727 != 19775487 Apr 12 18:52:16.073287 kernel: libata version 3.00 loaded. Apr 12 18:52:16.073300 kernel: GPT: Use GNU Parted to correct GPT errors. Apr 12 18:52:16.073326 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Apr 12 18:52:16.080214 kernel: ata_piix 0000:00:01.1: version 2.13 Apr 12 18:52:16.085782 kernel: scsi host0: ata_piix Apr 12 18:52:16.085995 kernel: scsi host1: ata_piix Apr 12 18:52:16.086129 kernel: ata1: PATA max MWDMA2 cmd 0x1f0 ctl 0x3f6 bmdma 0xc0c0 irq 14 Apr 12 18:52:16.086144 kernel: ata2: PATA max MWDMA2 cmd 0x170 ctl 0x376 bmdma 0xc0c8 irq 15 Apr 12 18:52:16.090799 kernel: AVX2 version of gcm_enc/dec engaged. Apr 12 18:52:16.093226 kernel: AES CTR mode by8 optimization enabled Apr 12 18:52:16.128215 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/vda6 scanned by (udev-worker) (445) Apr 12 18:52:16.131997 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Apr 12 18:52:16.136858 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Apr 12 18:52:16.149739 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Apr 12 18:52:16.151407 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Apr 12 18:52:16.157425 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Apr 12 18:52:16.163067 systemd[1]: Starting disk-uuid.service... Apr 12 18:52:16.171587 disk-uuid[513]: Primary Header is updated. Apr 12 18:52:16.171587 disk-uuid[513]: Secondary Entries is updated. Apr 12 18:52:16.171587 disk-uuid[513]: Secondary Header is updated. Apr 12 18:52:16.177261 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Apr 12 18:52:16.181054 kernel: GPT:disk_guids don't match. Apr 12 18:52:16.181093 kernel: GPT: Use GNU Parted to correct GPT errors. Apr 12 18:52:16.181106 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Apr 12 18:52:16.188260 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Apr 12 18:52:16.245323 kernel: ata2.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Apr 12 18:52:16.251217 kernel: scsi 1:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Apr 12 18:52:16.350287 kernel: sr 1:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Apr 12 18:52:16.350588 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Apr 12 18:52:16.381918 kernel: sr 1:0:0:0: Attached scsi CD-ROM sr0 Apr 12 18:52:17.196240 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Apr 12 18:52:17.198165 disk-uuid[514]: The operation has completed successfully. Apr 12 18:52:17.262022 systemd[1]: disk-uuid.service: Deactivated successfully. Apr 12 18:52:17.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:17.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:17.262201 systemd[1]: Finished disk-uuid.service. Apr 12 18:52:17.272099 systemd[1]: Starting verity-setup.service... Apr 12 18:52:17.533525 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Apr 12 18:52:17.724573 systemd[1]: Found device dev-mapper-usr.device. Apr 12 18:52:17.730354 systemd[1]: Mounting sysusr-usr.mount... Apr 12 18:52:17.730807 systemd[1]: Finished verity-setup.service. Apr 12 18:52:17.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.024274 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Apr 12 18:52:18.026498 systemd[1]: Mounted sysusr-usr.mount. Apr 12 18:52:18.027724 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Apr 12 18:52:18.029730 systemd[1]: Starting ignition-setup.service... Apr 12 18:52:18.039262 systemd[1]: Starting parse-ip-for-networkd.service... Apr 12 18:52:18.054382 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Apr 12 18:52:18.054514 kernel: BTRFS info (device vda6): using free space tree Apr 12 18:52:18.054538 kernel: BTRFS info (device vda6): has skinny extents Apr 12 18:52:18.139563 systemd[1]: mnt-oem.mount: Deactivated successfully. Apr 12 18:52:18.199934 systemd[1]: Finished ignition-setup.service. Apr 12 18:52:18.214362 kernel: kauditd_printk_skb: 5 callbacks suppressed Apr 12 18:52:18.214435 kernel: audit: type=1130 audit(1712947938.206:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.211690 systemd[1]: Starting ignition-fetch-offline.service... Apr 12 18:52:18.310298 systemd[1]: Finished parse-ip-for-networkd.service. Apr 12 18:52:18.312000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.324315 kernel: audit: type=1130 audit(1712947938.312:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.415000 audit: BPF prog-id=9 op=LOAD Apr 12 18:52:18.420688 kernel: audit: type=1334 audit(1712947938.415:18): prog-id=9 op=LOAD Apr 12 18:52:18.424491 systemd[1]: Starting systemd-networkd.service... Apr 12 18:52:18.488694 systemd-networkd[700]: lo: Link UP Apr 12 18:52:18.488710 systemd-networkd[700]: lo: Gained carrier Apr 12 18:52:18.495027 systemd-networkd[700]: Enumeration completed Apr 12 18:52:18.535941 kernel: audit: type=1130 audit(1712947938.496:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.496000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.495387 systemd[1]: Started systemd-networkd.service. Apr 12 18:52:18.495459 systemd-networkd[700]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Apr 12 18:52:18.496678 systemd[1]: Reached target network.target. Apr 12 18:52:18.613889 systemd-networkd[700]: eth0: Link UP Apr 12 18:52:18.613908 systemd-networkd[700]: eth0: Gained carrier Apr 12 18:52:18.615748 systemd[1]: Starting iscsiuio.service... Apr 12 18:52:18.730997 systemd[1]: Started iscsiuio.service. Apr 12 18:52:18.740525 kernel: audit: type=1130 audit(1712947938.732:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.740487 systemd[1]: Starting iscsid.service... Apr 12 18:52:18.732738 ignition[654]: Ignition 2.14.0 Apr 12 18:52:18.732751 ignition[654]: Stage: fetch-offline Apr 12 18:52:18.732843 ignition[654]: no configs at "/usr/lib/ignition/base.d" Apr 12 18:52:18.732859 ignition[654]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Apr 12 18:52:18.751141 iscsid[710]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Apr 12 18:52:18.751141 iscsid[710]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Apr 12 18:52:18.751141 iscsid[710]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Apr 12 18:52:18.751141 iscsid[710]: If using hardware iscsi like qla4xxx this message can be ignored. Apr 12 18:52:18.751141 iscsid[710]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Apr 12 18:52:18.751141 iscsid[710]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Apr 12 18:52:18.802976 kernel: audit: type=1130 audit(1712947938.751:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.803012 kernel: audit: type=1130 audit(1712947938.777:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.750138 systemd[1]: Started iscsid.service. Apr 12 18:52:18.733056 ignition[654]: parsed url from cmdline: "" Apr 12 18:52:18.752467 systemd[1]: Starting dracut-initqueue.service... Apr 12 18:52:18.733061 ignition[654]: no config URL provided Apr 12 18:52:18.775590 systemd[1]: Finished dracut-initqueue.service. Apr 12 18:52:18.733068 ignition[654]: reading system config file "/usr/lib/ignition/user.ign" Apr 12 18:52:18.777417 systemd[1]: Reached target remote-fs-pre.target. Apr 12 18:52:18.733082 ignition[654]: no config at "/usr/lib/ignition/user.ign" Apr 12 18:52:18.781271 systemd-networkd[700]: eth0: DHCPv4 address 10.0.0.120/16, gateway 10.0.0.1 acquired from 10.0.0.1 Apr 12 18:52:18.733122 ignition[654]: op(1): [started] loading QEMU firmware config module Apr 12 18:52:18.783910 systemd[1]: Reached target remote-cryptsetup.target. Apr 12 18:52:18.733129 ignition[654]: op(1): executing: "modprobe" "qemu_fw_cfg" Apr 12 18:52:18.787132 systemd[1]: Reached target remote-fs.target. Apr 12 18:52:18.757316 ignition[654]: op(1): [finished] loading QEMU firmware config module Apr 12 18:52:18.798841 systemd[1]: Starting dracut-pre-mount.service... Apr 12 18:52:18.825099 systemd[1]: Finished dracut-pre-mount.service. Apr 12 18:52:18.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.834280 kernel: audit: type=1130 audit(1712947938.824:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:18.899503 ignition[654]: parsing config with SHA512: 7ccc27dbc452c36eda5cb62b05613f315e9ea1d9ec0425a2c0322c8561267cb89d38dac25aaf51891c5fb15e21239bde2045ce5e75811aba6a4b6c0aefe8ccbf Apr 12 18:52:19.123275 unknown[654]: fetched base config from "system" Apr 12 18:52:19.123293 unknown[654]: fetched user config from "qemu" Apr 12 18:52:19.125305 ignition[654]: fetch-offline: fetch-offline passed Apr 12 18:52:19.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:19.128108 systemd[1]: Finished ignition-fetch-offline.service. Apr 12 18:52:19.138637 kernel: audit: type=1130 audit(1712947939.129:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:19.125428 ignition[654]: Ignition finished successfully Apr 12 18:52:19.129972 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Apr 12 18:52:19.131263 systemd[1]: Starting ignition-kargs.service... Apr 12 18:52:19.157782 ignition[726]: Ignition 2.14.0 Apr 12 18:52:19.157803 ignition[726]: Stage: kargs Apr 12 18:52:19.157988 ignition[726]: no configs at "/usr/lib/ignition/base.d" Apr 12 18:52:19.158005 ignition[726]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Apr 12 18:52:19.160253 ignition[726]: kargs: kargs passed Apr 12 18:52:19.160333 ignition[726]: Ignition finished successfully Apr 12 18:52:19.175529 systemd[1]: Finished ignition-kargs.service. Apr 12 18:52:19.180000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:19.181877 systemd[1]: Starting ignition-disks.service... Apr 12 18:52:19.194510 kernel: audit: type=1130 audit(1712947939.180:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:19.213939 ignition[732]: Ignition 2.14.0 Apr 12 18:52:19.213954 ignition[732]: Stage: disks Apr 12 18:52:19.214128 ignition[732]: no configs at "/usr/lib/ignition/base.d" Apr 12 18:52:19.214141 ignition[732]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Apr 12 18:52:19.219952 ignition[732]: disks: disks passed Apr 12 18:52:19.221401 systemd[1]: Finished ignition-disks.service. Apr 12 18:52:19.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:19.220017 ignition[732]: Ignition finished successfully Apr 12 18:52:19.222367 systemd[1]: Reached target initrd-root-device.target. Apr 12 18:52:19.225345 systemd[1]: Reached target local-fs-pre.target. Apr 12 18:52:19.225417 systemd[1]: Reached target local-fs.target. Apr 12 18:52:19.231660 systemd[1]: Reached target sysinit.target. Apr 12 18:52:19.232666 systemd[1]: Reached target basic.target. Apr 12 18:52:19.234156 systemd[1]: Starting systemd-fsck-root.service... Apr 12 18:52:19.265057 systemd-fsck[740]: ROOT: clean, 612/553520 files, 56019/553472 blocks Apr 12 18:52:19.277386 systemd[1]: Finished systemd-fsck-root.service. Apr 12 18:52:19.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:19.279686 systemd[1]: Mounting sysroot.mount... Apr 12 18:52:19.300373 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Apr 12 18:52:19.300630 systemd[1]: Mounted sysroot.mount. Apr 12 18:52:19.301847 systemd[1]: Reached target initrd-root-fs.target. Apr 12 18:52:19.314550 systemd[1]: Mounting sysroot-usr.mount... Apr 12 18:52:19.322159 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Apr 12 18:52:19.323373 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Apr 12 18:52:19.323419 systemd[1]: Reached target ignition-diskful.target. Apr 12 18:52:19.329001 systemd[1]: Mounted sysroot-usr.mount. Apr 12 18:52:19.350506 systemd[1]: Mounting sysroot-usr-share-oem.mount... Apr 12 18:52:19.359113 systemd[1]: Starting initrd-setup-root.service... Apr 12 18:52:19.367526 initrd-setup-root[751]: cut: /sysroot/etc/passwd: No such file or directory Apr 12 18:52:19.378707 initrd-setup-root[759]: cut: /sysroot/etc/group: No such file or directory Apr 12 18:52:19.380576 kernel: BTRFS: device label OEM devid 1 transid 13 /dev/vda6 scanned by mount (746) Apr 12 18:52:19.388949 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Apr 12 18:52:19.389032 kernel: BTRFS info (device vda6): using free space tree Apr 12 18:52:19.389049 kernel: BTRFS info (device vda6): has skinny extents Apr 12 18:52:19.397239 initrd-setup-root[784]: cut: /sysroot/etc/shadow: No such file or directory Apr 12 18:52:19.402573 systemd[1]: Mounted sysroot-usr-share-oem.mount. Apr 12 18:52:19.407239 initrd-setup-root[793]: cut: /sysroot/etc/gshadow: No such file or directory Apr 12 18:52:19.494819 systemd[1]: Finished initrd-setup-root.service. Apr 12 18:52:19.497247 systemd[1]: Starting ignition-mount.service... Apr 12 18:52:19.495000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:19.500321 systemd[1]: Starting sysroot-boot.service... Apr 12 18:52:19.523831 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Apr 12 18:52:19.523969 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Apr 12 18:52:19.571840 ignition[812]: INFO : Ignition 2.14.0 Apr 12 18:52:19.571840 ignition[812]: INFO : Stage: mount Apr 12 18:52:19.580692 ignition[812]: INFO : no configs at "/usr/lib/ignition/base.d" Apr 12 18:52:19.580692 ignition[812]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Apr 12 18:52:19.580692 ignition[812]: INFO : mount: mount passed Apr 12 18:52:19.580692 ignition[812]: INFO : Ignition finished successfully Apr 12 18:52:19.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:19.578818 systemd[1]: Finished ignition-mount.service. Apr 12 18:52:19.584880 systemd[1]: Starting ignition-files.service... Apr 12 18:52:19.607582 systemd[1]: Finished sysroot-boot.service. Apr 12 18:52:19.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:19.610325 systemd[1]: Mounting sysroot-usr-share-oem.mount... Apr 12 18:52:19.623263 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/vda6 scanned by mount (821) Apr 12 18:52:19.629277 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Apr 12 18:52:19.629373 kernel: BTRFS info (device vda6): using free space tree Apr 12 18:52:19.629393 kernel: BTRFS info (device vda6): has skinny extents Apr 12 18:52:19.650063 systemd[1]: Mounted sysroot-usr-share-oem.mount. Apr 12 18:52:19.673110 ignition[840]: INFO : Ignition 2.14.0 Apr 12 18:52:19.674683 ignition[840]: INFO : Stage: files Apr 12 18:52:19.677789 ignition[840]: INFO : no configs at "/usr/lib/ignition/base.d" Apr 12 18:52:19.677789 ignition[840]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Apr 12 18:52:19.681977 ignition[840]: DEBUG : files: compiled without relabeling support, skipping Apr 12 18:52:19.686511 ignition[840]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Apr 12 18:52:19.686511 ignition[840]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Apr 12 18:52:19.692379 ignition[840]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Apr 12 18:52:19.697646 ignition[840]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Apr 12 18:52:19.697646 ignition[840]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Apr 12 18:52:19.696672 unknown[840]: wrote ssh authorized keys file for user: core Apr 12 18:52:19.702780 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Apr 12 18:52:19.702780 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Apr 12 18:52:20.070791 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Apr 12 18:52:20.387337 systemd-networkd[700]: eth0: Gained IPv6LL Apr 12 18:52:21.478376 ignition[840]: DEBUG : files: createFilesystemsFiles: createFiles: op(3): file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Apr 12 18:52:21.482851 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Apr 12 18:52:21.482851 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Apr 12 18:52:21.482851 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Apr 12 18:52:21.795259 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(4): GET result: OK Apr 12 18:52:22.156579 ignition[840]: DEBUG : files: createFilesystemsFiles: createFiles: op(4): file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Apr 12 18:52:22.156579 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Apr 12 18:52:22.162741 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Apr 12 18:52:22.162741 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Apr 12 18:52:22.207044 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(5): GET result: OK Apr 12 18:52:22.560463 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Apr 12 18:52:22.563390 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/opt/bin/kubeadm" Apr 12 18:52:22.563390 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET https://dl.k8s.io/release/v1.29.2/bin/linux/amd64/kubeadm: attempt #1 Apr 12 18:52:22.643043 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(6): GET result: OK Apr 12 18:52:23.774404 ignition[840]: DEBUG : files: createFilesystemsFiles: createFiles: op(6): file matches expected sum of: 4261cb0319688a0557b3052cce8df9d754abc38d5fc8e0eeeb63a85a2194895fdca5bad464f8516459ed7b1764d7bbb2304f5f434d42bb35f38764b4b00ce663 Apr 12 18:52:23.778647 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/opt/bin/kubeadm" Apr 12 18:52:23.778647 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubelet" Apr 12 18:52:23.778647 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET https://dl.k8s.io/release/v1.29.2/bin/linux/amd64/kubelet: attempt #1 Apr 12 18:52:23.831889 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(7): GET result: OK Apr 12 18:52:26.171206 ignition[840]: DEBUG : files: createFilesystemsFiles: createFiles: op(7): file matches expected sum of: d3fef1d4b99415179ecb94d4de953bddb74c0fb0f798265829b899bb031e2ab8c2b60037b79a66405a9b102d3db0d90e9257595f4b11660356de0e2e63744cd7 Apr 12 18:52:26.171206 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubelet" Apr 12 18:52:26.171206 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubectl" Apr 12 18:52:26.171206 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET https://dl.k8s.io/release/v1.29.2/bin/linux/amd64/kubectl: attempt #1 Apr 12 18:52:26.234133 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(8): GET result: OK Apr 12 18:52:26.821853 ignition[840]: DEBUG : files: createFilesystemsFiles: createFiles: op(8): file matches expected sum of: a2de71807eb4c41f4d70e5c47fac72ecf3c74984be6c08be0597fc58621baeeddc1b5cc6431ab007eee9bd0a98f8628dd21512b06daaeccfac5837e9792a98a7 Apr 12 18:52:26.821853 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubectl" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/etc/docker/daemon.json" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/etc/docker/daemon.json" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/home/core/install.sh" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/home/core/install.sh" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/nginx.yaml" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/nginx.yaml" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/flatcar/update.conf" Apr 12 18:52:26.837145 ignition[840]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/flatcar/update.conf" Apr 12 18:52:26.837145 ignition[840]: INFO : files: op(f): [started] processing unit "coreos-metadata.service" Apr 12 18:52:26.837145 ignition[840]: INFO : files: op(f): op(10): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Apr 12 18:52:26.837145 ignition[840]: INFO : files: op(f): op(10): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Apr 12 18:52:26.837145 ignition[840]: INFO : files: op(f): [finished] processing unit "coreos-metadata.service" Apr 12 18:52:26.837145 ignition[840]: INFO : files: op(11): [started] processing unit "prepare-cni-plugins.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(11): op(12): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(11): op(12): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(11): [finished] processing unit "prepare-cni-plugins.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(13): [started] processing unit "prepare-critools.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(13): op(14): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(13): op(14): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(13): [finished] processing unit "prepare-critools.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(15): [started] processing unit "prepare-helm.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(15): op(16): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(15): op(16): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(15): [finished] processing unit "prepare-helm.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(17): [started] setting preset to disabled for "coreos-metadata.service" Apr 12 18:52:26.922518 ignition[840]: INFO : files: op(17): op(18): [started] removing enablement symlink(s) for "coreos-metadata.service" Apr 12 18:52:26.981640 ignition[840]: INFO : files: op(17): op(18): [finished] removing enablement symlink(s) for "coreos-metadata.service" Apr 12 18:52:26.985284 ignition[840]: INFO : files: op(17): [finished] setting preset to disabled for "coreos-metadata.service" Apr 12 18:52:26.985284 ignition[840]: INFO : files: op(19): [started] setting preset to enabled for "prepare-cni-plugins.service" Apr 12 18:52:26.985284 ignition[840]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-cni-plugins.service" Apr 12 18:52:26.985284 ignition[840]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Apr 12 18:52:26.985284 ignition[840]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Apr 12 18:52:26.985284 ignition[840]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-helm.service" Apr 12 18:52:26.985284 ignition[840]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-helm.service" Apr 12 18:52:27.007424 ignition[840]: INFO : files: createResultFile: createFiles: op(1c): [started] writing file "/sysroot/etc/.ignition-result.json" Apr 12 18:52:27.007424 ignition[840]: INFO : files: createResultFile: createFiles: op(1c): [finished] writing file "/sysroot/etc/.ignition-result.json" Apr 12 18:52:27.011858 ignition[840]: INFO : files: files passed Apr 12 18:52:27.011858 ignition[840]: INFO : Ignition finished successfully Apr 12 18:52:27.022381 systemd[1]: Finished ignition-files.service. Apr 12 18:52:27.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.029540 systemd[1]: Starting initrd-setup-root-after-ignition.service... Apr 12 18:52:27.044544 kernel: kauditd_printk_skb: 5 callbacks suppressed Apr 12 18:52:27.044575 kernel: audit: type=1130 audit(1712947947.027:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.044542 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Apr 12 18:52:27.047105 initrd-setup-root-after-ignition[863]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Apr 12 18:52:27.047206 systemd[1]: Starting ignition-quench.service... Apr 12 18:52:27.051023 initrd-setup-root-after-ignition[866]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Apr 12 18:52:27.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.052544 systemd[1]: Finished initrd-setup-root-after-ignition.service. Apr 12 18:52:27.060821 kernel: audit: type=1130 audit(1712947947.054:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.054575 systemd[1]: ignition-quench.service: Deactivated successfully. Apr 12 18:52:27.054692 systemd[1]: Finished ignition-quench.service. Apr 12 18:52:27.076473 kernel: audit: type=1130 audit(1712947947.062:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.076559 kernel: audit: type=1131 audit(1712947947.062:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.062000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.063431 systemd[1]: Reached target ignition-complete.target. Apr 12 18:52:27.077750 systemd[1]: Starting initrd-parse-etc.service... Apr 12 18:52:27.105789 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Apr 12 18:52:27.123971 kernel: audit: type=1130 audit(1712947947.108:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.124061 kernel: audit: type=1131 audit(1712947947.108:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.108000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.108000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.105922 systemd[1]: Finished initrd-parse-etc.service. Apr 12 18:52:27.108366 systemd[1]: Reached target initrd-fs.target. Apr 12 18:52:27.125165 systemd[1]: Reached target initrd.target. Apr 12 18:52:27.136752 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Apr 12 18:52:27.137939 systemd[1]: Starting dracut-pre-pivot.service... Apr 12 18:52:27.179383 systemd[1]: Finished dracut-pre-pivot.service. Apr 12 18:52:27.195217 kernel: audit: type=1130 audit(1712947947.179:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.181043 systemd[1]: Starting initrd-cleanup.service... Apr 12 18:52:27.217068 systemd[1]: Stopped target nss-lookup.target. Apr 12 18:52:27.220480 systemd[1]: Stopped target remote-cryptsetup.target. Apr 12 18:52:27.229454 systemd[1]: Stopped target timers.target. Apr 12 18:52:27.238010 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Apr 12 18:52:27.347431 kernel: audit: type=1131 audit(1712947947.239:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.239000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.238224 systemd[1]: Stopped dracut-pre-pivot.service. Apr 12 18:52:27.244354 systemd[1]: Stopped target initrd.target. Apr 12 18:52:27.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.254765 systemd[1]: Stopped target basic.target. Apr 12 18:52:27.266590 systemd[1]: Stopped target ignition-complete.target. Apr 12 18:52:27.284430 systemd[1]: Stopped target ignition-diskful.target. Apr 12 18:52:27.368295 kernel: audit: type=1131 audit(1712947947.344:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.290317 systemd[1]: Stopped target initrd-root-device.target. Apr 12 18:52:27.295856 systemd[1]: Stopped target remote-fs.target. Apr 12 18:52:27.297187 systemd[1]: Stopped target remote-fs-pre.target. Apr 12 18:52:27.305792 systemd[1]: Stopped target sysinit.target. Apr 12 18:52:27.315137 systemd[1]: Stopped target local-fs.target. Apr 12 18:52:27.323606 systemd[1]: Stopped target local-fs-pre.target. Apr 12 18:52:27.327510 systemd[1]: Stopped target swap.target. Apr 12 18:52:27.341604 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Apr 12 18:52:27.341802 systemd[1]: Stopped dracut-pre-mount.service. Apr 12 18:52:27.349804 systemd[1]: Stopped target cryptsetup.target. Apr 12 18:52:27.379284 systemd[1]: dracut-initqueue.service: Deactivated successfully. Apr 12 18:52:27.379487 systemd[1]: Stopped dracut-initqueue.service. Apr 12 18:52:27.396000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.401404 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Apr 12 18:52:27.410531 kernel: audit: type=1131 audit(1712947947.396:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.401633 systemd[1]: Stopped ignition-fetch-offline.service. Apr 12 18:52:27.407656 systemd[1]: Stopped target paths.target. Apr 12 18:52:27.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.432000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.408841 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Apr 12 18:52:27.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.482322 iscsid[710]: iscsid shutting down. Apr 12 18:52:27.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.412273 systemd[1]: Stopped systemd-ask-password-console.path. Apr 12 18:52:27.484000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.420412 systemd[1]: Stopped target slices.target. Apr 12 18:52:27.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.493498 ignition[880]: INFO : Ignition 2.14.0 Apr 12 18:52:27.493498 ignition[880]: INFO : Stage: umount Apr 12 18:52:27.493498 ignition[880]: INFO : no configs at "/usr/lib/ignition/base.d" Apr 12 18:52:27.493498 ignition[880]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Apr 12 18:52:27.493498 ignition[880]: INFO : umount: umount passed Apr 12 18:52:27.493498 ignition[880]: INFO : Ignition finished successfully Apr 12 18:52:27.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.511000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.518000 audit: BPF prog-id=6 op=UNLOAD Apr 12 18:52:27.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.420596 systemd[1]: Stopped target sockets.target. Apr 12 18:52:27.420778 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Apr 12 18:52:27.420959 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Apr 12 18:52:27.421170 systemd[1]: ignition-files.service: Deactivated successfully. Apr 12 18:52:27.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.562000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.421323 systemd[1]: Stopped ignition-files.service. Apr 12 18:52:27.423265 systemd[1]: Stopping ignition-mount.service... Apr 12 18:52:27.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.423507 systemd[1]: Stopping iscsid.service... Apr 12 18:52:27.424364 systemd[1]: Stopping sysroot-boot.service... Apr 12 18:52:27.424432 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Apr 12 18:52:27.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.424557 systemd[1]: Stopped systemd-udev-trigger.service. Apr 12 18:52:27.424760 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Apr 12 18:52:27.424869 systemd[1]: Stopped dracut-pre-trigger.service. Apr 12 18:52:27.430243 systemd[1]: iscsid.service: Deactivated successfully. Apr 12 18:52:27.430388 systemd[1]: Stopped iscsid.service. Apr 12 18:52:27.433403 systemd[1]: iscsid.socket: Deactivated successfully. Apr 12 18:52:27.433501 systemd[1]: Closed iscsid.socket. Apr 12 18:52:27.608000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.436500 systemd[1]: Stopping iscsiuio.service... Apr 12 18:52:27.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.436791 systemd[1]: iscsiuio.service: Deactivated successfully. Apr 12 18:52:27.621000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.436905 systemd[1]: Stopped iscsiuio.service. Apr 12 18:52:27.437911 systemd[1]: Stopped target network.target. Apr 12 18:52:27.437979 systemd[1]: iscsiuio.socket: Deactivated successfully. Apr 12 18:52:27.438038 systemd[1]: Closed iscsiuio.socket. Apr 12 18:52:27.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.438216 systemd[1]: Stopping systemd-networkd.service... Apr 12 18:52:27.438408 systemd[1]: Stopping systemd-resolved.service... Apr 12 18:52:27.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.448689 systemd[1]: initrd-cleanup.service: Deactivated successfully. Apr 12 18:52:27.448789 systemd[1]: Finished initrd-cleanup.service. Apr 12 18:52:27.459505 systemd[1]: systemd-resolved.service: Deactivated successfully. Apr 12 18:52:27.459628 systemd[1]: Stopped systemd-resolved.service. Apr 12 18:52:27.469637 systemd[1]: ignition-mount.service: Deactivated successfully. Apr 12 18:52:27.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.469748 systemd[1]: Stopped ignition-mount.service. Apr 12 18:52:27.471973 systemd[1]: ignition-disks.service: Deactivated successfully. Apr 12 18:52:27.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:27.472038 systemd[1]: Stopped ignition-disks.service. Apr 12 18:52:27.482527 systemd[1]: ignition-kargs.service: Deactivated successfully. Apr 12 18:52:27.482614 systemd[1]: Stopped ignition-kargs.service. Apr 12 18:52:27.484825 systemd[1]: ignition-setup.service: Deactivated successfully. Apr 12 18:52:27.484882 systemd[1]: Stopped ignition-setup.service. Apr 12 18:52:27.486751 systemd-networkd[700]: eth0: DHCPv6 lease lost Apr 12 18:52:27.695000 audit: BPF prog-id=9 op=UNLOAD Apr 12 18:52:27.489388 systemd[1]: sysroot-boot.mount: Deactivated successfully. Apr 12 18:52:27.500041 systemd[1]: systemd-networkd.service: Deactivated successfully. Apr 12 18:52:27.500197 systemd[1]: Stopped systemd-networkd.service. Apr 12 18:52:27.506478 systemd[1]: sysroot-boot.service: Deactivated successfully. Apr 12 18:52:27.506593 systemd[1]: Stopped sysroot-boot.service. Apr 12 18:52:27.514862 systemd[1]: systemd-networkd.socket: Deactivated successfully. Apr 12 18:52:27.514911 systemd[1]: Closed systemd-networkd.socket. Apr 12 18:52:27.515982 systemd[1]: initrd-setup-root.service: Deactivated successfully. Apr 12 18:52:27.516045 systemd[1]: Stopped initrd-setup-root.service. Apr 12 18:52:27.524137 systemd[1]: Stopping network-cleanup.service... Apr 12 18:52:27.556543 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Apr 12 18:52:27.556660 systemd[1]: Stopped parse-ip-for-networkd.service. Apr 12 18:52:27.561011 systemd[1]: systemd-sysctl.service: Deactivated successfully. Apr 12 18:52:27.561087 systemd[1]: Stopped systemd-sysctl.service. Apr 12 18:52:27.565574 systemd[1]: systemd-modules-load.service: Deactivated successfully. Apr 12 18:52:27.565638 systemd[1]: Stopped systemd-modules-load.service. Apr 12 18:52:27.566926 systemd[1]: Stopping systemd-udevd.service... Apr 12 18:52:27.585323 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Apr 12 18:52:27.745358 systemd-journald[197]: Received SIGTERM from PID 1 (n/a). Apr 12 18:52:27.588297 systemd[1]: systemd-udevd.service: Deactivated successfully. Apr 12 18:52:27.588454 systemd[1]: Stopped systemd-udevd.service. Apr 12 18:52:27.592290 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Apr 12 18:52:27.592331 systemd[1]: Closed systemd-udevd-control.socket. Apr 12 18:52:27.606606 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Apr 12 18:52:27.606676 systemd[1]: Closed systemd-udevd-kernel.socket. Apr 12 18:52:27.607953 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Apr 12 18:52:27.608032 systemd[1]: Stopped dracut-pre-udev.service. Apr 12 18:52:27.609255 systemd[1]: dracut-cmdline.service: Deactivated successfully. Apr 12 18:52:27.609310 systemd[1]: Stopped dracut-cmdline.service. Apr 12 18:52:27.610528 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Apr 12 18:52:27.611722 systemd[1]: Stopped dracut-cmdline-ask.service. Apr 12 18:52:27.615476 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Apr 12 18:52:27.616661 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Apr 12 18:52:27.616734 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Apr 12 18:52:27.625023 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Apr 12 18:52:27.625121 systemd[1]: Stopped kmod-static-nodes.service. Apr 12 18:52:27.627834 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Apr 12 18:52:27.627924 systemd[1]: Stopped systemd-vconsole-setup.service. Apr 12 18:52:27.638660 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Apr 12 18:52:27.651706 systemd[1]: network-cleanup.service: Deactivated successfully. Apr 12 18:52:27.651856 systemd[1]: Stopped network-cleanup.service. Apr 12 18:52:27.659525 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Apr 12 18:52:27.659661 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Apr 12 18:52:27.663612 systemd[1]: Reached target initrd-switch-root.target. Apr 12 18:52:27.678904 systemd[1]: Starting initrd-switch-root.service... Apr 12 18:52:27.715201 systemd[1]: Switching root. Apr 12 18:52:27.761728 systemd-journald[197]: Journal stopped Apr 12 18:52:36.883399 kernel: SELinux: Class mctp_socket not defined in policy. Apr 12 18:52:36.883487 kernel: SELinux: Class anon_inode not defined in policy. Apr 12 18:52:36.883507 kernel: SELinux: the above unknown classes and permissions will be allowed Apr 12 18:52:36.883523 kernel: SELinux: policy capability network_peer_controls=1 Apr 12 18:52:36.883547 kernel: SELinux: policy capability open_perms=1 Apr 12 18:52:36.883561 kernel: SELinux: policy capability extended_socket_class=1 Apr 12 18:52:36.883579 kernel: SELinux: policy capability always_check_network=0 Apr 12 18:52:36.883594 kernel: SELinux: policy capability cgroup_seclabel=1 Apr 12 18:52:36.883607 kernel: SELinux: policy capability nnp_nosuid_transition=1 Apr 12 18:52:36.883632 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Apr 12 18:52:36.883656 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Apr 12 18:52:36.883677 systemd[1]: Successfully loaded SELinux policy in 78.615ms. Apr 12 18:52:36.883706 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 14.857ms. Apr 12 18:52:36.883735 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Apr 12 18:52:36.883752 systemd[1]: Detected virtualization kvm. Apr 12 18:52:36.883767 systemd[1]: Detected architecture x86-64. Apr 12 18:52:36.883782 systemd[1]: Detected first boot. Apr 12 18:52:36.883807 systemd[1]: Initializing machine ID from VM UUID. Apr 12 18:52:36.883821 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Apr 12 18:52:36.883835 systemd[1]: Populated /etc with preset unit settings. Apr 12 18:52:36.883848 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:52:36.883862 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:52:36.883882 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:52:36.883902 kernel: kauditd_printk_skb: 48 callbacks suppressed Apr 12 18:52:36.883915 kernel: audit: type=1334 audit(1712947956.531:82): prog-id=12 op=LOAD Apr 12 18:52:36.883938 kernel: audit: type=1334 audit(1712947956.531:83): prog-id=3 op=UNLOAD Apr 12 18:52:36.883954 kernel: audit: type=1334 audit(1712947956.534:84): prog-id=13 op=LOAD Apr 12 18:52:36.883967 kernel: audit: type=1334 audit(1712947956.536:85): prog-id=14 op=LOAD Apr 12 18:52:36.883979 kernel: audit: type=1334 audit(1712947956.536:86): prog-id=4 op=UNLOAD Apr 12 18:52:36.883991 kernel: audit: type=1334 audit(1712947956.537:87): prog-id=5 op=UNLOAD Apr 12 18:52:36.884005 kernel: audit: type=1131 audit(1712947956.539:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.884018 systemd[1]: initrd-switch-root.service: Deactivated successfully. Apr 12 18:52:36.884033 systemd[1]: Stopped initrd-switch-root.service. Apr 12 18:52:36.884058 kernel: audit: type=1130 audit(1712947956.551:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.884073 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Apr 12 18:52:36.884088 kernel: audit: type=1131 audit(1712947956.551:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.884102 systemd[1]: Created slice system-addon\x2dconfig.slice. Apr 12 18:52:36.884116 systemd[1]: Created slice system-addon\x2drun.slice. Apr 12 18:52:36.884131 systemd[1]: Created slice system-getty.slice. Apr 12 18:52:36.884146 kernel: audit: type=1334 audit(1712947956.579:91): prog-id=12 op=UNLOAD Apr 12 18:52:36.884161 systemd[1]: Created slice system-modprobe.slice. Apr 12 18:52:36.884202 systemd[1]: Created slice system-serial\x2dgetty.slice. Apr 12 18:52:36.884217 systemd[1]: Created slice system-system\x2dcloudinit.slice. Apr 12 18:52:36.884232 systemd[1]: Created slice system-systemd\x2dfsck.slice. Apr 12 18:52:36.884246 systemd[1]: Created slice user.slice. Apr 12 18:52:36.884261 systemd[1]: Started systemd-ask-password-console.path. Apr 12 18:52:36.884275 systemd[1]: Started systemd-ask-password-wall.path. Apr 12 18:52:36.884290 systemd[1]: Set up automount boot.automount. Apr 12 18:52:36.884305 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Apr 12 18:52:36.884330 systemd[1]: Stopped target initrd-switch-root.target. Apr 12 18:52:36.884348 systemd[1]: Stopped target initrd-fs.target. Apr 12 18:52:36.884362 systemd[1]: Stopped target initrd-root-fs.target. Apr 12 18:52:36.884376 systemd[1]: Reached target integritysetup.target. Apr 12 18:52:36.884412 systemd[1]: Reached target remote-cryptsetup.target. Apr 12 18:52:36.884434 systemd[1]: Reached target remote-fs.target. Apr 12 18:52:36.884450 systemd[1]: Reached target slices.target. Apr 12 18:52:36.884465 systemd[1]: Reached target swap.target. Apr 12 18:52:36.884483 systemd[1]: Reached target torcx.target. Apr 12 18:52:36.884500 systemd[1]: Reached target veritysetup.target. Apr 12 18:52:36.884519 systemd[1]: Listening on systemd-coredump.socket. Apr 12 18:52:36.884537 systemd[1]: Listening on systemd-initctl.socket. Apr 12 18:52:36.884553 systemd[1]: Listening on systemd-networkd.socket. Apr 12 18:52:36.884569 systemd[1]: Listening on systemd-udevd-control.socket. Apr 12 18:52:36.884598 systemd[1]: Listening on systemd-udevd-kernel.socket. Apr 12 18:52:36.884614 systemd[1]: Listening on systemd-userdbd.socket. Apr 12 18:52:36.884629 systemd[1]: Mounting dev-hugepages.mount... Apr 12 18:52:36.884643 systemd[1]: Mounting dev-mqueue.mount... Apr 12 18:52:36.884657 systemd[1]: Mounting media.mount... Apr 12 18:52:36.884672 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Apr 12 18:52:36.884687 systemd[1]: Mounting sys-kernel-debug.mount... Apr 12 18:52:36.884702 systemd[1]: Mounting sys-kernel-tracing.mount... Apr 12 18:52:36.884717 systemd[1]: Mounting tmp.mount... Apr 12 18:52:36.884752 systemd[1]: Starting flatcar-tmpfiles.service... Apr 12 18:52:36.884767 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Apr 12 18:52:36.884782 systemd[1]: Starting kmod-static-nodes.service... Apr 12 18:52:36.884796 systemd[1]: Starting modprobe@configfs.service... Apr 12 18:52:36.884810 systemd[1]: Starting modprobe@dm_mod.service... Apr 12 18:52:36.884824 systemd[1]: Starting modprobe@drm.service... Apr 12 18:52:36.884845 systemd[1]: Starting modprobe@efi_pstore.service... Apr 12 18:52:36.884860 systemd[1]: Starting modprobe@fuse.service... Apr 12 18:52:36.884876 systemd[1]: Starting modprobe@loop.service... Apr 12 18:52:36.884906 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Apr 12 18:52:36.884926 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Apr 12 18:52:36.884942 systemd[1]: Stopped systemd-fsck-root.service. Apr 12 18:52:36.884959 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Apr 12 18:52:36.884975 systemd[1]: Stopped systemd-fsck-usr.service. Apr 12 18:52:36.884991 kernel: fuse: init (API version 7.34) Apr 12 18:52:36.885006 systemd[1]: Stopped systemd-journald.service. Apr 12 18:52:36.885021 systemd[1]: Starting systemd-journald.service... Apr 12 18:52:36.885035 kernel: loop: module loaded Apr 12 18:52:36.885060 systemd[1]: Starting systemd-modules-load.service... Apr 12 18:52:36.885075 systemd[1]: Starting systemd-network-generator.service... Apr 12 18:52:36.885089 systemd[1]: Starting systemd-remount-fs.service... Apr 12 18:52:36.885103 systemd[1]: Starting systemd-udev-trigger.service... Apr 12 18:52:36.885117 systemd[1]: verity-setup.service: Deactivated successfully. Apr 12 18:52:36.885132 systemd[1]: Stopped verity-setup.service. Apr 12 18:52:36.885148 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Apr 12 18:52:36.885163 systemd[1]: Mounted dev-hugepages.mount. Apr 12 18:52:36.885193 systemd[1]: Mounted dev-mqueue.mount. Apr 12 18:52:36.885227 systemd-journald[1051]: Journal started Apr 12 18:52:36.885296 systemd-journald[1051]: Runtime Journal (/run/log/journal/5676d36d41724972a95c3aea3d4d5bd5) is 6.0M, max 48.4M, 42.4M free. Apr 12 18:52:27.933000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Apr 12 18:52:28.326000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Apr 12 18:52:28.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Apr 12 18:52:28.335000 audit: BPF prog-id=10 op=LOAD Apr 12 18:52:28.336000 audit: BPF prog-id=10 op=UNLOAD Apr 12 18:52:28.339000 audit: BPF prog-id=11 op=LOAD Apr 12 18:52:28.340000 audit: BPF prog-id=11 op=UNLOAD Apr 12 18:52:28.548000 audit[966]: AVC avc: denied { associate } for pid=966 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Apr 12 18:52:28.548000 audit[966]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00018e7c2 a1=c000192a68 a2=c000194cc0 a3=32 items=0 ppid=949 pid=966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:28.548000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Apr 12 18:52:28.550000 audit[966]: AVC avc: denied { associate } for pid=966 comm="torcx-generator" name="usr" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Apr 12 18:52:28.550000 audit[966]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00018e899 a2=1ed a3=0 items=2 ppid=949 pid=966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:28.550000 audit: CWD cwd="/" Apr 12 18:52:28.550000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:28.550000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:28.550000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Apr 12 18:52:36.531000 audit: BPF prog-id=12 op=LOAD Apr 12 18:52:36.531000 audit: BPF prog-id=3 op=UNLOAD Apr 12 18:52:36.534000 audit: BPF prog-id=13 op=LOAD Apr 12 18:52:36.536000 audit: BPF prog-id=14 op=LOAD Apr 12 18:52:36.536000 audit: BPF prog-id=4 op=UNLOAD Apr 12 18:52:36.537000 audit: BPF prog-id=5 op=UNLOAD Apr 12 18:52:36.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.551000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.579000 audit: BPF prog-id=12 op=UNLOAD Apr 12 18:52:36.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.733000 audit: BPF prog-id=15 op=LOAD Apr 12 18:52:36.734000 audit: BPF prog-id=16 op=LOAD Apr 12 18:52:36.735000 audit: BPF prog-id=17 op=LOAD Apr 12 18:52:36.735000 audit: BPF prog-id=13 op=UNLOAD Apr 12 18:52:36.735000 audit: BPF prog-id=14 op=UNLOAD Apr 12 18:52:36.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.880000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Apr 12 18:52:36.880000 audit[1051]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffe543f43d0 a2=4000 a3=7ffe543f446c items=0 ppid=1 pid=1051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:36.880000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Apr 12 18:52:36.526420 systemd[1]: Queued start job for default target multi-user.target. Apr 12 18:52:28.535374 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:52:36.526441 systemd[1]: Unnecessary job was removed for dev-vda6.device. Apr 12 18:52:28.539300 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Apr 12 18:52:36.538750 systemd[1]: systemd-journald.service: Deactivated successfully. Apr 12 18:52:28.539331 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Apr 12 18:52:28.539378 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Apr 12 18:52:36.887889 systemd[1]: Started systemd-journald.service. Apr 12 18:52:28.539391 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="skipped missing lower profile" missing profile=oem Apr 12 18:52:28.539440 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Apr 12 18:52:28.539459 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Apr 12 18:52:36.887000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:28.539724 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Apr 12 18:52:28.539768 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Apr 12 18:52:28.539784 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Apr 12 18:52:28.542999 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Apr 12 18:52:28.543064 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Apr 12 18:52:36.888702 systemd[1]: Mounted media.mount. Apr 12 18:52:28.543098 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.3: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.3 Apr 12 18:52:28.543118 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Apr 12 18:52:28.543142 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.3: no such file or directory" path=/var/lib/torcx/store/3510.3.3 Apr 12 18:52:28.543159 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:28Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Apr 12 18:52:36.039090 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:36Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:52:36.039500 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:36Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:52:36.039635 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:36Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:52:36.039899 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:36Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Apr 12 18:52:36.039975 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:36Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Apr 12 18:52:36.040073 /usr/lib/systemd/system-generators/torcx-generator[966]: time="2024-04-12T18:52:36Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Apr 12 18:52:36.890169 systemd[1]: Mounted sys-kernel-debug.mount. Apr 12 18:52:36.891468 systemd[1]: Mounted sys-kernel-tracing.mount. Apr 12 18:52:36.892878 systemd[1]: Mounted tmp.mount. Apr 12 18:52:36.894269 systemd[1]: Finished flatcar-tmpfiles.service. Apr 12 18:52:36.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.895906 systemd[1]: Finished kmod-static-nodes.service. Apr 12 18:52:36.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.897520 systemd[1]: modprobe@configfs.service: Deactivated successfully. Apr 12 18:52:36.897771 systemd[1]: Finished modprobe@configfs.service. Apr 12 18:52:36.898000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.899362 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Apr 12 18:52:36.899616 systemd[1]: Finished modprobe@dm_mod.service. Apr 12 18:52:36.900000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.901276 systemd[1]: modprobe@drm.service: Deactivated successfully. Apr 12 18:52:36.901596 systemd[1]: Finished modprobe@drm.service. Apr 12 18:52:36.902000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.903081 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Apr 12 18:52:36.903329 systemd[1]: Finished modprobe@efi_pstore.service. Apr 12 18:52:36.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.904000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.905157 systemd[1]: modprobe@fuse.service: Deactivated successfully. Apr 12 18:52:36.905363 systemd[1]: Finished modprobe@fuse.service. Apr 12 18:52:36.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.906860 systemd[1]: modprobe@loop.service: Deactivated successfully. Apr 12 18:52:36.907089 systemd[1]: Finished modprobe@loop.service. Apr 12 18:52:36.908000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.908000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.908754 systemd[1]: Finished systemd-modules-load.service. Apr 12 18:52:36.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.910716 systemd[1]: Finished systemd-network-generator.service. Apr 12 18:52:36.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.912455 systemd[1]: Finished systemd-remount-fs.service. Apr 12 18:52:36.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.914562 systemd[1]: Reached target network-pre.target. Apr 12 18:52:36.917762 systemd[1]: Mounting sys-fs-fuse-connections.mount... Apr 12 18:52:36.920794 systemd[1]: Mounting sys-kernel-config.mount... Apr 12 18:52:36.922231 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Apr 12 18:52:36.928444 systemd[1]: Starting systemd-hwdb-update.service... Apr 12 18:52:36.934475 systemd[1]: Starting systemd-journal-flush.service... Apr 12 18:52:36.936115 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Apr 12 18:52:36.937858 systemd[1]: Starting systemd-random-seed.service... Apr 12 18:52:36.942453 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Apr 12 18:52:36.943105 systemd-journald[1051]: Time spent on flushing to /var/log/journal/5676d36d41724972a95c3aea3d4d5bd5 is 42.218ms for 1215 entries. Apr 12 18:52:36.943105 systemd-journald[1051]: System Journal (/var/log/journal/5676d36d41724972a95c3aea3d4d5bd5) is 8.0M, max 195.6M, 187.6M free. Apr 12 18:52:37.024564 systemd-journald[1051]: Received client request to flush runtime journal. Apr 12 18:52:36.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.978000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.994000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:37.010000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:36.944619 systemd[1]: Starting systemd-sysctl.service... Apr 12 18:52:36.961303 systemd[1]: Starting systemd-sysusers.service... Apr 12 18:52:36.969322 systemd[1]: Finished systemd-udev-trigger.service. Apr 12 18:52:37.025833 udevadm[1070]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Apr 12 18:52:36.970773 systemd[1]: Mounted sys-fs-fuse-connections.mount. Apr 12 18:52:36.972051 systemd[1]: Mounted sys-kernel-config.mount. Apr 12 18:52:36.975245 systemd[1]: Finished systemd-random-seed.service. Apr 12 18:52:36.978695 systemd[1]: Reached target first-boot-complete.target. Apr 12 18:52:36.982646 systemd[1]: Starting systemd-udev-settle.service... Apr 12 18:52:36.992900 systemd[1]: Finished systemd-sysctl.service. Apr 12 18:52:37.007840 systemd[1]: Finished systemd-sysusers.service. Apr 12 18:52:37.012033 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Apr 12 18:52:37.025943 systemd[1]: Finished systemd-journal-flush.service. Apr 12 18:52:37.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:37.061038 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Apr 12 18:52:37.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:37.730688 systemd[1]: Finished systemd-hwdb-update.service. Apr 12 18:52:37.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:37.737000 audit: BPF prog-id=18 op=LOAD Apr 12 18:52:37.740000 audit: BPF prog-id=19 op=LOAD Apr 12 18:52:37.741000 audit: BPF prog-id=7 op=UNLOAD Apr 12 18:52:37.745000 audit: BPF prog-id=8 op=UNLOAD Apr 12 18:52:37.749403 systemd[1]: Starting systemd-udevd.service... Apr 12 18:52:37.808404 systemd-udevd[1074]: Using default interface naming scheme 'v252'. Apr 12 18:52:37.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:37.917248 systemd[1]: Started systemd-udevd.service. Apr 12 18:52:37.932000 audit: BPF prog-id=20 op=LOAD Apr 12 18:52:37.933761 systemd[1]: Starting systemd-networkd.service... Apr 12 18:52:37.976000 audit: BPF prog-id=21 op=LOAD Apr 12 18:52:37.982000 audit: BPF prog-id=22 op=LOAD Apr 12 18:52:37.985000 audit: BPF prog-id=23 op=LOAD Apr 12 18:52:37.987971 systemd[1]: Starting systemd-userdbd.service... Apr 12 18:52:38.014252 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Apr 12 18:52:38.085234 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Apr 12 18:52:38.091270 kernel: ACPI: button: Power Button [PWRF] Apr 12 18:52:38.093135 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Apr 12 18:52:38.122704 systemd[1]: Started systemd-userdbd.service. Apr 12 18:52:38.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:38.122000 audit[1090]: AVC avc: denied { confidentiality } for pid=1090 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Apr 12 18:52:38.122000 audit[1090]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55a44f66f7d0 a1=32194 a2=7fb417becbc5 a3=5 items=108 ppid=1074 pid=1090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:38.122000 audit: CWD cwd="/" Apr 12 18:52:38.122000 audit: PATH item=0 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=1 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=2 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=3 name=(null) inode=13796 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=4 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=5 name=(null) inode=13797 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=6 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=7 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=8 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=9 name=(null) inode=13799 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=10 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=11 name=(null) inode=13800 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=12 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=13 name=(null) inode=13801 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=14 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=15 name=(null) inode=13802 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=16 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=17 name=(null) inode=13803 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=18 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=19 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=20 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=21 name=(null) inode=13805 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=22 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=23 name=(null) inode=13806 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=24 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=25 name=(null) inode=13807 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=26 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=27 name=(null) inode=13808 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=28 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=29 name=(null) inode=13809 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=30 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=31 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=32 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=33 name=(null) inode=13811 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=34 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=35 name=(null) inode=13812 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=36 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=37 name=(null) inode=13813 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=38 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=39 name=(null) inode=13814 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=40 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=41 name=(null) inode=13815 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=42 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=43 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=44 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=45 name=(null) inode=13817 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=46 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=47 name=(null) inode=13818 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=48 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=49 name=(null) inode=13819 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=50 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=51 name=(null) inode=13820 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=52 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=53 name=(null) inode=13821 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=54 name=(null) inode=1041 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=55 name=(null) inode=13822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=56 name=(null) inode=13822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=57 name=(null) inode=13823 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=58 name=(null) inode=13822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=59 name=(null) inode=13824 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=60 name=(null) inode=13822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=61 name=(null) inode=13825 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=62 name=(null) inode=13825 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=63 name=(null) inode=13826 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=64 name=(null) inode=13825 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=65 name=(null) inode=13827 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=66 name=(null) inode=13825 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=67 name=(null) inode=13828 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=68 name=(null) inode=13825 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=69 name=(null) inode=13829 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=70 name=(null) inode=13825 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=71 name=(null) inode=13830 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=72 name=(null) inode=13822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=73 name=(null) inode=13831 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=74 name=(null) inode=13831 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=75 name=(null) inode=13832 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=76 name=(null) inode=13831 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=77 name=(null) inode=13833 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=78 name=(null) inode=13831 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=79 name=(null) inode=13834 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=80 name=(null) inode=13831 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=81 name=(null) inode=13835 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=82 name=(null) inode=13831 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=83 name=(null) inode=13836 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=84 name=(null) inode=13822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=85 name=(null) inode=13837 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=86 name=(null) inode=13837 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=87 name=(null) inode=13838 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=88 name=(null) inode=13837 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=89 name=(null) inode=13839 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=90 name=(null) inode=13837 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=91 name=(null) inode=13840 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=92 name=(null) inode=13837 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=93 name=(null) inode=13841 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=94 name=(null) inode=13837 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=95 name=(null) inode=13842 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=96 name=(null) inode=13822 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=97 name=(null) inode=13843 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=98 name=(null) inode=13843 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=99 name=(null) inode=13844 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=100 name=(null) inode=13843 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=101 name=(null) inode=13845 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=102 name=(null) inode=13843 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=103 name=(null) inode=13846 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=104 name=(null) inode=13843 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=105 name=(null) inode=13847 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=106 name=(null) inode=13843 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PATH item=107 name=(null) inode=13848 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:52:38.122000 audit: PROCTITLE proctitle="(udev-worker)" Apr 12 18:52:38.154839 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 0 Apr 12 18:52:38.222218 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Apr 12 18:52:38.228220 kernel: mousedev: PS/2 mouse device common for all mice Apr 12 18:52:38.267265 systemd-networkd[1082]: lo: Link UP Apr 12 18:52:38.267297 systemd-networkd[1082]: lo: Gained carrier Apr 12 18:52:38.267950 systemd-networkd[1082]: Enumeration completed Apr 12 18:52:38.268165 systemd[1]: Started systemd-networkd.service. Apr 12 18:52:38.268201 systemd-networkd[1082]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Apr 12 18:52:38.272523 systemd-networkd[1082]: eth0: Link UP Apr 12 18:52:38.272546 systemd-networkd[1082]: eth0: Gained carrier Apr 12 18:52:38.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:38.362740 kernel: kvm: Nested Virtualization enabled Apr 12 18:52:38.362897 kernel: SVM: kvm: Nested Paging enabled Apr 12 18:52:38.362950 kernel: SVM: Virtual VMLOAD VMSAVE supported Apr 12 18:52:38.362972 kernel: SVM: Virtual GIF supported Apr 12 18:52:38.467994 systemd-networkd[1082]: eth0: DHCPv4 address 10.0.0.120/16, gateway 10.0.0.1 acquired from 10.0.0.1 Apr 12 18:52:38.518054 kernel: EDAC MC: Ver: 3.0.0 Apr 12 18:52:38.558901 systemd[1]: Finished systemd-udev-settle.service. Apr 12 18:52:38.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:38.563335 systemd[1]: Starting lvm2-activation-early.service... Apr 12 18:52:38.590590 lvm[1111]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Apr 12 18:52:38.632272 systemd[1]: Finished lvm2-activation-early.service. Apr 12 18:52:38.633695 systemd[1]: Reached target cryptsetup.target. Apr 12 18:52:38.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:38.636408 systemd[1]: Starting lvm2-activation.service... Apr 12 18:52:38.649338 lvm[1112]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Apr 12 18:52:38.687637 systemd[1]: Finished lvm2-activation.service. Apr 12 18:52:38.688996 systemd[1]: Reached target local-fs-pre.target. Apr 12 18:52:38.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:38.693243 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Apr 12 18:52:38.693303 systemd[1]: Reached target local-fs.target. Apr 12 18:52:38.694706 systemd[1]: Reached target machines.target. Apr 12 18:52:38.697509 systemd[1]: Starting ldconfig.service... Apr 12 18:52:38.704108 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Apr 12 18:52:38.704411 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Apr 12 18:52:38.718595 systemd[1]: Starting systemd-boot-update.service... Apr 12 18:52:38.729110 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Apr 12 18:52:38.762885 systemd[1]: Starting systemd-machine-id-commit.service... Apr 12 18:52:38.763176 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Apr 12 18:52:38.763266 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Apr 12 18:52:38.767328 systemd[1]: Starting systemd-tmpfiles-setup.service... Apr 12 18:52:38.769315 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1114 (bootctl) Apr 12 18:52:38.771261 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Apr 12 18:52:38.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:38.816865 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Apr 12 18:52:38.821090 systemd-tmpfiles[1118]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Apr 12 18:52:38.824986 systemd-tmpfiles[1118]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Apr 12 18:52:38.826656 systemd-tmpfiles[1118]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Apr 12 18:52:39.568715 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Apr 12 18:52:39.569540 systemd[1]: Finished systemd-machine-id-commit.service. Apr 12 18:52:39.574000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:39.585346 systemd-networkd[1082]: eth0: Gained IPv6LL Apr 12 18:52:39.624006 systemd-fsck[1122]: fsck.fat 4.2 (2021-01-31) Apr 12 18:52:39.624006 systemd-fsck[1122]: /dev/vda1: 790 files, 119263/258078 clusters Apr 12 18:52:39.625745 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Apr 12 18:52:39.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:39.629614 systemd[1]: Mounting boot.mount... Apr 12 18:52:39.652170 systemd[1]: Mounted boot.mount. Apr 12 18:52:39.674043 systemd[1]: Finished systemd-boot-update.service. Apr 12 18:52:39.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:39.829128 systemd[1]: Finished systemd-tmpfiles-setup.service. Apr 12 18:52:39.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:39.839764 systemd[1]: Starting audit-rules.service... Apr 12 18:52:39.846981 systemd[1]: Starting clean-ca-certificates.service... Apr 12 18:52:39.857968 systemd[1]: Starting systemd-journal-catalog-update.service... Apr 12 18:52:39.876000 audit: BPF prog-id=24 op=LOAD Apr 12 18:52:39.885564 systemd[1]: Starting systemd-resolved.service... Apr 12 18:52:39.896000 audit: BPF prog-id=25 op=LOAD Apr 12 18:52:39.898843 systemd[1]: Starting systemd-timesyncd.service... Apr 12 18:52:39.906565 systemd[1]: Starting systemd-update-utmp.service... Apr 12 18:52:39.909000 audit[1139]: SYSTEM_BOOT pid=1139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Apr 12 18:52:39.911896 systemd[1]: Finished clean-ca-certificates.service. Apr 12 18:52:39.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:39.917694 systemd[1]: Finished systemd-journal-catalog-update.service. Apr 12 18:52:39.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:39.925049 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Apr 12 18:52:39.926921 systemd[1]: Finished systemd-update-utmp.service. Apr 12 18:52:39.929000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:39.957981 augenrules[1145]: No rules Apr 12 18:52:39.957000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Apr 12 18:52:39.957000 audit[1145]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd11885720 a2=420 a3=0 items=0 ppid=1125 pid=1145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:39.957000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Apr 12 18:52:39.959755 systemd[1]: Finished audit-rules.service. Apr 12 18:52:40.023650 systemd[1]: Started systemd-timesyncd.service. Apr 12 18:52:40.025030 systemd[1]: Reached target time-set.target. Apr 12 18:52:40.896723 systemd-timesyncd[1137]: Contacted time server 10.0.0.1:123 (10.0.0.1). Apr 12 18:52:40.897242 systemd-timesyncd[1137]: Initial clock synchronization to Fri 2024-04-12 18:52:40.896561 UTC. Apr 12 18:52:40.909796 ldconfig[1113]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Apr 12 18:52:40.927662 systemd-resolved[1134]: Positive Trust Anchors: Apr 12 18:52:40.927694 systemd-resolved[1134]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Apr 12 18:52:40.927732 systemd-resolved[1134]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Apr 12 18:52:40.930720 systemd[1]: Finished ldconfig.service. Apr 12 18:52:40.956206 systemd[1]: Starting systemd-update-done.service... Apr 12 18:52:40.974688 systemd-resolved[1134]: Defaulting to hostname 'linux'. Apr 12 18:52:40.996216 systemd[1]: Started systemd-resolved.service. Apr 12 18:52:40.999687 systemd[1]: Finished systemd-update-done.service. Apr 12 18:52:41.001328 systemd[1]: Reached target network.target. Apr 12 18:52:41.003790 systemd[1]: Reached target nss-lookup.target. Apr 12 18:52:41.008796 systemd[1]: Reached target sysinit.target. Apr 12 18:52:41.012227 systemd[1]: Started motdgen.path. Apr 12 18:52:41.013361 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Apr 12 18:52:41.015301 systemd[1]: Started logrotate.timer. Apr 12 18:52:41.018185 systemd[1]: Started mdadm.timer. Apr 12 18:52:41.019267 systemd[1]: Started systemd-tmpfiles-clean.timer. Apr 12 18:52:41.020658 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Apr 12 18:52:41.020703 systemd[1]: Reached target paths.target. Apr 12 18:52:41.023030 systemd[1]: Reached target timers.target. Apr 12 18:52:41.024709 systemd[1]: Listening on dbus.socket. Apr 12 18:52:41.028932 systemd[1]: Starting docker.socket... Apr 12 18:52:41.038504 systemd[1]: Listening on sshd.socket. Apr 12 18:52:41.039836 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Apr 12 18:52:41.040497 systemd[1]: Listening on docker.socket. Apr 12 18:52:41.043154 systemd[1]: Reached target sockets.target. Apr 12 18:52:41.044380 systemd[1]: Reached target basic.target. Apr 12 18:52:41.047171 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Apr 12 18:52:41.047221 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Apr 12 18:52:41.048825 systemd[1]: Starting containerd.service... Apr 12 18:52:41.054825 systemd[1]: Starting dbus.service... Apr 12 18:52:41.061735 systemd[1]: Starting enable-oem-cloudinit.service... Apr 12 18:52:41.068101 systemd[1]: Starting extend-filesystems.service... Apr 12 18:52:41.070838 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Apr 12 18:52:41.075074 systemd[1]: Starting motdgen.service... Apr 12 18:52:41.076635 jq[1156]: false Apr 12 18:52:41.080618 systemd[1]: Starting prepare-cni-plugins.service... Apr 12 18:52:41.087615 systemd[1]: Starting prepare-critools.service... Apr 12 18:52:41.092149 systemd[1]: Starting prepare-helm.service... Apr 12 18:52:41.103172 systemd[1]: Starting ssh-key-proc-cmdline.service... Apr 12 18:52:41.106460 systemd[1]: Starting sshd-keygen.service... Apr 12 18:52:41.110510 systemd[1]: Starting systemd-logind.service... Apr 12 18:52:41.113093 extend-filesystems[1157]: Found sr0 Apr 12 18:52:41.113093 extend-filesystems[1157]: Found vda Apr 12 18:52:41.113093 extend-filesystems[1157]: Found vda1 Apr 12 18:52:41.113093 extend-filesystems[1157]: Found vda2 Apr 12 18:52:41.113093 extend-filesystems[1157]: Found vda3 Apr 12 18:52:41.113093 extend-filesystems[1157]: Found usr Apr 12 18:52:41.113093 extend-filesystems[1157]: Found vda4 Apr 12 18:52:41.113093 extend-filesystems[1157]: Found vda6 Apr 12 18:52:41.113093 extend-filesystems[1157]: Found vda7 Apr 12 18:52:41.113093 extend-filesystems[1157]: Found vda9 Apr 12 18:52:41.113093 extend-filesystems[1157]: Checking size of /dev/vda9 Apr 12 18:52:41.147023 dbus-daemon[1155]: [system] SELinux support is enabled Apr 12 18:52:41.114112 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Apr 12 18:52:41.114197 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Apr 12 18:52:41.159717 jq[1174]: true Apr 12 18:52:41.115479 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Apr 12 18:52:41.117045 systemd[1]: Starting update-engine.service... Apr 12 18:52:41.160149 tar[1179]: ./ Apr 12 18:52:41.160149 tar[1179]: ./loopback Apr 12 18:52:41.125046 systemd[1]: Starting update-ssh-keys-after-ignition.service... Apr 12 18:52:41.132717 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Apr 12 18:52:41.160571 tar[1181]: linux-amd64/helm Apr 12 18:52:41.132980 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Apr 12 18:52:41.135786 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Apr 12 18:52:41.140205 systemd[1]: Finished ssh-key-proc-cmdline.service. Apr 12 18:52:41.147222 systemd[1]: Started dbus.service. Apr 12 18:52:41.156694 systemd[1]: motdgen.service: Deactivated successfully. Apr 12 18:52:41.156935 systemd[1]: Finished motdgen.service. Apr 12 18:52:41.169653 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Apr 12 18:52:41.169707 systemd[1]: Reached target system-config.target. Apr 12 18:52:41.170822 tar[1180]: crictl Apr 12 18:52:41.171187 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Apr 12 18:52:41.171209 systemd[1]: Reached target user-config.target. Apr 12 18:52:41.185359 jq[1193]: true Apr 12 18:52:41.198551 extend-filesystems[1157]: Resized partition /dev/vda9 Apr 12 18:52:41.217293 extend-filesystems[1199]: resize2fs 1.46.5 (30-Dec-2021) Apr 12 18:52:41.234134 update_engine[1171]: I0412 18:52:41.233563 1171 main.cc:92] Flatcar Update Engine starting Apr 12 18:52:41.236605 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Apr 12 18:52:41.241514 tar[1179]: ./bandwidth Apr 12 18:52:41.247489 systemd[1]: Started update-engine.service. Apr 12 18:52:41.247888 update_engine[1171]: I0412 18:52:41.247586 1171 update_check_scheduler.cc:74] Next update check in 11m40s Apr 12 18:52:41.255366 systemd[1]: Started locksmithd.service. Apr 12 18:52:41.293199 env[1186]: time="2024-04-12T18:52:41.293074009Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Apr 12 18:52:41.325435 env[1186]: time="2024-04-12T18:52:41.325328306Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Apr 12 18:52:41.336459 env[1186]: time="2024-04-12T18:52:41.336366883Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:52:41.339278 env[1186]: time="2024-04-12T18:52:41.337832631Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.154-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Apr 12 18:52:41.339278 env[1186]: time="2024-04-12T18:52:41.339267562Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:52:41.339609 env[1186]: time="2024-04-12T18:52:41.339567143Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Apr 12 18:52:41.339609 env[1186]: time="2024-04-12T18:52:41.339602710Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Apr 12 18:52:41.339746 env[1186]: time="2024-04-12T18:52:41.339619852Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Apr 12 18:52:41.339746 env[1186]: time="2024-04-12T18:52:41.339633578Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Apr 12 18:52:41.339746 env[1186]: time="2024-04-12T18:52:41.339718848Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:52:41.343329 env[1186]: time="2024-04-12T18:52:41.343265518Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Apr 12 18:52:41.343773 env[1186]: time="2024-04-12T18:52:41.343729698Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Apr 12 18:52:41.343773 env[1186]: time="2024-04-12T18:52:41.343766277Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Apr 12 18:52:41.343917 env[1186]: time="2024-04-12T18:52:41.343873849Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Apr 12 18:52:41.343917 env[1186]: time="2024-04-12T18:52:41.343894066Z" level=info msg="metadata content store policy set" policy=shared Apr 12 18:52:41.344448 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Apr 12 18:52:41.416520 systemd-logind[1168]: Watching system buttons on /dev/input/event1 (Power Button) Apr 12 18:52:41.420101 extend-filesystems[1199]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Apr 12 18:52:41.420101 extend-filesystems[1199]: old_desc_blocks = 1, new_desc_blocks = 1 Apr 12 18:52:41.420101 extend-filesystems[1199]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Apr 12 18:52:41.416549 systemd-logind[1168]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Apr 12 18:52:41.464237 tar[1179]: ./ptp Apr 12 18:52:41.464285 extend-filesystems[1157]: Resized filesystem in /dev/vda9 Apr 12 18:52:41.417931 systemd-logind[1168]: New seat seat0. Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.468803652Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.468874234Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.468894442Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.468947612Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.468968591Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.468986054Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.469004248Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.469021731Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.469038001Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.469055745Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.469072266Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.469089578Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.469285445Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Apr 12 18:52:41.475035 env[1186]: time="2024-04-12T18:52:41.469391604Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Apr 12 18:52:41.421562 systemd[1]: extend-filesystems.service: Deactivated successfully. Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469698380Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469731021Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469745678Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469811201Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469834675Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469865202Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469881202Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469897914Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469913122Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469926337Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469939912Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.469961753Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.470111274Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.470130129Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505508 env[1186]: time="2024-04-12T18:52:41.470147161Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.505970 bash[1213]: Updated "/home/core/.ssh/authorized_keys" Apr 12 18:52:41.422516 systemd[1]: Finished extend-filesystems.service. Apr 12 18:52:41.506117 env[1186]: time="2024-04-12T18:52:41.470160426Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Apr 12 18:52:41.506117 env[1186]: time="2024-04-12T18:52:41.470178971Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Apr 12 18:52:41.506117 env[1186]: time="2024-04-12T18:52:41.470204729Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Apr 12 18:52:41.506117 env[1186]: time="2024-04-12T18:52:41.470235557Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Apr 12 18:52:41.506117 env[1186]: time="2024-04-12T18:52:41.470279239Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Apr 12 18:52:41.431209 systemd[1]: Started systemd-logind.service. Apr 12 18:52:41.481334 systemd[1]: Started containerd.service. Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.470546991Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.470613395Z" level=info msg="Connect containerd service" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.470657989Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.471415699Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.471650309Z" level=info msg="Start subscribing containerd event" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.471710252Z" level=info msg="Start recovering state" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.471785202Z" level=info msg="Start event monitor" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.471808676Z" level=info msg="Start snapshots syncer" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.471820088Z" level=info msg="Start cni network conf syncer for default" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.471835016Z" level=info msg="Start streaming server" Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.471710222Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Apr 12 18:52:41.506423 env[1186]: time="2024-04-12T18:52:41.481063699Z" level=info msg=serving... address=/run/containerd/containerd.sock Apr 12 18:52:41.493949 systemd[1]: Finished update-ssh-keys-after-ignition.service. Apr 12 18:52:41.527691 tar[1179]: ./vlan Apr 12 18:52:41.527733 env[1186]: time="2024-04-12T18:52:41.514630878Z" level=info msg="containerd successfully booted in 0.236865s" Apr 12 18:52:41.599358 tar[1179]: ./host-device Apr 12 18:52:41.685891 tar[1179]: ./tuning Apr 12 18:52:41.721896 tar[1179]: ./vrf Apr 12 18:52:41.759718 tar[1179]: ./sbr Apr 12 18:52:41.797204 tar[1179]: ./tap Apr 12 18:52:41.840076 tar[1179]: ./dhcp Apr 12 18:52:41.949437 tar[1179]: ./static Apr 12 18:52:41.980597 tar[1179]: ./firewall Apr 12 18:52:42.004767 sshd_keygen[1187]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Apr 12 18:52:42.031395 locksmithd[1211]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Apr 12 18:52:42.032884 tar[1179]: ./macvlan Apr 12 18:52:42.040440 tar[1181]: linux-amd64/LICENSE Apr 12 18:52:42.040440 tar[1181]: linux-amd64/README.md Apr 12 18:52:42.040295 systemd[1]: Finished sshd-keygen.service. Apr 12 18:52:42.044167 systemd[1]: Starting issuegen.service... Apr 12 18:52:42.048942 systemd[1]: Finished prepare-helm.service. Apr 12 18:52:42.050693 systemd[1]: issuegen.service: Deactivated successfully. Apr 12 18:52:42.050893 systemd[1]: Finished issuegen.service. Apr 12 18:52:42.054620 systemd[1]: Starting systemd-user-sessions.service... Apr 12 18:52:42.071550 systemd[1]: Finished systemd-user-sessions.service. Apr 12 18:52:42.076266 systemd[1]: Started getty@tty1.service. Apr 12 18:52:42.080834 systemd[1]: Started serial-getty@ttyS0.service. Apr 12 18:52:42.082275 systemd[1]: Reached target getty.target. Apr 12 18:52:42.085063 systemd[1]: Finished prepare-critools.service. Apr 12 18:52:42.290184 tar[1179]: ./dummy Apr 12 18:52:42.508065 tar[1179]: ./bridge Apr 12 18:52:42.696961 tar[1179]: ./ipvlan Apr 12 18:52:42.981320 tar[1179]: ./portmap Apr 12 18:52:43.056148 tar[1179]: ./host-local Apr 12 18:52:43.235596 systemd[1]: Finished prepare-cni-plugins.service. Apr 12 18:52:43.237352 systemd[1]: Reached target multi-user.target. Apr 12 18:52:43.244253 systemd[1]: Starting systemd-update-utmp-runlevel.service... Apr 12 18:52:43.271668 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Apr 12 18:52:43.271905 systemd[1]: Finished systemd-update-utmp-runlevel.service. Apr 12 18:52:43.275470 systemd[1]: Startup finished in 1.503s (kernel) + 13.586s (initrd) + 14.587s (userspace) = 29.677s. Apr 12 18:52:49.572345 systemd[1]: Created slice system-sshd.slice. Apr 12 18:52:49.584350 systemd[1]: Started sshd@0-10.0.0.120:22-10.0.0.1:58642.service. Apr 12 18:52:49.735250 sshd[1242]: Accepted publickey for core from 10.0.0.1 port 58642 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:52:49.747742 sshd[1242]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:52:49.780869 systemd[1]: Created slice user-500.slice. Apr 12 18:52:49.782204 systemd[1]: Starting user-runtime-dir@500.service... Apr 12 18:52:49.788514 systemd-logind[1168]: New session 1 of user core. Apr 12 18:52:49.810304 systemd[1]: Finished user-runtime-dir@500.service. Apr 12 18:52:49.812118 systemd[1]: Starting user@500.service... Apr 12 18:52:49.831551 (systemd)[1245]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:52:49.990919 systemd[1245]: Queued start job for default target default.target. Apr 12 18:52:49.991703 systemd[1245]: Reached target paths.target. Apr 12 18:52:49.991734 systemd[1245]: Reached target sockets.target. Apr 12 18:52:49.991752 systemd[1245]: Reached target timers.target. Apr 12 18:52:49.991768 systemd[1245]: Reached target basic.target. Apr 12 18:52:49.991840 systemd[1245]: Reached target default.target. Apr 12 18:52:49.991878 systemd[1245]: Startup finished in 149ms. Apr 12 18:52:49.991943 systemd[1]: Started user@500.service. Apr 12 18:52:49.993210 systemd[1]: Started session-1.scope. Apr 12 18:52:50.155799 systemd[1]: Started sshd@1-10.0.0.120:22-10.0.0.1:58656.service. Apr 12 18:52:50.232817 sshd[1254]: Accepted publickey for core from 10.0.0.1 port 58656 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:52:50.237338 sshd[1254]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:52:50.268439 systemd-logind[1168]: New session 2 of user core. Apr 12 18:52:50.273078 systemd[1]: Started session-2.scope. Apr 12 18:52:50.399156 sshd[1254]: pam_unix(sshd:session): session closed for user core Apr 12 18:52:50.405546 systemd[1]: sshd@1-10.0.0.120:22-10.0.0.1:58656.service: Deactivated successfully. Apr 12 18:52:50.406422 systemd[1]: session-2.scope: Deactivated successfully. Apr 12 18:52:50.415479 systemd-logind[1168]: Session 2 logged out. Waiting for processes to exit. Apr 12 18:52:50.420556 systemd[1]: Started sshd@2-10.0.0.120:22-10.0.0.1:58660.service. Apr 12 18:52:50.426314 systemd-logind[1168]: Removed session 2. Apr 12 18:52:50.469922 sshd[1260]: Accepted publickey for core from 10.0.0.1 port 58660 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:52:50.472062 sshd[1260]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:52:50.483998 systemd-logind[1168]: New session 3 of user core. Apr 12 18:52:50.502560 systemd[1]: Started session-3.scope. Apr 12 18:52:50.612515 sshd[1260]: pam_unix(sshd:session): session closed for user core Apr 12 18:52:50.622106 systemd[1]: Started sshd@3-10.0.0.120:22-10.0.0.1:58674.service. Apr 12 18:52:50.633920 systemd[1]: sshd@2-10.0.0.120:22-10.0.0.1:58660.service: Deactivated successfully. Apr 12 18:52:50.634960 systemd[1]: session-3.scope: Deactivated successfully. Apr 12 18:52:50.637723 systemd-logind[1168]: Session 3 logged out. Waiting for processes to exit. Apr 12 18:52:50.639328 systemd-logind[1168]: Removed session 3. Apr 12 18:52:50.707795 sshd[1265]: Accepted publickey for core from 10.0.0.1 port 58674 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:52:50.709255 sshd[1265]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:52:50.714507 systemd-logind[1168]: New session 4 of user core. Apr 12 18:52:50.716046 systemd[1]: Started session-4.scope. Apr 12 18:52:50.805171 sshd[1265]: pam_unix(sshd:session): session closed for user core Apr 12 18:52:50.815053 systemd[1]: sshd@3-10.0.0.120:22-10.0.0.1:58674.service: Deactivated successfully. Apr 12 18:52:50.816032 systemd[1]: session-4.scope: Deactivated successfully. Apr 12 18:52:50.821022 systemd-logind[1168]: Session 4 logged out. Waiting for processes to exit. Apr 12 18:52:50.823907 systemd[1]: Started sshd@4-10.0.0.120:22-10.0.0.1:58688.service. Apr 12 18:52:50.826698 systemd-logind[1168]: Removed session 4. Apr 12 18:52:50.892366 sshd[1272]: Accepted publickey for core from 10.0.0.1 port 58688 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:52:50.895251 sshd[1272]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:52:50.909170 systemd-logind[1168]: New session 5 of user core. Apr 12 18:52:50.918019 systemd[1]: Started session-5.scope. Apr 12 18:52:51.117812 sudo[1275]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Apr 12 18:52:51.118063 sudo[1275]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:52:51.136652 dbus-daemon[1155]: \xd0}\u00188\xd7U: received setenforce notice (enforcing=903485808) Apr 12 18:52:51.136778 sudo[1275]: pam_unix(sudo:session): session closed for user root Apr 12 18:52:51.140259 sshd[1272]: pam_unix(sshd:session): session closed for user core Apr 12 18:52:51.151642 systemd[1]: sshd@4-10.0.0.120:22-10.0.0.1:58688.service: Deactivated successfully. Apr 12 18:52:51.155699 systemd[1]: session-5.scope: Deactivated successfully. Apr 12 18:52:51.163999 systemd[1]: Started sshd@5-10.0.0.120:22-10.0.0.1:58694.service. Apr 12 18:52:51.165550 systemd-logind[1168]: Session 5 logged out. Waiting for processes to exit. Apr 12 18:52:51.174813 systemd-logind[1168]: Removed session 5. Apr 12 18:52:51.229936 sshd[1279]: Accepted publickey for core from 10.0.0.1 port 58694 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:52:51.231074 sshd[1279]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:52:51.238699 systemd-logind[1168]: New session 6 of user core. Apr 12 18:52:51.240474 systemd[1]: Started session-6.scope. Apr 12 18:52:51.417520 sudo[1283]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Apr 12 18:52:51.418168 sudo[1283]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:52:51.434037 sudo[1283]: pam_unix(sudo:session): session closed for user root Apr 12 18:52:51.445868 sudo[1282]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Apr 12 18:52:51.446181 sudo[1282]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:52:51.466098 systemd[1]: Stopping audit-rules.service... Apr 12 18:52:51.471000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Apr 12 18:52:51.477800 kernel: kauditd_printk_skb: 178 callbacks suppressed Apr 12 18:52:51.477848 kernel: audit: type=1305 audit(1712947971.471:155): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Apr 12 18:52:51.477873 kernel: audit: type=1300 audit(1712947971.471:155): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff98b211c0 a2=420 a3=0 items=0 ppid=1 pid=1286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:51.471000 audit[1286]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff98b211c0 a2=420 a3=0 items=0 ppid=1 pid=1286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:51.473755 systemd[1]: audit-rules.service: Deactivated successfully. Apr 12 18:52:51.478064 auditctl[1286]: No rules Apr 12 18:52:51.474000 systemd[1]: Stopped audit-rules.service. Apr 12 18:52:51.484819 systemd[1]: Starting audit-rules.service... Apr 12 18:52:51.489575 kernel: audit: type=1327 audit(1712947971.471:155): proctitle=2F7362696E2F617564697463746C002D44 Apr 12 18:52:51.471000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Apr 12 18:52:51.499443 kernel: audit: type=1131 audit(1712947971.471:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.471000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.522163 augenrules[1303]: No rules Apr 12 18:52:51.524388 systemd[1]: Finished audit-rules.service. Apr 12 18:52:51.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.530801 sudo[1282]: pam_unix(sudo:session): session closed for user root Apr 12 18:52:51.543638 kernel: audit: type=1130 audit(1712947971.523:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.543785 kernel: audit: type=1106 audit(1712947971.527:158): pid=1282 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.527000 audit[1282]: USER_END pid=1282 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.541348 sshd[1279]: pam_unix(sshd:session): session closed for user core Apr 12 18:52:51.527000 audit[1282]: CRED_DISP pid=1282 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.551015 systemd[1]: Started sshd@6-10.0.0.120:22-10.0.0.1:58704.service. Apr 12 18:52:51.556717 systemd[1]: sshd@5-10.0.0.120:22-10.0.0.1:58694.service: Deactivated successfully. Apr 12 18:52:51.557650 systemd[1]: session-6.scope: Deactivated successfully. Apr 12 18:52:51.560381 kernel: audit: type=1104 audit(1712947971.527:159): pid=1282 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.120:22-10.0.0.1:58704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.568299 systemd-logind[1168]: Session 6 logged out. Waiting for processes to exit. Apr 12 18:52:51.569303 systemd-logind[1168]: Removed session 6. Apr 12 18:52:51.569776 kernel: audit: type=1130 audit(1712947971.549:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.120:22-10.0.0.1:58704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.569829 kernel: audit: type=1106 audit(1712947971.553:161): pid=1279 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:52:51.553000 audit[1279]: USER_END pid=1279 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:52:51.584629 kernel: audit: type=1104 audit(1712947971.553:162): pid=1279 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:52:51.553000 audit[1279]: CRED_DISP pid=1279 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:52:51.556000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.120:22-10.0.0.1:58694 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.630041 sshd[1308]: Accepted publickey for core from 10.0.0.1 port 58704 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:52:51.628000 audit[1308]: USER_ACCT pid=1308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:52:51.634150 sshd[1308]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:52:51.632000 audit[1308]: CRED_ACQ pid=1308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:52:51.632000 audit[1308]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeeaa0c1a0 a2=3 a3=0 items=0 ppid=1 pid=1308 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:51.632000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:52:51.650942 systemd-logind[1168]: New session 7 of user core. Apr 12 18:52:51.651543 systemd[1]: Started session-7.scope. Apr 12 18:52:51.681000 audit[1308]: USER_START pid=1308 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:52:51.690000 audit[1312]: CRED_ACQ pid=1312 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:52:51.743000 audit[1313]: USER_ACCT pid=1313 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.743000 audit[1313]: CRED_REFR pid=1313 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:52:51.744627 sudo[1313]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Apr 12 18:52:51.744869 sudo[1313]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Apr 12 18:52:51.748000 audit[1313]: USER_START pid=1313 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:52:52.522358 systemd[1]: Starting systemd-networkd-wait-online.service... Apr 12 18:52:52.537811 systemd[1]: Finished systemd-networkd-wait-online.service. Apr 12 18:52:52.538333 systemd[1]: Reached target network-online.target. Apr 12 18:52:52.536000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:52.542551 systemd[1]: Starting docker.service... Apr 12 18:52:52.651363 env[1331]: time="2024-04-12T18:52:52.651263952Z" level=info msg="Starting up" Apr 12 18:52:52.657210 env[1331]: time="2024-04-12T18:52:52.657128418Z" level=info msg="parsed scheme: \"unix\"" module=grpc Apr 12 18:52:52.657210 env[1331]: time="2024-04-12T18:52:52.657171569Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Apr 12 18:52:52.657210 env[1331]: time="2024-04-12T18:52:52.657206584Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Apr 12 18:52:52.657210 env[1331]: time="2024-04-12T18:52:52.657223757Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Apr 12 18:52:52.663710 env[1331]: time="2024-04-12T18:52:52.663635398Z" level=info msg="parsed scheme: \"unix\"" module=grpc Apr 12 18:52:52.663710 env[1331]: time="2024-04-12T18:52:52.663677858Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Apr 12 18:52:52.663710 env[1331]: time="2024-04-12T18:52:52.663707995Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Apr 12 18:52:52.663981 env[1331]: time="2024-04-12T18:52:52.663724415Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Apr 12 18:52:52.770517 env[1331]: time="2024-04-12T18:52:52.769110484Z" level=info msg="Loading containers: start." Apr 12 18:52:52.968000 audit[1365]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1365 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:52.968000 audit[1365]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd3e5a5b10 a2=0 a3=7ffd3e5a5afc items=0 ppid=1331 pid=1365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:52.968000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Apr 12 18:52:52.978000 audit[1367]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1367 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:52.978000 audit[1367]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe3f80d680 a2=0 a3=7ffe3f80d66c items=0 ppid=1331 pid=1367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:52.978000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Apr 12 18:52:52.980000 audit[1369]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:52.980000 audit[1369]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe58d11b80 a2=0 a3=7ffe58d11b6c items=0 ppid=1331 pid=1369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:52.980000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Apr 12 18:52:52.980000 audit[1371]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1371 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:52.980000 audit[1371]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc97c57790 a2=0 a3=7ffc97c5777c items=0 ppid=1331 pid=1371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:52.980000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Apr 12 18:52:52.997000 audit[1373]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1373 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:52.997000 audit[1373]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd313c9e70 a2=0 a3=7ffd313c9e5c items=0 ppid=1331 pid=1373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:52.997000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Apr 12 18:52:53.032000 audit[1378]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1378 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.032000 audit[1378]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffeee881d0 a2=0 a3=7fffeee881bc items=0 ppid=1331 pid=1378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.032000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Apr 12 18:52:53.057000 audit[1380]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1380 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.057000 audit[1380]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff397bfa80 a2=0 a3=7fff397bfa6c items=0 ppid=1331 pid=1380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.057000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Apr 12 18:52:53.060000 audit[1382]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1382 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.060000 audit[1382]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffff83b6890 a2=0 a3=7ffff83b687c items=0 ppid=1331 pid=1382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.060000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Apr 12 18:52:53.065000 audit[1384]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.065000 audit[1384]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffed93e3710 a2=0 a3=7ffed93e36fc items=0 ppid=1331 pid=1384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.065000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:52:53.099000 audit[1388]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1388 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.099000 audit[1388]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffee6fb2f00 a2=0 a3=7ffee6fb2eec items=0 ppid=1331 pid=1388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.099000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:52:53.113000 audit[1389]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.113000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffb8d377e0 a2=0 a3=7fffb8d377cc items=0 ppid=1331 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.113000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:52:53.141264 kernel: Initializing XFRM netlink socket Apr 12 18:52:53.237488 env[1331]: time="2024-04-12T18:52:53.235379228Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Apr 12 18:52:53.309000 audit[1397]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.309000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffdfc166f30 a2=0 a3=7ffdfc166f1c items=0 ppid=1331 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.309000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Apr 12 18:52:53.338000 audit[1400]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.338000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffc9ea3d670 a2=0 a3=7ffc9ea3d65c items=0 ppid=1331 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.338000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Apr 12 18:52:53.350000 audit[1403]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1403 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.350000 audit[1403]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffdb6f5c8a0 a2=0 a3=7ffdb6f5c88c items=0 ppid=1331 pid=1403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.350000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Apr 12 18:52:53.352000 audit[1405]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1405 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.352000 audit[1405]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff44c33c20 a2=0 a3=7fff44c33c0c items=0 ppid=1331 pid=1405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.352000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Apr 12 18:52:53.355000 audit[1407]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1407 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.355000 audit[1407]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffebc5519a0 a2=0 a3=7ffebc55198c items=0 ppid=1331 pid=1407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.355000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Apr 12 18:52:53.361000 audit[1409]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.361000 audit[1409]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe6d8c54a0 a2=0 a3=7ffe6d8c548c items=0 ppid=1331 pid=1409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.361000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Apr 12 18:52:53.367000 audit[1411]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.367000 audit[1411]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc21439560 a2=0 a3=7ffc2143954c items=0 ppid=1331 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.367000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Apr 12 18:52:53.391000 audit[1414]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.391000 audit[1414]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd03d0e140 a2=0 a3=7ffd03d0e12c items=0 ppid=1331 pid=1414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.391000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Apr 12 18:52:53.395000 audit[1416]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1416 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.395000 audit[1416]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffe6d5ada80 a2=0 a3=7ffe6d5ada6c items=0 ppid=1331 pid=1416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.395000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Apr 12 18:52:53.404000 audit[1418]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.404000 audit[1418]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffe75a4b730 a2=0 a3=7ffe75a4b71c items=0 ppid=1331 pid=1418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.404000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Apr 12 18:52:53.406000 audit[1420]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.406000 audit[1420]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd8f11c4f0 a2=0 a3=7ffd8f11c4dc items=0 ppid=1331 pid=1420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.406000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Apr 12 18:52:53.408790 systemd-networkd[1082]: docker0: Link UP Apr 12 18:52:53.429000 audit[1424]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.429000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcbd0e81b0 a2=0 a3=7ffcbd0e819c items=0 ppid=1331 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.429000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:52:53.431000 audit[1425]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:52:53.431000 audit[1425]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcf36b1990 a2=0 a3=7ffcf36b197c items=0 ppid=1331 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:52:53.431000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Apr 12 18:52:53.437904 env[1331]: time="2024-04-12T18:52:53.437833179Z" level=info msg="Loading containers: done." Apr 12 18:52:53.484196 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1225283614-merged.mount: Deactivated successfully. Apr 12 18:52:53.510578 env[1331]: time="2024-04-12T18:52:53.509464768Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Apr 12 18:52:53.510578 env[1331]: time="2024-04-12T18:52:53.510072778Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Apr 12 18:52:53.510578 env[1331]: time="2024-04-12T18:52:53.510221447Z" level=info msg="Daemon has completed initialization" Apr 12 18:52:53.559447 systemd[1]: Started docker.service. Apr 12 18:52:53.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:53.570669 env[1331]: time="2024-04-12T18:52:53.570538792Z" level=info msg="API listen on /run/docker.sock" Apr 12 18:52:53.624719 systemd[1]: Reloading. Apr 12 18:52:53.802546 /usr/lib/systemd/system-generators/torcx-generator[1474]: time="2024-04-12T18:52:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:52:53.802586 /usr/lib/systemd/system-generators/torcx-generator[1474]: time="2024-04-12T18:52:53Z" level=info msg="torcx already run" Apr 12 18:52:53.936785 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:52:53.941588 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:52:53.977813 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:52:54.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.087000 audit: BPF prog-id=31 op=LOAD Apr 12 18:52:54.087000 audit: BPF prog-id=21 op=UNLOAD Apr 12 18:52:54.087000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit: BPF prog-id=32 op=LOAD Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.090000 audit: BPF prog-id=33 op=LOAD Apr 12 18:52:54.090000 audit: BPF prog-id=22 op=UNLOAD Apr 12 18:52:54.090000 audit: BPF prog-id=23 op=UNLOAD Apr 12 18:52:54.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.095000 audit: BPF prog-id=34 op=LOAD Apr 12 18:52:54.095000 audit: BPF prog-id=20 op=UNLOAD Apr 12 18:52:54.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.097000 audit: BPF prog-id=35 op=LOAD Apr 12 18:52:54.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.098000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.098000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.098000 audit: BPF prog-id=36 op=LOAD Apr 12 18:52:54.098000 audit: BPF prog-id=18 op=UNLOAD Apr 12 18:52:54.098000 audit: BPF prog-id=19 op=UNLOAD Apr 12 18:52:54.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.101000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.101000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit: BPF prog-id=37 op=LOAD Apr 12 18:52:54.103000 audit: BPF prog-id=26 op=UNLOAD Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.103000 audit: BPF prog-id=38 op=LOAD Apr 12 18:52:54.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.104000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.104000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.104000 audit: BPF prog-id=39 op=LOAD Apr 12 18:52:54.104000 audit: BPF prog-id=27 op=UNLOAD Apr 12 18:52:54.104000 audit: BPF prog-id=28 op=UNLOAD Apr 12 18:52:54.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.106000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.106000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit: BPF prog-id=40 op=LOAD Apr 12 18:52:54.108000 audit: BPF prog-id=15 op=UNLOAD Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit: BPF prog-id=41 op=LOAD Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.111000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.112000 audit: BPF prog-id=42 op=LOAD Apr 12 18:52:54.112000 audit: BPF prog-id=16 op=UNLOAD Apr 12 18:52:54.112000 audit: BPF prog-id=17 op=UNLOAD Apr 12 18:52:54.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.131000 audit: BPF prog-id=43 op=LOAD Apr 12 18:52:54.133000 audit: BPF prog-id=29 op=UNLOAD Apr 12 18:52:54.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.139000 audit: BPF prog-id=44 op=LOAD Apr 12 18:52:54.139000 audit: BPF prog-id=24 op=UNLOAD Apr 12 18:52:54.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.153000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.153000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:52:54.177000 audit: BPF prog-id=45 op=LOAD Apr 12 18:52:54.185000 audit: BPF prog-id=25 op=UNLOAD Apr 12 18:52:54.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:52:54.212613 systemd[1]: Started kubelet.service. Apr 12 18:52:54.317116 kubelet[1515]: E0412 18:52:54.313420 1515 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Apr 12 18:52:54.317000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:52:54.319644 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:52:54.319812 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:52:54.682776 env[1186]: time="2024-04-12T18:52:54.682696397Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.3\"" Apr 12 18:52:55.775889 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1663519110.mount: Deactivated successfully. Apr 12 18:52:58.622429 env[1186]: time="2024-04-12T18:52:58.621094102Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.29.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:52:58.624863 env[1186]: time="2024-04-12T18:52:58.624803227Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:39f995c9f199675725a38b0d9f19f99652f978861e631729f2ec4fd8efaab533,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:52:58.630109 env[1186]: time="2024-04-12T18:52:58.627256486Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.29.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:52:58.634308 env[1186]: time="2024-04-12T18:52:58.633843938Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:ebd35bc7ef24672c5c50ffccb21f71307a82d4fb20c0ecb6d3d27b28b69e0e3c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:52:58.634754 env[1186]: time="2024-04-12T18:52:58.634707337Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.29.3\" returns image reference \"sha256:39f995c9f199675725a38b0d9f19f99652f978861e631729f2ec4fd8efaab533\"" Apr 12 18:52:58.662785 env[1186]: time="2024-04-12T18:52:58.662296777Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.3\"" Apr 12 18:53:03.379024 env[1186]: time="2024-04-12T18:53:03.375564883Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.29.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:03.382145 env[1186]: time="2024-04-12T18:53:03.381250093Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6052a25da3f97387a8a5a9711fbff373801dcea4b0487add79dc3903c4bf14b3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:03.387429 env[1186]: time="2024-04-12T18:53:03.387280781Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.29.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:03.394083 env[1186]: time="2024-04-12T18:53:03.394002945Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:5a7968649f8aee83d5a2d75d6d377ba2680df25b0b97b3be12fa10f15ad67104,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:03.395533 env[1186]: time="2024-04-12T18:53:03.394411511Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.29.3\" returns image reference \"sha256:6052a25da3f97387a8a5a9711fbff373801dcea4b0487add79dc3903c4bf14b3\"" Apr 12 18:53:03.434954 env[1186]: time="2024-04-12T18:53:03.434527538Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.3\"" Apr 12 18:53:04.505938 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Apr 12 18:53:04.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:04.506231 systemd[1]: Stopped kubelet.service. Apr 12 18:53:04.507596 kernel: kauditd_printk_skb: 259 callbacks suppressed Apr 12 18:53:04.507680 kernel: audit: type=1130 audit(1712947984.504:372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:04.508725 systemd[1]: Started kubelet.service. Apr 12 18:53:04.504000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:04.525529 kernel: audit: type=1131 audit(1712947984.504:373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:04.525725 kernel: audit: type=1130 audit(1712947984.507:374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:04.507000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:04.760264 kubelet[1554]: E0412 18:53:04.758605 1554 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Apr 12 18:53:04.793853 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:53:04.794063 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:53:04.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:53:04.806289 kernel: audit: type=1131 audit(1712947984.794:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:53:07.410433 env[1186]: time="2024-04-12T18:53:07.410335207Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.29.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:07.417173 env[1186]: time="2024-04-12T18:53:07.413946077Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8c390d98f50c0b8f564e172a80565384dc9eeb7e16b5a6794c616706206dee3b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:07.422483 env[1186]: time="2024-04-12T18:53:07.422412572Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.29.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:07.424961 env[1186]: time="2024-04-12T18:53:07.424854691Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6fb91d791db6d62f6b1ac9dbed23fdb597335550d99ff8333d53c4136e889b3a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:07.425599 env[1186]: time="2024-04-12T18:53:07.425546157Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.29.3\" returns image reference \"sha256:8c390d98f50c0b8f564e172a80565384dc9eeb7e16b5a6794c616706206dee3b\"" Apr 12 18:53:07.452831 env[1186]: time="2024-04-12T18:53:07.452758060Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.3\"" Apr 12 18:53:09.427276 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount762794468.mount: Deactivated successfully. Apr 12 18:53:11.223438 env[1186]: time="2024-04-12T18:53:11.223276270Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.29.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:11.233726 env[1186]: time="2024-04-12T18:53:11.232027048Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a1d263b5dc5b0acea099d5e91a3a041b6704392ad95e5ea3b5bbe4f71784e392,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:11.237282 env[1186]: time="2024-04-12T18:53:11.237192704Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.29.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:11.244489 env[1186]: time="2024-04-12T18:53:11.244317913Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:fa87cba052adcb992bd59bd1304115c6f3b3fb370407805ba52af3d9ff3f0863,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:11.244763 env[1186]: time="2024-04-12T18:53:11.244691474Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.29.3\" returns image reference \"sha256:a1d263b5dc5b0acea099d5e91a3a041b6704392ad95e5ea3b5bbe4f71784e392\"" Apr 12 18:53:11.273383 env[1186]: time="2024-04-12T18:53:11.273298081Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\"" Apr 12 18:53:11.928506 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1865731981.mount: Deactivated successfully. Apr 12 18:53:14.804145 env[1186]: time="2024-04-12T18:53:14.802668622Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:14.816005 env[1186]: time="2024-04-12T18:53:14.815899884Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:14.823072 env[1186]: time="2024-04-12T18:53:14.819810287Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:14.823565 env[1186]: time="2024-04-12T18:53:14.823369011Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.1\" returns image reference \"sha256:cbb01a7bd410dc08ba382018ab909a674fb0e48687f0c00797ed5bc34fcc6bb4\"" Apr 12 18:53:14.825420 env[1186]: time="2024-04-12T18:53:14.824287233Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:1eeb4c7316bacb1d4c8ead65571cd92dd21e27359f0d4917f1a5822a73b75db1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:14.849378 env[1186]: time="2024-04-12T18:53:14.849214194Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Apr 12 18:53:15.016000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:15.008749 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Apr 12 18:53:15.011692 systemd[1]: Stopped kubelet.service. Apr 12 18:53:15.019754 systemd[1]: Started kubelet.service. Apr 12 18:53:15.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:15.055107 kernel: audit: type=1130 audit(1712947995.016:376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:15.055302 kernel: audit: type=1131 audit(1712947995.016:377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:15.055336 kernel: audit: type=1130 audit(1712947995.018:378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:15.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:15.335382 kubelet[1581]: E0412 18:53:15.335158 1581 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Apr 12 18:53:15.341193 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:53:15.341423 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:53:15.339000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:53:15.349493 kernel: audit: type=1131 audit(1712947995.339:379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:53:15.771214 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2486065775.mount: Deactivated successfully. Apr 12 18:53:15.792030 env[1186]: time="2024-04-12T18:53:15.790877176Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:15.793802 env[1186]: time="2024-04-12T18:53:15.793723667Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:15.796679 env[1186]: time="2024-04-12T18:53:15.796606568Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:15.799121 env[1186]: time="2024-04-12T18:53:15.799008122Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:15.799821 env[1186]: time="2024-04-12T18:53:15.799749179Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Apr 12 18:53:15.832904 env[1186]: time="2024-04-12T18:53:15.832539507Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\"" Apr 12 18:53:16.648534 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2422599143.mount: Deactivated successfully. Apr 12 18:53:21.501200 env[1186]: time="2024-04-12T18:53:21.501111791Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:21.505180 env[1186]: time="2024-04-12T18:53:21.505097501Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:21.510693 env[1186]: time="2024-04-12T18:53:21.510602622Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.10-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:21.516211 env[1186]: time="2024-04-12T18:53:21.516112503Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:22f892d7672adc0b9c86df67792afdb8b2dc08880f49f669eaaa59c47d7908c2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:21.520116 env[1186]: time="2024-04-12T18:53:21.518381305Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.10-0\" returns image reference \"sha256:a0eed15eed4498c145ef2f1883fcd300d7adbb759df73c901abd5383dda668e7\"" Apr 12 18:53:25.507914 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Apr 12 18:53:25.508194 systemd[1]: Stopped kubelet.service. Apr 12 18:53:25.510040 systemd[1]: Started kubelet.service. Apr 12 18:53:25.506000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.531449 kernel: audit: type=1130 audit(1712948005.506:380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.531634 kernel: audit: type=1131 audit(1712948005.506:381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.514000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.541614 kernel: audit: type=1130 audit(1712948005.514:382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.659948 kubelet[1669]: E0412 18:53:25.659785 1669 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Apr 12 18:53:25.669282 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Apr 12 18:53:25.669826 systemd[1]: kubelet.service: Failed with result 'exit-code'. Apr 12 18:53:25.675000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:53:25.688534 kernel: audit: type=1131 audit(1712948005.675:383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Apr 12 18:53:25.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.951949 systemd[1]: Stopped kubelet.service. Apr 12 18:53:25.951000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.963921 kernel: audit: type=1130 audit(1712948005.951:384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.964103 kernel: audit: type=1131 audit(1712948005.951:385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:25.984122 systemd[1]: Reloading. Apr 12 18:53:26.083108 /usr/lib/systemd/system-generators/torcx-generator[1701]: time="2024-04-12T18:53:26Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:53:26.083152 /usr/lib/systemd/system-generators/torcx-generator[1701]: time="2024-04-12T18:53:26Z" level=info msg="torcx already run" Apr 12 18:53:26.212492 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:53:26.213816 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:53:26.246420 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:53:26.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.343163 kernel: audit: type=1400 audit(1712948006.335:386): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.343353 kernel: audit: type=1400 audit(1712948006.335:387): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.343375 kernel: audit: type=1400 audit(1712948006.335:388): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356526 kernel: audit: type=1400 audit(1712948006.335:389): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.335000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.346000 audit: BPF prog-id=46 op=LOAD Apr 12 18:53:26.346000 audit: BPF prog-id=31 op=UNLOAD Apr 12 18:53:26.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356000 audit: BPF prog-id=47 op=LOAD Apr 12 18:53:26.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.362000 audit: BPF prog-id=48 op=LOAD Apr 12 18:53:26.362000 audit: BPF prog-id=32 op=UNLOAD Apr 12 18:53:26.362000 audit: BPF prog-id=33 op=UNLOAD Apr 12 18:53:26.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.366000 audit: BPF prog-id=49 op=LOAD Apr 12 18:53:26.366000 audit: BPF prog-id=34 op=UNLOAD Apr 12 18:53:26.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.366000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.367000 audit: BPF prog-id=50 op=LOAD Apr 12 18:53:26.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.372000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.373000 audit: BPF prog-id=51 op=LOAD Apr 12 18:53:26.373000 audit: BPF prog-id=35 op=UNLOAD Apr 12 18:53:26.373000 audit: BPF prog-id=36 op=UNLOAD Apr 12 18:53:26.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.375000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.379000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.381000 audit: BPF prog-id=52 op=LOAD Apr 12 18:53:26.381000 audit: BPF prog-id=37 op=UNLOAD Apr 12 18:53:26.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.381000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.381000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.384000 audit: BPF prog-id=53 op=LOAD Apr 12 18:53:26.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.384000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.384000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.385000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.385000 audit: BPF prog-id=54 op=LOAD Apr 12 18:53:26.385000 audit: BPF prog-id=38 op=UNLOAD Apr 12 18:53:26.385000 audit: BPF prog-id=39 op=UNLOAD Apr 12 18:53:26.386000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.388000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.388000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.399000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.403000 audit: BPF prog-id=55 op=LOAD Apr 12 18:53:26.407000 audit: BPF prog-id=40 op=UNLOAD Apr 12 18:53:26.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit: BPF prog-id=56 op=LOAD Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.408000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.409000 audit: BPF prog-id=57 op=LOAD Apr 12 18:53:26.409000 audit: BPF prog-id=41 op=UNLOAD Apr 12 18:53:26.409000 audit: BPF prog-id=42 op=UNLOAD Apr 12 18:53:26.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.411000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.411000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.417000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.417000 audit: BPF prog-id=58 op=LOAD Apr 12 18:53:26.417000 audit: BPF prog-id=43 op=UNLOAD Apr 12 18:53:26.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.418000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.418000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit: BPF prog-id=59 op=LOAD Apr 12 18:53:26.419000 audit: BPF prog-id=44 op=UNLOAD Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.419000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.420000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:26.420000 audit: BPF prog-id=60 op=LOAD Apr 12 18:53:26.420000 audit: BPF prog-id=45 op=UNLOAD Apr 12 18:53:26.468598 systemd[1]: Started kubelet.service. Apr 12 18:53:26.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:26.633711 update_engine[1171]: I0412 18:53:26.633113 1171 update_attempter.cc:509] Updating boot flags... Apr 12 18:53:26.869628 kubelet[1742]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:53:26.869628 kubelet[1742]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Apr 12 18:53:26.869628 kubelet[1742]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:53:26.870262 kubelet[1742]: I0412 18:53:26.869701 1742 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Apr 12 18:53:27.482765 kubelet[1742]: I0412 18:53:27.482700 1742 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Apr 12 18:53:27.482765 kubelet[1742]: I0412 18:53:27.482753 1742 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Apr 12 18:53:27.483135 kubelet[1742]: I0412 18:53:27.483073 1742 server.go:919] "Client rotation is on, will bootstrap in background" Apr 12 18:53:27.491385 kubelet[1742]: E0412 18:53:27.491321 1742 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.120:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:27.492083 kubelet[1742]: I0412 18:53:27.491785 1742 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Apr 12 18:53:27.518083 kubelet[1742]: I0412 18:53:27.517986 1742 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Apr 12 18:53:27.518383 kubelet[1742]: I0412 18:53:27.518350 1742 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Apr 12 18:53:27.518671 kubelet[1742]: I0412 18:53:27.518630 1742 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Apr 12 18:53:27.518838 kubelet[1742]: I0412 18:53:27.518674 1742 topology_manager.go:138] "Creating topology manager with none policy" Apr 12 18:53:27.518838 kubelet[1742]: I0412 18:53:27.518689 1742 container_manager_linux.go:301] "Creating device plugin manager" Apr 12 18:53:27.518926 kubelet[1742]: I0412 18:53:27.518844 1742 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:53:27.519027 kubelet[1742]: I0412 18:53:27.518996 1742 kubelet.go:396] "Attempting to sync node with API server" Apr 12 18:53:27.519090 kubelet[1742]: I0412 18:53:27.519034 1742 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Apr 12 18:53:27.519090 kubelet[1742]: I0412 18:53:27.519082 1742 kubelet.go:312] "Adding apiserver pod source" Apr 12 18:53:27.519181 kubelet[1742]: I0412 18:53:27.519106 1742 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Apr 12 18:53:27.525227 kubelet[1742]: I0412 18:53:27.525185 1742 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Apr 12 18:53:27.525491 kubelet[1742]: W0412 18:53:27.525181 1742 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://10.0.0.120:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:27.525558 kubelet[1742]: E0412 18:53:27.525540 1742 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.120:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:27.525615 kubelet[1742]: W0412 18:53:27.525525 1742 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://10.0.0.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:27.525668 kubelet[1742]: E0412 18:53:27.525617 1742 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:27.526166 kubelet[1742]: I0412 18:53:27.526112 1742 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Apr 12 18:53:27.526360 kubelet[1742]: W0412 18:53:27.526197 1742 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Apr 12 18:53:27.526917 kubelet[1742]: I0412 18:53:27.526881 1742 server.go:1256] "Started kubelet" Apr 12 18:53:27.528393 kubelet[1742]: E0412 18:53:27.528353 1742 event.go:355] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.120:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.120:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.17c59d232359e59a default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2024-04-12 18:53:27.526851994 +0000 UTC m=+1.048919183,LastTimestamp:2024-04-12 18:53:27.526851994 +0000 UTC m=+1.048919183,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Apr 12 18:53:27.528541 kubelet[1742]: I0412 18:53:27.528450 1742 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Apr 12 18:53:27.528647 kubelet[1742]: I0412 18:53:27.528619 1742 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Apr 12 18:53:27.529672 kubelet[1742]: I0412 18:53:27.529518 1742 server.go:461] "Adding debug handlers to kubelet server" Apr 12 18:53:27.529876 kubelet[1742]: I0412 18:53:27.529838 1742 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Apr 12 18:53:27.530000 audit[1742]: AVC avc: denied { mac_admin } for pid=1742 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:27.530000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:53:27.530000 audit[1742]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000deb500 a1=c000648d50 a2=c000deb4d0 a3=25 items=0 ppid=1 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.530000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:53:27.530000 audit[1742]: AVC avc: denied { mac_admin } for pid=1742 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:27.530000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:53:27.530000 audit[1742]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00034be40 a1=c000648d68 a2=c000deb590 a3=25 items=0 ppid=1 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.530000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:53:27.533487 kubelet[1742]: I0412 18:53:27.531350 1742 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Apr 12 18:53:27.533487 kubelet[1742]: I0412 18:53:27.531396 1742 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Apr 12 18:53:27.533487 kubelet[1742]: I0412 18:53:27.531513 1742 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Apr 12 18:53:27.535002 kubelet[1742]: E0412 18:53:27.534039 1742 kubelet_node_status.go:462] "Error getting the current node from lister" err="node \"localhost\" not found" Apr 12 18:53:27.535002 kubelet[1742]: I0412 18:53:27.534107 1742 volume_manager.go:291] "Starting Kubelet Volume Manager" Apr 12 18:53:27.535002 kubelet[1742]: I0412 18:53:27.534204 1742 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Apr 12 18:53:27.535002 kubelet[1742]: I0412 18:53:27.534270 1742 reconciler_new.go:29] "Reconciler: start to sync state" Apr 12 18:53:27.535002 kubelet[1742]: W0412 18:53:27.534733 1742 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.CSIDriver: Get "https://10.0.0.120:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:27.535002 kubelet[1742]: E0412 18:53:27.534804 1742 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.120:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:27.535370 kubelet[1742]: E0412 18:53:27.535336 1742 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.120:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.120:6443: connect: connection refused" interval="200ms" Apr 12 18:53:27.536654 kubelet[1742]: I0412 18:53:27.536543 1742 factory.go:221] Registration of the systemd container factory successfully Apr 12 18:53:27.539787 kubelet[1742]: I0412 18:53:27.536817 1742 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Apr 12 18:53:27.542328 kubelet[1742]: E0412 18:53:27.542285 1742 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Apr 12 18:53:27.542000 audit[1767]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1767 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:27.542000 audit[1767]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffffd2101f0 a2=0 a3=7ffffd2101dc items=0 ppid=1742 pid=1767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.542000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Apr 12 18:53:27.543937 kubelet[1742]: I0412 18:53:27.543913 1742 factory.go:221] Registration of the containerd container factory successfully Apr 12 18:53:27.546000 audit[1768]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:27.546000 audit[1768]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff2deb21e0 a2=0 a3=7fff2deb21cc items=0 ppid=1742 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.546000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Apr 12 18:53:27.573000 audit[1770]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1770 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:27.573000 audit[1770]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc06e67390 a2=0 a3=7ffc06e6737c items=0 ppid=1742 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.573000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:53:27.573000 audit[1772]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:27.573000 audit[1772]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffd3ad56370 a2=0 a3=7ffd3ad5635c items=0 ppid=1742 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.573000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:53:27.646348 kubelet[1742]: I0412 18:53:27.646279 1742 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Apr 12 18:53:27.644000 audit[1778]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:27.647100 kubelet[1742]: E0412 18:53:27.646896 1742 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.120:6443/api/v1/nodes\": dial tcp 10.0.0.120:6443: connect: connection refused" node="localhost" Apr 12 18:53:27.647100 kubelet[1742]: I0412 18:53:27.647082 1742 cpu_manager.go:214] "Starting CPU manager" policy="none" Apr 12 18:53:27.647100 kubelet[1742]: I0412 18:53:27.647094 1742 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Apr 12 18:53:27.647270 kubelet[1742]: I0412 18:53:27.647122 1742 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:53:27.644000 audit[1778]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffe4727aba0 a2=0 a3=7ffe4727ab8c items=0 ppid=1742 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.644000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Apr 12 18:53:27.648072 kubelet[1742]: I0412 18:53:27.648028 1742 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Apr 12 18:53:27.649000 audit[1781]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1781 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:27.649000 audit[1781]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc1a6cb9b0 a2=0 a3=7ffc1a6cb99c items=0 ppid=1742 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.649000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Apr 12 18:53:27.649000 audit[1782]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1782 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:27.649000 audit[1782]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcb760a680 a2=0 a3=7ffcb760a66c items=0 ppid=1742 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.649000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Apr 12 18:53:27.650311 kubelet[1742]: I0412 18:53:27.650240 1742 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Apr 12 18:53:27.650311 kubelet[1742]: I0412 18:53:27.650302 1742 status_manager.go:217] "Starting to sync pod status with apiserver" Apr 12 18:53:27.650562 kubelet[1742]: I0412 18:53:27.650333 1742 kubelet.go:2329] "Starting kubelet main sync loop" Apr 12 18:53:27.650562 kubelet[1742]: E0412 18:53:27.650435 1742 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Apr 12 18:53:27.650000 audit[1783]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:27.650000 audit[1783]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8c464750 a2=0 a3=7ffd8c46473c items=0 ppid=1742 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Apr 12 18:53:27.651000 audit[1784]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1784 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:27.651000 audit[1784]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff2761a490 a2=0 a3=7fff2761a47c items=0 ppid=1742 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.651000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Apr 12 18:53:27.652035 kubelet[1742]: W0412 18:53:27.651509 1742 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://10.0.0.120:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:27.652035 kubelet[1742]: E0412 18:53:27.651618 1742 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.120:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:27.652000 audit[1786]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1786 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:27.652000 audit[1786]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc4e394a40 a2=0 a3=7ffc4e394a2c items=0 ppid=1742 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.652000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Apr 12 18:53:27.652000 audit[1785]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:27.652000 audit[1785]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc47d7f8f0 a2=0 a3=7ffc47d7f8dc items=0 ppid=1742 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.652000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Apr 12 18:53:27.653000 audit[1788]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1788 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:27.653000 audit[1788]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffd1692f7d0 a2=0 a3=7ffd1692f7bc items=0 ppid=1742 pid=1788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.653000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Apr 12 18:53:27.655174 kubelet[1742]: I0412 18:53:27.655112 1742 policy_none.go:49] "None policy: Start" Apr 12 18:53:27.657485 kubelet[1742]: I0412 18:53:27.657227 1742 memory_manager.go:170] "Starting memorymanager" policy="None" Apr 12 18:53:27.657485 kubelet[1742]: I0412 18:53:27.657302 1742 state_mem.go:35] "Initializing new in-memory state store" Apr 12 18:53:27.681936 systemd[1]: Created slice kubepods.slice. Apr 12 18:53:27.704965 systemd[1]: Created slice kubepods-burstable.slice. Apr 12 18:53:27.709476 systemd[1]: Created slice kubepods-besteffort.slice. Apr 12 18:53:27.716941 kubelet[1742]: I0412 18:53:27.716881 1742 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Apr 12 18:53:27.716000 audit[1742]: AVC avc: denied { mac_admin } for pid=1742 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:27.716000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:53:27.716000 audit[1742]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009c4360 a1=c0010b3f80 a2=c0009c4330 a3=25 items=0 ppid=1 pid=1742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:27.716000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:53:27.717479 kubelet[1742]: I0412 18:53:27.717006 1742 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Apr 12 18:53:27.717479 kubelet[1742]: I0412 18:53:27.717293 1742 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Apr 12 18:53:27.718978 kubelet[1742]: E0412 18:53:27.718926 1742 eviction_manager.go:282] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Apr 12 18:53:27.736506 kubelet[1742]: E0412 18:53:27.736247 1742 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.120:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.120:6443: connect: connection refused" interval="400ms" Apr 12 18:53:27.750701 kubelet[1742]: I0412 18:53:27.750603 1742 topology_manager.go:215] "Topology Admit Handler" podUID="e513259e31a57220fbd52862b607b224" podNamespace="kube-system" podName="kube-apiserver-localhost" Apr 12 18:53:27.755636 kubelet[1742]: I0412 18:53:27.755564 1742 topology_manager.go:215] "Topology Admit Handler" podUID="f4e8212a5db7e0401319814fa9ad65c9" podNamespace="kube-system" podName="kube-controller-manager-localhost" Apr 12 18:53:27.757084 kubelet[1742]: I0412 18:53:27.757025 1742 topology_manager.go:215] "Topology Admit Handler" podUID="5d5c5aff921df216fcba2c51c322ceb1" podNamespace="kube-system" podName="kube-scheduler-localhost" Apr 12 18:53:27.769961 systemd[1]: Created slice kubepods-burstable-pode513259e31a57220fbd52862b607b224.slice. Apr 12 18:53:27.789046 systemd[1]: Created slice kubepods-burstable-podf4e8212a5db7e0401319814fa9ad65c9.slice. Apr 12 18:53:27.805790 systemd[1]: Created slice kubepods-burstable-pod5d5c5aff921df216fcba2c51c322ceb1.slice. Apr 12 18:53:27.837862 kubelet[1742]: I0412 18:53:27.837764 1742 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e513259e31a57220fbd52862b607b224-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"e513259e31a57220fbd52862b607b224\") " pod="kube-system/kube-apiserver-localhost" Apr 12 18:53:27.837862 kubelet[1742]: I0412 18:53:27.837844 1742 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e513259e31a57220fbd52862b607b224-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"e513259e31a57220fbd52862b607b224\") " pod="kube-system/kube-apiserver-localhost" Apr 12 18:53:27.837862 kubelet[1742]: I0412 18:53:27.837882 1742 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:27.838205 kubelet[1742]: I0412 18:53:27.837914 1742 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:27.838205 kubelet[1742]: I0412 18:53:27.837946 1742 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5d5c5aff921df216fcba2c51c322ceb1-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"5d5c5aff921df216fcba2c51c322ceb1\") " pod="kube-system/kube-scheduler-localhost" Apr 12 18:53:27.838205 kubelet[1742]: I0412 18:53:27.837975 1742 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e513259e31a57220fbd52862b607b224-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"e513259e31a57220fbd52862b607b224\") " pod="kube-system/kube-apiserver-localhost" Apr 12 18:53:27.838205 kubelet[1742]: I0412 18:53:27.838004 1742 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:27.838205 kubelet[1742]: I0412 18:53:27.838031 1742 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:27.838459 kubelet[1742]: I0412 18:53:27.838071 1742 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:27.849221 kubelet[1742]: I0412 18:53:27.849154 1742 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Apr 12 18:53:27.849715 kubelet[1742]: E0412 18:53:27.849681 1742 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.120:6443/api/v1/nodes\": dial tcp 10.0.0.120:6443: connect: connection refused" node="localhost" Apr 12 18:53:28.086857 kubelet[1742]: E0412 18:53:28.086769 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:28.087856 env[1186]: time="2024-04-12T18:53:28.087788486Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:e513259e31a57220fbd52862b607b224,Namespace:kube-system,Attempt:0,}" Apr 12 18:53:28.095867 kubelet[1742]: E0412 18:53:28.095815 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:28.096587 env[1186]: time="2024-04-12T18:53:28.096516652Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:f4e8212a5db7e0401319814fa9ad65c9,Namespace:kube-system,Attempt:0,}" Apr 12 18:53:28.109998 kubelet[1742]: E0412 18:53:28.109873 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:28.112321 env[1186]: time="2024-04-12T18:53:28.112249695Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:5d5c5aff921df216fcba2c51c322ceb1,Namespace:kube-system,Attempt:0,}" Apr 12 18:53:28.137739 kubelet[1742]: E0412 18:53:28.137650 1742 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.120:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.120:6443: connect: connection refused" interval="800ms" Apr 12 18:53:28.254134 kubelet[1742]: I0412 18:53:28.251475 1742 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Apr 12 18:53:28.254134 kubelet[1742]: E0412 18:53:28.251870 1742 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.120:6443/api/v1/nodes\": dial tcp 10.0.0.120:6443: connect: connection refused" node="localhost" Apr 12 18:53:28.448658 kubelet[1742]: W0412 18:53:28.448161 1742 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Node: Get "https://10.0.0.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:28.448658 kubelet[1742]: E0412 18:53:28.448248 1742 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://10.0.0.120:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:28.592175 kubelet[1742]: W0412 18:53:28.592052 1742 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.CSIDriver: Get "https://10.0.0.120:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:28.592175 kubelet[1742]: E0412 18:53:28.592161 1742 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://10.0.0.120:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:28.748156 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2163155747.mount: Deactivated successfully. Apr 12 18:53:28.766434 env[1186]: time="2024-04-12T18:53:28.766337605Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.774598 env[1186]: time="2024-04-12T18:53:28.774507512Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.776997 env[1186]: time="2024-04-12T18:53:28.776922323Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.778849 env[1186]: time="2024-04-12T18:53:28.778792340Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.784373 env[1186]: time="2024-04-12T18:53:28.784262466Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.792579 env[1186]: time="2024-04-12T18:53:28.792511161Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.800995 env[1186]: time="2024-04-12T18:53:28.799030378Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.807433 env[1186]: time="2024-04-12T18:53:28.805704628Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.813530 env[1186]: time="2024-04-12T18:53:28.812207302Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.818163 env[1186]: time="2024-04-12T18:53:28.816974294Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.821702 env[1186]: time="2024-04-12T18:53:28.821023675Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.827213 env[1186]: time="2024-04-12T18:53:28.827097697Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:28.950878 kubelet[1742]: E0412 18:53:28.946565 1742 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.120:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.120:6443: connect: connection refused" interval="1.6s" Apr 12 18:53:28.979717 kubelet[1742]: W0412 18:53:28.979578 1742 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.RuntimeClass: Get "https://10.0.0.120:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:28.979717 kubelet[1742]: E0412 18:53:28.979648 1742 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://10.0.0.120:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:29.027670 env[1186]: time="2024-04-12T18:53:29.022480493Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:53:29.027670 env[1186]: time="2024-04-12T18:53:29.022570202Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:53:29.027670 env[1186]: time="2024-04-12T18:53:29.022585782Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:53:29.027670 env[1186]: time="2024-04-12T18:53:29.022876273Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5e43e78ef9f3e6e0fa7baab6f5c152d82a5009ce73207613e8f6918eeb9c48d8 pid=1799 runtime=io.containerd.runc.v2 Apr 12 18:53:29.027670 env[1186]: time="2024-04-12T18:53:29.026547591Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:53:29.027670 env[1186]: time="2024-04-12T18:53:29.026617433Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:53:29.027670 env[1186]: time="2024-04-12T18:53:29.026635207Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:53:29.027670 env[1186]: time="2024-04-12T18:53:29.027198575Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/83796e15d7955b7c35c1a604fbc172a46659d2da66ae726ab0079399e5a8118b pid=1815 runtime=io.containerd.runc.v2 Apr 12 18:53:29.194000 kubelet[1742]: W0412 18:53:29.193868 1742 reflector.go:539] vendor/k8s.io/client-go/informers/factory.go:159: failed to list *v1.Service: Get "https://10.0.0.120:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:29.194000 kubelet[1742]: E0412 18:53:29.193950 1742 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:159: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://10.0.0.120:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:29.195520 kubelet[1742]: I0412 18:53:29.195029 1742 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Apr 12 18:53:29.195520 kubelet[1742]: E0412 18:53:29.195474 1742 kubelet_node_status.go:96] "Unable to register node with API server" err="Post \"https://10.0.0.120:6443/api/v1/nodes\": dial tcp 10.0.0.120:6443: connect: connection refused" node="localhost" Apr 12 18:53:29.201250 env[1186]: time="2024-04-12T18:53:29.198741608Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:53:29.201250 env[1186]: time="2024-04-12T18:53:29.198890100Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:53:29.201250 env[1186]: time="2024-04-12T18:53:29.198931518Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:53:29.201250 env[1186]: time="2024-04-12T18:53:29.199276502Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e15475dd52812ad4bb00f5a6bd1b92e782d51d4eb6ec6ddb835b4abe956afd75 pid=1811 runtime=io.containerd.runc.v2 Apr 12 18:53:29.215322 systemd[1]: Started cri-containerd-5e43e78ef9f3e6e0fa7baab6f5c152d82a5009ce73207613e8f6918eeb9c48d8.scope. Apr 12 18:53:29.251432 systemd[1]: Started cri-containerd-83796e15d7955b7c35c1a604fbc172a46659d2da66ae726ab0079399e5a8118b.scope. Apr 12 18:53:29.298840 systemd[1]: Started cri-containerd-e15475dd52812ad4bb00f5a6bd1b92e782d51d4eb6ec6ddb835b4abe956afd75.scope. Apr 12 18:53:29.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.303000 audit: BPF prog-id=61 op=LOAD Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1799 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343365373865663966336536653066613762616162366635633135 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1799 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343365373865663966336536653066613762616162366635633135 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.306000 audit: BPF prog-id=62 op=LOAD Apr 12 18:53:29.306000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003e4ba0 items=0 ppid=1799 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.306000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343365373865663966336536653066613762616162366635633135 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit: BPF prog-id=63 op=LOAD Apr 12 18:53:29.308000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003e4be8 items=0 ppid=1799 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343365373865663966336536653066613762616162366635633135 Apr 12 18:53:29.308000 audit: BPF prog-id=63 op=UNLOAD Apr 12 18:53:29.308000 audit: BPF prog-id=62 op=UNLOAD Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { perfmon } for pid=1831 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit[1831]: AVC avc: denied { bpf } for pid=1831 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.308000 audit: BPF prog-id=64 op=LOAD Apr 12 18:53:29.308000 audit[1831]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003e4ff8 items=0 ppid=1799 pid=1831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565343365373865663966336536653066613762616162366635633135 Apr 12 18:53:29.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.339000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.347000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.347000 audit: BPF prog-id=65 op=LOAD Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1815 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833373936653135643739353562376333356331613630346662633137 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=1815 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833373936653135643739353562376333356331613630346662633137 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit: BPF prog-id=66 op=LOAD Apr 12 18:53:29.348000 audit[1838]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000e7e40 items=0 ppid=1815 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833373936653135643739353562376333356331613630346662633137 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit: BPF prog-id=67 op=LOAD Apr 12 18:53:29.348000 audit[1838]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000e7e88 items=0 ppid=1815 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833373936653135643739353562376333356331613630346662633137 Apr 12 18:53:29.348000 audit: BPF prog-id=67 op=UNLOAD Apr 12 18:53:29.348000 audit: BPF prog-id=66 op=UNLOAD Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { perfmon } for pid=1838 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit[1838]: AVC avc: denied { bpf } for pid=1838 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.348000 audit: BPF prog-id=68 op=LOAD Apr 12 18:53:29.348000 audit[1838]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003e4298 items=0 ppid=1815 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.348000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833373936653135643739353562376333356331613630346662633137 Apr 12 18:53:29.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.361000 audit: BPF prog-id=69 op=LOAD Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1811 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531353437356464353238313261643462623030663561366264316239 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1811 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531353437356464353238313261643462623030663561366264316239 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.362000 audit: BPF prog-id=70 op=LOAD Apr 12 18:53:29.362000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001ba360 items=0 ppid=1811 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531353437356464353238313261643462623030663561366264316239 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit: BPF prog-id=71 op=LOAD Apr 12 18:53:29.363000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001ba3a8 items=0 ppid=1811 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531353437356464353238313261643462623030663561366264316239 Apr 12 18:53:29.363000 audit: BPF prog-id=71 op=UNLOAD Apr 12 18:53:29.363000 audit: BPF prog-id=70 op=UNLOAD Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { perfmon } for pid=1857 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit[1857]: AVC avc: denied { bpf } for pid=1857 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.363000 audit: BPF prog-id=72 op=LOAD Apr 12 18:53:29.363000 audit[1857]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001ba7b8 items=0 ppid=1811 pid=1857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.363000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531353437356464353238313261643462623030663561366264316239 Apr 12 18:53:29.392570 env[1186]: time="2024-04-12T18:53:29.392483389Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:5d5c5aff921df216fcba2c51c322ceb1,Namespace:kube-system,Attempt:0,} returns sandbox id \"5e43e78ef9f3e6e0fa7baab6f5c152d82a5009ce73207613e8f6918eeb9c48d8\"" Apr 12 18:53:29.400239 kubelet[1742]: E0412 18:53:29.400173 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:29.403885 env[1186]: time="2024-04-12T18:53:29.403834644Z" level=info msg="CreateContainer within sandbox \"5e43e78ef9f3e6e0fa7baab6f5c152d82a5009ce73207613e8f6918eeb9c48d8\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Apr 12 18:53:29.431261 env[1186]: time="2024-04-12T18:53:29.431203210Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:f4e8212a5db7e0401319814fa9ad65c9,Namespace:kube-system,Attempt:0,} returns sandbox id \"83796e15d7955b7c35c1a604fbc172a46659d2da66ae726ab0079399e5a8118b\"" Apr 12 18:53:29.433122 kubelet[1742]: E0412 18:53:29.432324 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:29.434568 env[1186]: time="2024-04-12T18:53:29.434520868Z" level=info msg="CreateContainer within sandbox \"83796e15d7955b7c35c1a604fbc172a46659d2da66ae726ab0079399e5a8118b\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Apr 12 18:53:29.453300 env[1186]: time="2024-04-12T18:53:29.453216105Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:e513259e31a57220fbd52862b607b224,Namespace:kube-system,Attempt:0,} returns sandbox id \"e15475dd52812ad4bb00f5a6bd1b92e782d51d4eb6ec6ddb835b4abe956afd75\"" Apr 12 18:53:29.456103 kubelet[1742]: E0412 18:53:29.454570 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:29.461561 env[1186]: time="2024-04-12T18:53:29.459245904Z" level=info msg="CreateContainer within sandbox \"e15475dd52812ad4bb00f5a6bd1b92e782d51d4eb6ec6ddb835b4abe956afd75\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Apr 12 18:53:29.499432 env[1186]: time="2024-04-12T18:53:29.499337706Z" level=info msg="CreateContainer within sandbox \"5e43e78ef9f3e6e0fa7baab6f5c152d82a5009ce73207613e8f6918eeb9c48d8\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"ee7b567b93c06b4763301c501cef271441788a635935c0fc1415d1f75abae9a8\"" Apr 12 18:53:29.500289 env[1186]: time="2024-04-12T18:53:29.500247040Z" level=info msg="StartContainer for \"ee7b567b93c06b4763301c501cef271441788a635935c0fc1415d1f75abae9a8\"" Apr 12 18:53:29.518018 env[1186]: time="2024-04-12T18:53:29.517947029Z" level=info msg="CreateContainer within sandbox \"83796e15d7955b7c35c1a604fbc172a46659d2da66ae726ab0079399e5a8118b\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"bbe66f5be7b570272f7bd8b9799ac2a1d8aeacf3d8d729c3f5345e4e0286213d\"" Apr 12 18:53:29.525095 env[1186]: time="2024-04-12T18:53:29.525016900Z" level=info msg="StartContainer for \"bbe66f5be7b570272f7bd8b9799ac2a1d8aeacf3d8d729c3f5345e4e0286213d\"" Apr 12 18:53:29.570302 systemd[1]: Started cri-containerd-bbe66f5be7b570272f7bd8b9799ac2a1d8aeacf3d8d729c3f5345e4e0286213d.scope. Apr 12 18:53:29.573210 systemd[1]: Started cri-containerd-ee7b567b93c06b4763301c501cef271441788a635935c0fc1415d1f75abae9a8.scope. Apr 12 18:53:29.604351 env[1186]: time="2024-04-12T18:53:29.604274710Z" level=info msg="CreateContainer within sandbox \"e15475dd52812ad4bb00f5a6bd1b92e782d51d4eb6ec6ddb835b4abe956afd75\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"47ef1577e54b2e30bc78c8d78153e2565ad2045cdf425f0cbb1f5f01787873d8\"" Apr 12 18:53:29.605325 env[1186]: time="2024-04-12T18:53:29.605293772Z" level=info msg="StartContainer for \"47ef1577e54b2e30bc78c8d78153e2565ad2045cdf425f0cbb1f5f01787873d8\"" Apr 12 18:53:29.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.611000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.611000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.615000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.615000 audit: BPF prog-id=73 op=LOAD Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000195c48 a2=10 a3=1c items=0 ppid=1799 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376235363762393363303662343736333330316335303163656632 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001956b0 a2=3c a3=8 items=0 ppid=1799 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376235363762393363303662343736333330316335303163656632 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.622000 audit: BPF prog-id=74 op=LOAD Apr 12 18:53:29.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit: BPF prog-id=75 op=LOAD Apr 12 18:53:29.622000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001959d8 a2=78 a3=c0000a9b10 items=0 ppid=1799 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376235363762393363303662343736333330316335303163656632 Apr 12 18:53:29.631000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.631000 audit: BPF prog-id=76 op=LOAD Apr 12 18:53:29.631000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000195770 a2=78 a3=c0000a9b58 items=0 ppid=1799 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.631000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376235363762393363303662343736333330316335303163656632 Apr 12 18:53:29.632000 audit: BPF prog-id=76 op=UNLOAD Apr 12 18:53:29.632000 audit: BPF prog-id=74 op=UNLOAD Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { perfmon } for pid=1926 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit[1926]: AVC avc: denied { bpf } for pid=1926 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.632000 audit: BPF prog-id=77 op=LOAD Apr 12 18:53:29.632000 audit[1926]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000195c30 a2=78 a3=c0000a9f68 items=0 ppid=1799 pid=1926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565376235363762393363303662343736333330316335303163656632 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1815 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262653636663562653762353730323732663762643862393739396163 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1815 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262653636663562653762353730323732663762643862393739396163 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.634000 audit: BPF prog-id=78 op=LOAD Apr 12 18:53:29.634000 audit[1943]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000346460 items=0 ppid=1815 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.634000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262653636663562653762353730323732663762643862393739396163 Apr 12 18:53:29.639000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.639000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.639000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.639000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.639000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.639000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.639000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.639000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.650987 kubelet[1742]: E0412 18:53:29.650817 1742 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://10.0.0.120:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 10.0.0.120:6443: connect: connection refused Apr 12 18:53:29.639000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.639000 audit: BPF prog-id=79 op=LOAD Apr 12 18:53:29.639000 audit[1943]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003464a8 items=0 ppid=1815 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262653636663562653762353730323732663762643862393739396163 Apr 12 18:53:29.662000 audit: BPF prog-id=79 op=UNLOAD Apr 12 18:53:29.662000 audit: BPF prog-id=78 op=UNLOAD Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { perfmon } for pid=1943 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.677323 systemd[1]: Started cri-containerd-47ef1577e54b2e30bc78c8d78153e2565ad2045cdf425f0cbb1f5f01787873d8.scope. Apr 12 18:53:29.662000 audit[1943]: AVC avc: denied { bpf } for pid=1943 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:29.662000 audit: BPF prog-id=80 op=LOAD Apr 12 18:53:29.662000 audit[1943]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003468b8 items=0 ppid=1815 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:29.662000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262653636663562653762353730323732663762643862393739396163 Apr 12 18:53:30.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.055000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.055000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.078000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.078000 audit: BPF prog-id=81 op=LOAD Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=1811 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:30.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437656631353737653534623265333062633738633864373831353365 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=1811 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:30.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437656631353737653534623265333062633738633864373831353365 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.083000 audit: BPF prog-id=82 op=LOAD Apr 12 18:53:30.083000 audit[1977]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0002b7d40 items=0 ppid=1811 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:30.083000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437656631353737653534623265333062633738633864373831353365 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit: BPF prog-id=83 op=LOAD Apr 12 18:53:30.121000 audit[1977]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000388ea8 items=0 ppid=1811 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:30.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437656631353737653534623265333062633738633864373831353365 Apr 12 18:53:30.121000 audit: BPF prog-id=83 op=UNLOAD Apr 12 18:53:30.121000 audit: BPF prog-id=82 op=UNLOAD Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { perfmon } for pid=1977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit[1977]: AVC avc: denied { bpf } for pid=1977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:30.121000 audit: BPF prog-id=84 op=LOAD Apr 12 18:53:30.121000 audit[1977]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003892b8 items=0 ppid=1811 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:30.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437656631353737653534623265333062633738633864373831353365 Apr 12 18:53:30.127499 env[1186]: time="2024-04-12T18:53:30.127319017Z" level=info msg="StartContainer for \"ee7b567b93c06b4763301c501cef271441788a635935c0fc1415d1f75abae9a8\" returns successfully" Apr 12 18:53:30.140176 env[1186]: time="2024-04-12T18:53:30.137435620Z" level=info msg="StartContainer for \"bbe66f5be7b570272f7bd8b9799ac2a1d8aeacf3d8d729c3f5345e4e0286213d\" returns successfully" Apr 12 18:53:30.206553 env[1186]: time="2024-04-12T18:53:30.206450716Z" level=info msg="StartContainer for \"47ef1577e54b2e30bc78c8d78153e2565ad2045cdf425f0cbb1f5f01787873d8\" returns successfully" Apr 12 18:53:30.708619 kubelet[1742]: E0412 18:53:30.708494 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:30.723702 kubelet[1742]: E0412 18:53:30.723664 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:30.726960 kubelet[1742]: E0412 18:53:30.726929 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:30.796952 kubelet[1742]: I0412 18:53:30.796917 1742 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Apr 12 18:53:31.059000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:31.067159 kernel: kauditd_printk_skb: 559 callbacks suppressed Apr 12 18:53:31.067346 kernel: audit: type=1400 audit(1712948011.059:682): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:31.080917 kernel: audit: type=1400 audit(1712948011.062:683): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:31.062000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:31.062000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001088dc0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:31.091861 kernel: audit: type=1300 audit(1712948011.062:683): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001088dc0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:31.062000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:31.102200 kernel: audit: type=1327 audit(1712948011.062:683): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:31.059000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009dcd20 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:31.059000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:31.122086 kernel: audit: type=1300 audit(1712948011.059:682): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009dcd20 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:31.122238 kernel: audit: type=1327 audit(1712948011.059:682): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:31.743095 kubelet[1742]: E0412 18:53:31.737393 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:31.744615 kubelet[1742]: E0412 18:53:31.744457 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:31.750364 kubelet[1742]: E0412 18:53:31.745692 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:32.741314 kubelet[1742]: E0412 18:53:32.740675 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:33.758862 kubelet[1742]: E0412 18:53:33.757890 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:34.039000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:34.050426 kernel: audit: type=1400 audit(1712948014.039:684): avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:34.039000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004385a70 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:53:34.062429 kernel: audit: type=1300 audit(1712948014.039:684): arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004385a70 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:53:34.083435 kernel: audit: type=1327 audit(1712948014.039:684): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:53:34.083585 kernel: audit: type=1400 audit(1712948014.039:685): avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=521028 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:34.039000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:53:34.039000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=521028 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:34.039000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004385ad0 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:53:34.039000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:53:34.047000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:34.047000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00658c3a0 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:53:34.047000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:53:34.069000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=521034 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:34.069000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c006d237d0 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:53:34.069000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:53:34.071000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:34.071000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c0030dd140 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:53:34.071000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:53:34.071000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:34.071000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c0059519e0 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:53:34.071000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:53:34.185715 kubelet[1742]: E0412 18:53:34.185659 1742 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Apr 12 18:53:34.238888 kubelet[1742]: I0412 18:53:34.238838 1742 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Apr 12 18:53:34.540590 kubelet[1742]: I0412 18:53:34.540457 1742 apiserver.go:52] "Watching apiserver" Apr 12 18:53:34.635270 kubelet[1742]: I0412 18:53:34.635190 1742 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Apr 12 18:53:34.818789 kubelet[1742]: E0412 18:53:34.814934 1742 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:34.820063 kubelet[1742]: E0412 18:53:34.819921 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:38.679776 kubelet[1742]: E0412 18:53:38.679677 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:38.766387 kubelet[1742]: E0412 18:53:38.765168 1742 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:41.482374 systemd[1]: Reloading. Apr 12 18:53:41.740260 /usr/lib/systemd/system-generators/torcx-generator[2062]: time="2024-04-12T18:53:41Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.3 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.3 /var/lib/torcx/store]" Apr 12 18:53:41.740297 /usr/lib/systemd/system-generators/torcx-generator[2062]: time="2024-04-12T18:53:41Z" level=info msg="torcx already run" Apr 12 18:53:41.877815 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Apr 12 18:53:41.877846 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Apr 12 18:53:41.913534 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Apr 12 18:53:42.023761 kernel: kauditd_printk_skb: 14 callbacks suppressed Apr 12 18:53:42.023959 kernel: audit: type=1400 audit(1712948022.017:690): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.017000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.038978 kernel: audit: type=1400 audit(1712948022.017:691): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039163 kernel: audit: type=1400 audit(1712948022.018:692): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054519 kernel: audit: type=1400 audit(1712948022.018:693): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054722 kernel: audit: type=1400 audit(1712948022.018:694): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.063370 kernel: audit: type=1400 audit(1712948022.018:695): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.063586 kernel: audit: type=1400 audit(1712948022.018:696): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.068782 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Apr 12 18:53:42.068925 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Apr 12 18:53:42.068953 kernel: audit: backlog limit exceeded Apr 12 18:53:42.018000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.018000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.029000 audit: BPF prog-id=85 op=LOAD Apr 12 18:53:42.029000 audit: BPF prog-id=46 op=UNLOAD Apr 12 18:53:42.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039000 audit: BPF prog-id=86 op=LOAD Apr 12 18:53:42.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.039000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.047000 audit: BPF prog-id=87 op=LOAD Apr 12 18:53:42.047000 audit: BPF prog-id=47 op=UNLOAD Apr 12 18:53:42.047000 audit: BPF prog-id=48 op=UNLOAD Apr 12 18:53:42.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.050000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.050000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.052000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.052000 audit: BPF prog-id=88 op=LOAD Apr 12 18:53:42.052000 audit: BPF prog-id=81 op=UNLOAD Apr 12 18:53:42.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.054000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.058000 audit: BPF prog-id=89 op=LOAD Apr 12 18:53:42.058000 audit: BPF prog-id=49 op=UNLOAD Apr 12 18:53:42.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.066000 audit: BPF prog-id=90 op=LOAD Apr 12 18:53:42.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.072000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.072000 audit: BPF prog-id=92 op=LOAD Apr 12 18:53:42.072000 audit: BPF prog-id=61 op=UNLOAD Apr 12 18:53:42.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.075000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.082000 audit: BPF prog-id=93 op=LOAD Apr 12 18:53:42.082000 audit: BPF prog-id=52 op=UNLOAD Apr 12 18:53:42.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.082000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.082000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.083000 audit: BPF prog-id=94 op=LOAD Apr 12 18:53:42.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.083000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.083000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.089000 audit: BPF prog-id=95 op=LOAD Apr 12 18:53:42.092000 audit: BPF prog-id=53 op=UNLOAD Apr 12 18:53:42.093000 audit: BPF prog-id=54 op=UNLOAD Apr 12 18:53:42.093000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.105000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.106000 audit: BPF prog-id=96 op=LOAD Apr 12 18:53:42.115000 audit: BPF prog-id=65 op=UNLOAD Apr 12 18:53:42.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.122000 audit: BPF prog-id=97 op=LOAD Apr 12 18:53:42.123000 audit: BPF prog-id=73 op=UNLOAD Apr 12 18:53:42.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.134000 audit: BPF prog-id=98 op=LOAD Apr 12 18:53:42.135000 audit: BPF prog-id=55 op=UNLOAD Apr 12 18:53:42.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.136000 audit: BPF prog-id=99 op=LOAD Apr 12 18:53:42.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.139000 audit: BPF prog-id=100 op=LOAD Apr 12 18:53:42.139000 audit: BPF prog-id=56 op=UNLOAD Apr 12 18:53:42.139000 audit: BPF prog-id=57 op=UNLOAD Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.141000 audit: BPF prog-id=101 op=LOAD Apr 12 18:53:42.143000 audit: BPF prog-id=75 op=UNLOAD Apr 12 18:53:42.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.147000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.147000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.150000 audit: BPF prog-id=102 op=LOAD Apr 12 18:53:42.150000 audit: BPF prog-id=58 op=UNLOAD Apr 12 18:53:42.151000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.156000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.156000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.160000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.160000 audit: BPF prog-id=103 op=LOAD Apr 12 18:53:42.160000 audit: BPF prog-id=69 op=UNLOAD Apr 12 18:53:42.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.161000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.161000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit: BPF prog-id=104 op=LOAD Apr 12 18:53:42.163000 audit: BPF prog-id=59 op=UNLOAD Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.163000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.165000 audit: BPF prog-id=105 op=LOAD Apr 12 18:53:42.165000 audit: BPF prog-id=60 op=UNLOAD Apr 12 18:53:42.207648 kubelet[1742]: I0412 18:53:42.205349 1742 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Apr 12 18:53:42.205432 systemd[1]: Stopping kubelet.service... Apr 12 18:53:42.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:42.230091 systemd[1]: kubelet.service: Deactivated successfully. Apr 12 18:53:42.230355 systemd[1]: Stopped kubelet.service. Apr 12 18:53:42.230458 systemd[1]: kubelet.service: Consumed 2.089s CPU time. Apr 12 18:53:42.234458 systemd[1]: Started kubelet.service. Apr 12 18:53:42.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:42.360178 kubelet[2101]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:53:42.360653 kubelet[2101]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Apr 12 18:53:42.360730 kubelet[2101]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Apr 12 18:53:42.360924 kubelet[2101]: I0412 18:53:42.360879 2101 server.go:204] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Apr 12 18:53:42.369017 kubelet[2101]: I0412 18:53:42.368959 2101 server.go:487] "Kubelet version" kubeletVersion="v1.29.2" Apr 12 18:53:42.369376 kubelet[2101]: I0412 18:53:42.369359 2101 server.go:489] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Apr 12 18:53:42.369816 kubelet[2101]: I0412 18:53:42.369796 2101 server.go:919] "Client rotation is on, will bootstrap in background" Apr 12 18:53:42.371978 kubelet[2101]: I0412 18:53:42.371950 2101 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Apr 12 18:53:42.374645 kubelet[2101]: I0412 18:53:42.374594 2101 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Apr 12 18:53:42.396629 kubelet[2101]: I0412 18:53:42.396570 2101 server.go:745] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Apr 12 18:53:42.397173 kubelet[2101]: I0412 18:53:42.397154 2101 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Apr 12 18:53:42.397536 kubelet[2101]: I0412 18:53:42.397512 2101 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Apr 12 18:53:42.397730 kubelet[2101]: I0412 18:53:42.397709 2101 topology_manager.go:138] "Creating topology manager with none policy" Apr 12 18:53:42.397841 kubelet[2101]: I0412 18:53:42.397823 2101 container_manager_linux.go:301] "Creating device plugin manager" Apr 12 18:53:42.397989 kubelet[2101]: I0412 18:53:42.397970 2101 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:53:42.398218 kubelet[2101]: I0412 18:53:42.398203 2101 kubelet.go:396] "Attempting to sync node with API server" Apr 12 18:53:42.399219 kubelet[2101]: I0412 18:53:42.398846 2101 kubelet.go:301] "Adding static pod path" path="/etc/kubernetes/manifests" Apr 12 18:53:42.399390 kubelet[2101]: I0412 18:53:42.399369 2101 kubelet.go:312] "Adding apiserver pod source" Apr 12 18:53:42.415162 kubelet[2101]: I0412 18:53:42.415111 2101 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Apr 12 18:53:42.426235 kubelet[2101]: I0412 18:53:42.423443 2101 kuberuntime_manager.go:258] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Apr 12 18:53:42.426235 kubelet[2101]: I0412 18:53:42.424096 2101 kubelet.go:809] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Apr 12 18:53:42.426235 kubelet[2101]: I0412 18:53:42.425187 2101 server.go:1256] "Started kubelet" Apr 12 18:53:42.431000 audit[2101]: AVC avc: denied { mac_admin } for pid=2101 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.431000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:53:42.431000 audit[2101]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ea6e40 a1=c000ee8120 a2=c000ea6e10 a3=25 items=0 ppid=1 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:42.431000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:53:42.431000 audit[2101]: AVC avc: denied { mac_admin } for pid=2101 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.431000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:53:42.431000 audit[2101]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cc7220 a1=c000ee8138 a2=c000ea6ed0 a3=25 items=0 ppid=1 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:42.431000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:53:42.433348 kubelet[2101]: I0412 18:53:42.431912 2101 kubelet.go:1417] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Apr 12 18:53:42.433348 kubelet[2101]: I0412 18:53:42.431975 2101 kubelet.go:1421] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Apr 12 18:53:42.439276 kubelet[2101]: I0412 18:53:42.434356 2101 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Apr 12 18:53:42.439276 kubelet[2101]: I0412 18:53:42.435149 2101 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Apr 12 18:53:42.439276 kubelet[2101]: I0412 18:53:42.435230 2101 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Apr 12 18:53:42.439276 kubelet[2101]: I0412 18:53:42.437526 2101 volume_manager.go:291] "Starting Kubelet Volume Manager" Apr 12 18:53:42.442463 kubelet[2101]: I0412 18:53:42.440073 2101 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Apr 12 18:53:42.442463 kubelet[2101]: I0412 18:53:42.441049 2101 server.go:461] "Adding debug handlers to kubelet server" Apr 12 18:53:42.442463 kubelet[2101]: I0412 18:53:42.442241 2101 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Apr 12 18:53:42.443651 kubelet[2101]: I0412 18:53:42.443159 2101 reconciler_new.go:29] "Reconciler: start to sync state" Apr 12 18:53:42.455439 kubelet[2101]: I0412 18:53:42.445378 2101 factory.go:221] Registration of the systemd container factory successfully Apr 12 18:53:42.455439 kubelet[2101]: I0412 18:53:42.445658 2101 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Apr 12 18:53:42.455439 kubelet[2101]: E0412 18:53:42.447731 2101 kubelet.go:1462] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Apr 12 18:53:42.455439 kubelet[2101]: I0412 18:53:42.453299 2101 factory.go:221] Registration of the containerd container factory successfully Apr 12 18:53:42.487689 kubelet[2101]: I0412 18:53:42.487627 2101 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Apr 12 18:53:42.489361 kubelet[2101]: I0412 18:53:42.489326 2101 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Apr 12 18:53:42.489667 kubelet[2101]: I0412 18:53:42.489371 2101 status_manager.go:217] "Starting to sync pod status with apiserver" Apr 12 18:53:42.489667 kubelet[2101]: I0412 18:53:42.489460 2101 kubelet.go:2329] "Starting kubelet main sync loop" Apr 12 18:53:42.489667 kubelet[2101]: E0412 18:53:42.489525 2101 kubelet.go:2353] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Apr 12 18:53:42.530092 kubelet[2101]: I0412 18:53:42.530011 2101 cpu_manager.go:214] "Starting CPU manager" policy="none" Apr 12 18:53:42.530092 kubelet[2101]: I0412 18:53:42.530055 2101 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Apr 12 18:53:42.530092 kubelet[2101]: I0412 18:53:42.530092 2101 state_mem.go:36] "Initialized new in-memory state store" Apr 12 18:53:42.530392 kubelet[2101]: I0412 18:53:42.530366 2101 state_mem.go:88] "Updated default CPUSet" cpuSet="" Apr 12 18:53:42.530446 kubelet[2101]: I0412 18:53:42.530398 2101 state_mem.go:96] "Updated CPUSet assignments" assignments={} Apr 12 18:53:42.530446 kubelet[2101]: I0412 18:53:42.530430 2101 policy_none.go:49] "None policy: Start" Apr 12 18:53:42.535730 kubelet[2101]: I0412 18:53:42.535674 2101 memory_manager.go:170] "Starting memorymanager" policy="None" Apr 12 18:53:42.535730 kubelet[2101]: I0412 18:53:42.535739 2101 state_mem.go:35] "Initializing new in-memory state store" Apr 12 18:53:42.536114 kubelet[2101]: I0412 18:53:42.536082 2101 state_mem.go:75] "Updated machine memory state" Apr 12 18:53:42.547891 kubelet[2101]: I0412 18:53:42.547812 2101 manager.go:479] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Apr 12 18:53:42.548136 kubelet[2101]: I0412 18:53:42.547931 2101 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Apr 12 18:53:42.547000 audit[2101]: AVC avc: denied { mac_admin } for pid=2101 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:42.547000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Apr 12 18:53:42.547000 audit[2101]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000fb40f0 a1=c00051ed20 a2=c000fb40c0 a3=25 items=0 ppid=1 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:42.547000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Apr 12 18:53:42.548522 kubelet[2101]: I0412 18:53:42.548279 2101 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Apr 12 18:53:42.562888 kubelet[2101]: I0412 18:53:42.562824 2101 kubelet_node_status.go:73] "Attempting to register node" node="localhost" Apr 12 18:53:42.586060 kubelet[2101]: I0412 18:53:42.585999 2101 kubelet_node_status.go:112] "Node was previously registered" node="localhost" Apr 12 18:53:42.586328 kubelet[2101]: I0412 18:53:42.586180 2101 kubelet_node_status.go:76] "Successfully registered node" node="localhost" Apr 12 18:53:42.590606 kubelet[2101]: I0412 18:53:42.590063 2101 topology_manager.go:215] "Topology Admit Handler" podUID="e513259e31a57220fbd52862b607b224" podNamespace="kube-system" podName="kube-apiserver-localhost" Apr 12 18:53:42.590606 kubelet[2101]: I0412 18:53:42.590188 2101 topology_manager.go:215] "Topology Admit Handler" podUID="f4e8212a5db7e0401319814fa9ad65c9" podNamespace="kube-system" podName="kube-controller-manager-localhost" Apr 12 18:53:42.590606 kubelet[2101]: I0412 18:53:42.590232 2101 topology_manager.go:215] "Topology Admit Handler" podUID="5d5c5aff921df216fcba2c51c322ceb1" podNamespace="kube-system" podName="kube-scheduler-localhost" Apr 12 18:53:42.733314 kubelet[2101]: E0412 18:53:42.733038 2101 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Apr 12 18:53:42.743691 kubelet[2101]: I0412 18:53:42.743614 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/e513259e31a57220fbd52862b607b224-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"e513259e31a57220fbd52862b607b224\") " pod="kube-system/kube-apiserver-localhost" Apr 12 18:53:42.743955 kubelet[2101]: I0412 18:53:42.743705 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:42.743955 kubelet[2101]: I0412 18:53:42.743879 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:42.744081 kubelet[2101]: I0412 18:53:42.743960 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:42.744081 kubelet[2101]: I0412 18:53:42.743997 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/e513259e31a57220fbd52862b607b224-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"e513259e31a57220fbd52862b607b224\") " pod="kube-system/kube-apiserver-localhost" Apr 12 18:53:42.744081 kubelet[2101]: I0412 18:53:42.744044 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/e513259e31a57220fbd52862b607b224-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"e513259e31a57220fbd52862b607b224\") " pod="kube-system/kube-apiserver-localhost" Apr 12 18:53:42.744230 kubelet[2101]: I0412 18:53:42.744085 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:42.744230 kubelet[2101]: I0412 18:53:42.744138 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/f4e8212a5db7e0401319814fa9ad65c9-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"f4e8212a5db7e0401319814fa9ad65c9\") " pod="kube-system/kube-controller-manager-localhost" Apr 12 18:53:42.744230 kubelet[2101]: I0412 18:53:42.744171 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5d5c5aff921df216fcba2c51c322ceb1-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"5d5c5aff921df216fcba2c51c322ceb1\") " pod="kube-system/kube-scheduler-localhost" Apr 12 18:53:42.904553 kubelet[2101]: E0412 18:53:42.904509 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:42.906912 kubelet[2101]: E0412 18:53:42.906367 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:43.035425 kubelet[2101]: E0412 18:53:43.035333 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:43.421799 kubelet[2101]: I0412 18:53:43.416702 2101 apiserver.go:52] "Watching apiserver" Apr 12 18:53:43.443054 kubelet[2101]: I0412 18:53:43.442987 2101 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Apr 12 18:53:43.506920 kubelet[2101]: E0412 18:53:43.502931 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:43.506920 kubelet[2101]: E0412 18:53:43.503734 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:43.665247 kubelet[2101]: E0412 18:53:43.665181 2101 kubelet.go:1921] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Apr 12 18:53:43.670076 kubelet[2101]: I0412 18:53:43.667025 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.6669453669999998 podStartE2EDuration="1.666945367s" podCreationTimestamp="2024-04-12 18:53:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:53:43.666620625 +0000 UTC m=+1.426298804" watchObservedRunningTime="2024-04-12 18:53:43.666945367 +0000 UTC m=+1.426623546" Apr 12 18:53:43.681000 kubelet[2101]: E0412 18:53:43.680792 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:43.904086 kubelet[2101]: I0412 18:53:43.904013 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=5.903955034 podStartE2EDuration="5.903955034s" podCreationTimestamp="2024-04-12 18:53:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:53:43.849099685 +0000 UTC m=+1.608777864" watchObservedRunningTime="2024-04-12 18:53:43.903955034 +0000 UTC m=+1.663633223" Apr 12 18:53:44.509683 kubelet[2101]: E0412 18:53:44.509602 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:47.090864 kubelet[2101]: E0412 18:53:47.087944 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:47.138805 kubelet[2101]: I0412 18:53:47.137271 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=5.137210462 podStartE2EDuration="5.137210462s" podCreationTimestamp="2024-04-12 18:53:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:53:43.904251393 +0000 UTC m=+1.663929572" watchObservedRunningTime="2024-04-12 18:53:47.137210462 +0000 UTC m=+4.896888641" Apr 12 18:53:47.394105 kernel: kauditd_printk_skb: 282 callbacks suppressed Apr 12 18:53:47.394284 kernel: audit: type=1106 audit(1712948027.392:922): pid=1313 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:53:47.392000 audit[1313]: USER_END pid=1313 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:53:47.391103 sudo[1313]: pam_unix(sudo:session): session closed for user root Apr 12 18:53:47.392000 audit[1313]: CRED_DISP pid=1313 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:53:47.418714 sshd[1308]: pam_unix(sshd:session): session closed for user core Apr 12 18:53:47.421641 kernel: audit: type=1104 audit(1712948027.392:923): pid=1313 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Apr 12 18:53:47.420000 audit[1308]: USER_END pid=1308 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:53:47.423185 systemd[1]: sshd@6-10.0.0.120:22-10.0.0.1:58704.service: Deactivated successfully. Apr 12 18:53:47.424175 systemd[1]: session-7.scope: Deactivated successfully. Apr 12 18:53:47.424352 systemd[1]: session-7.scope: Consumed 7.012s CPU time. Apr 12 18:53:47.427929 systemd-logind[1168]: Session 7 logged out. Waiting for processes to exit. Apr 12 18:53:47.431197 systemd-logind[1168]: Removed session 7. Apr 12 18:53:47.420000 audit[1308]: CRED_DISP pid=1308 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:53:47.444453 kernel: audit: type=1106 audit(1712948027.420:924): pid=1308 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:53:47.444652 kernel: audit: type=1104 audit(1712948027.420:925): pid=1308 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:53:47.444694 kernel: audit: type=1131 audit(1712948027.422:926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.120:22-10.0.0.1:58704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:47.422000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.120:22-10.0.0.1:58704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:53:47.582453 kubelet[2101]: E0412 18:53:47.579825 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:47.653213 kubelet[2101]: E0412 18:53:47.653073 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:48.587200 kubelet[2101]: E0412 18:53:48.586605 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:51.037736 kubelet[2101]: E0412 18:53:51.037687 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:51.601733 kubelet[2101]: E0412 18:53:51.597048 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:51.966000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Apr 12 18:53:51.981730 kernel: audit: type=1400 audit(1712948031.966:927): avc: denied { watch } for pid=1962 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=521060 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Apr 12 18:53:51.981892 kernel: audit: type=1300 audit(1712948031.966:927): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000aa79c0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:51.966000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000aa79c0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:51.966000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:51.996739 kernel: audit: type=1327 audit(1712948031.966:927): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:52.964000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:52.964000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014a0940 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:53.013566 kernel: audit: type=1400 audit(1712948032.964:928): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:53.013778 kernel: audit: type=1300 audit(1712948032.964:928): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014a0940 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:53.013814 kernel: audit: type=1327 audit(1712948032.964:928): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:52.964000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:53.038983 kernel: audit: type=1400 audit(1712948032.964:929): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:52.964000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:53.053682 kernel: audit: type=1300 audit(1712948032.964:929): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014a0b00 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:52.964000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014a0b00 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:53.067297 kernel: audit: type=1327 audit(1712948032.964:929): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:52.964000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:52.981000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:53.089921 kernel: audit: type=1400 audit(1712948032.981:930): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:53.090135 kernel: audit: type=1300 audit(1712948032.981:930): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001588e20 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:52.981000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001588e20 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:52.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:53.102741 kernel: audit: type=1327 audit(1712948032.981:930): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:53.102927 kernel: audit: type=1400 audit(1712948032.981:931): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:52.981000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:53:52.981000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001588e60 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:53:52.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:53:53.303066 kubelet[2101]: I0412 18:53:53.302028 2101 kuberuntime_manager.go:1529] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Apr 12 18:53:53.303066 kubelet[2101]: I0412 18:53:53.302732 2101 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Apr 12 18:53:53.303558 env[1186]: time="2024-04-12T18:53:53.302510470Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Apr 12 18:53:54.071560 kubelet[2101]: I0412 18:53:54.071516 2101 topology_manager.go:215] "Topology Admit Handler" podUID="4f2c08dd-8a69-47c0-9853-b0d99b1a74cd" podNamespace="kube-system" podName="kube-proxy-2qd96" Apr 12 18:53:54.088812 systemd[1]: Created slice kubepods-besteffort-pod4f2c08dd_8a69_47c0_9853_b0d99b1a74cd.slice. Apr 12 18:53:54.111481 kubelet[2101]: I0412 18:53:54.111422 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/4f2c08dd-8a69-47c0-9853-b0d99b1a74cd-kube-proxy\") pod \"kube-proxy-2qd96\" (UID: \"4f2c08dd-8a69-47c0-9853-b0d99b1a74cd\") " pod="kube-system/kube-proxy-2qd96" Apr 12 18:53:54.111481 kubelet[2101]: I0412 18:53:54.111482 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4f2c08dd-8a69-47c0-9853-b0d99b1a74cd-xtables-lock\") pod \"kube-proxy-2qd96\" (UID: \"4f2c08dd-8a69-47c0-9853-b0d99b1a74cd\") " pod="kube-system/kube-proxy-2qd96" Apr 12 18:53:54.111481 kubelet[2101]: I0412 18:53:54.111505 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4f2c08dd-8a69-47c0-9853-b0d99b1a74cd-lib-modules\") pod \"kube-proxy-2qd96\" (UID: \"4f2c08dd-8a69-47c0-9853-b0d99b1a74cd\") " pod="kube-system/kube-proxy-2qd96" Apr 12 18:53:54.111825 kubelet[2101]: I0412 18:53:54.111531 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9wv9b\" (UniqueName: \"kubernetes.io/projected/4f2c08dd-8a69-47c0-9853-b0d99b1a74cd-kube-api-access-9wv9b\") pod \"kube-proxy-2qd96\" (UID: \"4f2c08dd-8a69-47c0-9853-b0d99b1a74cd\") " pod="kube-system/kube-proxy-2qd96" Apr 12 18:53:54.350420 kubelet[2101]: I0412 18:53:54.346413 2101 topology_manager.go:215] "Topology Admit Handler" podUID="f08c656b-7288-4277-9d67-015ee358c198" podNamespace="tigera-operator" podName="tigera-operator-6bfc79cb9c-84k8h" Apr 12 18:53:54.357265 kubelet[2101]: W0412 18:53:54.357170 2101 reflector.go:539] object-"tigera-operator"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'localhost' and this object Apr 12 18:53:54.358138 kubelet[2101]: E0412 18:53:54.357550 2101 reflector.go:147] object-"tigera-operator"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "tigera-operator": no relationship found between node 'localhost' and this object Apr 12 18:53:54.381372 systemd[1]: Created slice kubepods-besteffort-podf08c656b_7288_4277_9d67_015ee358c198.slice. Apr 12 18:53:54.415741 kubelet[2101]: I0412 18:53:54.415615 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z4hxx\" (UniqueName: \"kubernetes.io/projected/f08c656b-7288-4277-9d67-015ee358c198-kube-api-access-z4hxx\") pod \"tigera-operator-6bfc79cb9c-84k8h\" (UID: \"f08c656b-7288-4277-9d67-015ee358c198\") " pod="tigera-operator/tigera-operator-6bfc79cb9c-84k8h" Apr 12 18:53:54.415977 kubelet[2101]: I0412 18:53:54.415822 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/f08c656b-7288-4277-9d67-015ee358c198-var-lib-calico\") pod \"tigera-operator-6bfc79cb9c-84k8h\" (UID: \"f08c656b-7288-4277-9d67-015ee358c198\") " pod="tigera-operator/tigera-operator-6bfc79cb9c-84k8h" Apr 12 18:53:54.424475 kubelet[2101]: E0412 18:53:54.422292 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:54.439040 env[1186]: time="2024-04-12T18:53:54.425056821Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-2qd96,Uid:4f2c08dd-8a69-47c0-9853-b0d99b1a74cd,Namespace:kube-system,Attempt:0,}" Apr 12 18:53:54.499332 env[1186]: time="2024-04-12T18:53:54.497216473Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:53:54.499332 env[1186]: time="2024-04-12T18:53:54.497276978Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:53:54.499332 env[1186]: time="2024-04-12T18:53:54.497290914Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:53:54.499332 env[1186]: time="2024-04-12T18:53:54.497578845Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/115b0b8ac72dcea07acc2128c0f1a5ecfefbac861aa8242802f944b8d5c49894 pid=2195 runtime=io.containerd.runc.v2 Apr 12 18:53:54.529477 systemd[1]: run-containerd-runc-k8s.io-115b0b8ac72dcea07acc2128c0f1a5ecfefbac861aa8242802f944b8d5c49894-runc.eCj19i.mount: Deactivated successfully. Apr 12 18:53:54.534687 systemd[1]: Started cri-containerd-115b0b8ac72dcea07acc2128c0f1a5ecfefbac861aa8242802f944b8d5c49894.scope. Apr 12 18:53:54.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.564000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.565000 audit: BPF prog-id=106 op=LOAD Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131356230623861633732646365613037616363323132386330663161 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131356230623861633732646365613037616363323132386330663161 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.567000 audit: BPF prog-id=107 op=LOAD Apr 12 18:53:54.567000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000355ce0 items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.567000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131356230623861633732646365613037616363323132386330663161 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit: BPF prog-id=108 op=LOAD Apr 12 18:53:54.573000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000355d28 items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131356230623861633732646365613037616363323132386330663161 Apr 12 18:53:54.573000 audit: BPF prog-id=108 op=UNLOAD Apr 12 18:53:54.573000 audit: BPF prog-id=107 op=UNLOAD Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { perfmon } for pid=2206 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit[2206]: AVC avc: denied { bpf } for pid=2206 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.573000 audit: BPF prog-id=109 op=LOAD Apr 12 18:53:54.573000 audit[2206]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003bc138 items=0 ppid=2195 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131356230623861633732646365613037616363323132386330663161 Apr 12 18:53:54.622313 env[1186]: time="2024-04-12T18:53:54.622112372Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-2qd96,Uid:4f2c08dd-8a69-47c0-9853-b0d99b1a74cd,Namespace:kube-system,Attempt:0,} returns sandbox id \"115b0b8ac72dcea07acc2128c0f1a5ecfefbac861aa8242802f944b8d5c49894\"" Apr 12 18:53:54.628355 kubelet[2101]: E0412 18:53:54.628007 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:54.633504 env[1186]: time="2024-04-12T18:53:54.633274106Z" level=info msg="CreateContainer within sandbox \"115b0b8ac72dcea07acc2128c0f1a5ecfefbac861aa8242802f944b8d5c49894\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Apr 12 18:53:54.687775 env[1186]: time="2024-04-12T18:53:54.687669139Z" level=info msg="CreateContainer within sandbox \"115b0b8ac72dcea07acc2128c0f1a5ecfefbac861aa8242802f944b8d5c49894\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"ea54f0f16f306795da7b424102a803d90eba35a885460f6b464c0d8204fb13db\"" Apr 12 18:53:54.690464 env[1186]: time="2024-04-12T18:53:54.688619605Z" level=info msg="StartContainer for \"ea54f0f16f306795da7b424102a803d90eba35a885460f6b464c0d8204fb13db\"" Apr 12 18:53:54.728270 systemd[1]: Started cri-containerd-ea54f0f16f306795da7b424102a803d90eba35a885460f6b464c0d8204fb13db.scope. Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=7f3a70736b98 items=0 ppid=2195 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561353466306631366633303637393564613762343234313032613830 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.765000 audit: BPF prog-id=110 op=LOAD Apr 12 18:53:54.765000 audit[2237]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c0001fe308 items=0 ppid=2195 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.765000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561353466306631366633303637393564613762343234313032613830 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit: BPF prog-id=111 op=LOAD Apr 12 18:53:54.766000 audit[2237]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c0001fe358 items=0 ppid=2195 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561353466306631366633303637393564613762343234313032613830 Apr 12 18:53:54.766000 audit: BPF prog-id=111 op=UNLOAD Apr 12 18:53:54.766000 audit: BPF prog-id=110 op=UNLOAD Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { perfmon } for pid=2237 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit[2237]: AVC avc: denied { bpf } for pid=2237 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:54.766000 audit: BPF prog-id=112 op=LOAD Apr 12 18:53:54.766000 audit[2237]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c0001fe3e8 items=0 ppid=2195 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.766000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561353466306631366633303637393564613762343234313032613830 Apr 12 18:53:54.818823 env[1186]: time="2024-04-12T18:53:54.815756925Z" level=info msg="StartContainer for \"ea54f0f16f306795da7b424102a803d90eba35a885460f6b464c0d8204fb13db\" returns successfully" Apr 12 18:53:54.971000 audit[2291]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2291 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:54.971000 audit[2291]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd575914f0 a2=0 a3=7ffd575914dc items=0 ppid=2248 pid=2291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.971000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Apr 12 18:53:54.977000 audit[2290]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2290 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:54.977000 audit[2290]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff9df7fc60 a2=0 a3=7fff9df7fc4c items=0 ppid=2248 pid=2290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.977000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Apr 12 18:53:54.978000 audit[2292]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_chain pid=2292 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:54.978000 audit[2292]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe39890130 a2=0 a3=7ffe3989011c items=0 ppid=2248 pid=2292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.978000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Apr 12 18:53:54.979000 audit[2293]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2293 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:54.979000 audit[2293]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdebd72bf0 a2=0 a3=7ffdebd72bdc items=0 ppid=2248 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.979000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Apr 12 18:53:54.983000 audit[2294]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:54.983000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffce4b4ffd0 a2=0 a3=7ffce4b4ffbc items=0 ppid=2248 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.983000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Apr 12 18:53:54.989000 audit[2295]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:54.989000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeb795d080 a2=0 a3=7ffeb795d06c items=0 ppid=2248 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:54.989000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Apr 12 18:53:55.073000 audit[2296]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.073000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff3f3c9410 a2=0 a3=7fff3f3c93fc items=0 ppid=2248 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.073000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Apr 12 18:53:55.082000 audit[2298]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.082000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff9ae860e0 a2=0 a3=7fff9ae860cc items=0 ppid=2248 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.082000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Apr 12 18:53:55.098000 audit[2301]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2301 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.098000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffc6855bef0 a2=0 a3=7ffc6855bedc items=0 ppid=2248 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.098000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Apr 12 18:53:55.102000 audit[2302]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.102000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffd0e02a60 a2=0 a3=7fffd0e02a4c items=0 ppid=2248 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.102000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Apr 12 18:53:55.117000 audit[2304]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.117000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcfbcb7ec0 a2=0 a3=7ffcfbcb7eac items=0 ppid=2248 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.117000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Apr 12 18:53:55.146000 audit[2305]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.146000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffefe93ef60 a2=0 a3=7ffefe93ef4c items=0 ppid=2248 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.146000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Apr 12 18:53:55.166000 audit[2307]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2307 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.166000 audit[2307]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd48824fa0 a2=0 a3=7ffd48824f8c items=0 ppid=2248 pid=2307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.166000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Apr 12 18:53:55.176000 audit[2310]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.176000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff6d5fa570 a2=0 a3=7fff6d5fa55c items=0 ppid=2248 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.176000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Apr 12 18:53:55.188000 audit[2311]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.188000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1e100980 a2=0 a3=7fff1e10096c items=0 ppid=2248 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.188000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Apr 12 18:53:55.205000 audit[2313]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.205000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc438db180 a2=0 a3=7ffc438db16c items=0 ppid=2248 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.205000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Apr 12 18:53:55.207000 audit[2314]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.207000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd0d953790 a2=0 a3=7ffd0d95377c items=0 ppid=2248 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.207000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Apr 12 18:53:55.224000 audit[2316]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.224000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcd142abe0 a2=0 a3=7ffcd142abcc items=0 ppid=2248 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.224000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Apr 12 18:53:55.236000 audit[2319]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.236000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdc78c2500 a2=0 a3=7ffdc78c24ec items=0 ppid=2248 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.236000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Apr 12 18:53:55.249000 audit[2322]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.249000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff0b8f5440 a2=0 a3=7fff0b8f542c items=0 ppid=2248 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.249000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Apr 12 18:53:55.255000 audit[2323]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.255000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffca7e1caf0 a2=0 a3=7ffca7e1cadc items=0 ppid=2248 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.255000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Apr 12 18:53:55.259000 audit[2325]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.259000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe9c20ffc0 a2=0 a3=7ffe9c20ffac items=0 ppid=2248 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.259000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:53:55.278000 audit[2328]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.278000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd1cb75650 a2=0 a3=7ffd1cb7563c items=0 ppid=2248 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.278000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:53:55.284000 audit[2329]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.284000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe5870bfe0 a2=0 a3=7ffe5870bfcc items=0 ppid=2248 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.284000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Apr 12 18:53:55.289000 audit[2331]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Apr 12 18:53:55.289000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffef0ffb900 a2=0 a3=7ffef0ffb8ec items=0 ppid=2248 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.289000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Apr 12 18:53:55.366000 audit[2337]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:53:55.366000 audit[2337]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffee033ae90 a2=0 a3=7ffee033ae7c items=0 ppid=2248 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.366000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:53:55.380000 audit[2337]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:53:55.380000 audit[2337]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffee033ae90 a2=0 a3=7ffee033ae7c items=0 ppid=2248 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.380000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:53:55.382000 audit[2342]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2342 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.382000 audit[2342]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc731058f0 a2=0 a3=7ffc731058dc items=0 ppid=2248 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.382000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Apr 12 18:53:55.386000 audit[2344]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.386000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcd2c9a0d0 a2=0 a3=7ffcd2c9a0bc items=0 ppid=2248 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.386000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Apr 12 18:53:55.400000 audit[2347]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2347 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.400000 audit[2347]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff5971ed40 a2=0 a3=7fff5971ed2c items=0 ppid=2248 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.400000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Apr 12 18:53:55.401000 audit[2348]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.401000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd9efdf6e0 a2=0 a3=7ffd9efdf6cc items=0 ppid=2248 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.401000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Apr 12 18:53:55.404000 audit[2350]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.404000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd244d2f60 a2=0 a3=7ffd244d2f4c items=0 ppid=2248 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.404000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Apr 12 18:53:55.405000 audit[2351]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2351 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.405000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd577e49a0 a2=0 a3=7ffd577e498c items=0 ppid=2248 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.405000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Apr 12 18:53:55.409000 audit[2353]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.409000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd4f6e5370 a2=0 a3=7ffd4f6e535c items=0 ppid=2248 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Apr 12 18:53:55.421000 audit[2356]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2356 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.421000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd0b826090 a2=0 a3=7ffd0b82607c items=0 ppid=2248 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.421000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Apr 12 18:53:55.423000 audit[2357]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.423000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0c941cc0 a2=0 a3=7ffc0c941cac items=0 ppid=2248 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.423000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Apr 12 18:53:55.426000 audit[2359]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.426000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff220db960 a2=0 a3=7fff220db94c items=0 ppid=2248 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.426000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Apr 12 18:53:55.434000 audit[2360]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.434000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff3e189280 a2=0 a3=7fff3e18926c items=0 ppid=2248 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.434000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Apr 12 18:53:55.440000 audit[2362]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.440000 audit[2362]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc76b6ede0 a2=0 a3=7ffc76b6edcc items=0 ppid=2248 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.440000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Apr 12 18:53:55.452000 audit[2365]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.452000 audit[2365]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffea9ec1bb0 a2=0 a3=7ffea9ec1b9c items=0 ppid=2248 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.452000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Apr 12 18:53:55.458000 audit[2368]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.458000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffb8aa0090 a2=0 a3=7fffb8aa007c items=0 ppid=2248 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.458000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Apr 12 18:53:55.460000 audit[2369]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.460000 audit[2369]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffeb68bfed0 a2=0 a3=7ffeb68bfebc items=0 ppid=2248 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.460000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Apr 12 18:53:55.471000 audit[2371]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2371 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.471000 audit[2371]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff3a3beb60 a2=0 a3=7fff3a3beb4c items=0 ppid=2248 pid=2371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.471000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:53:55.481000 audit[2374]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2374 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.481000 audit[2374]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fffa47d6670 a2=0 a3=7fffa47d665c items=0 ppid=2248 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.481000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Apr 12 18:53:55.484000 audit[2375]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2375 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.484000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff59be1ba0 a2=0 a3=7fff59be1b8c items=0 ppid=2248 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.484000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Apr 12 18:53:55.488000 audit[2377]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2377 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.488000 audit[2377]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffff86f5660 a2=0 a3=7ffff86f564c items=0 ppid=2248 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.488000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Apr 12 18:53:55.496000 audit[2378]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2378 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.496000 audit[2378]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff06a54060 a2=0 a3=7fff06a5404c items=0 ppid=2248 pid=2378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.496000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Apr 12 18:53:55.500000 audit[2380]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.500000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff07a803a0 a2=0 a3=7fff07a8038c items=0 ppid=2248 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.500000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:53:55.510000 audit[2383]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2383 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Apr 12 18:53:55.510000 audit[2383]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffa6d515d0 a2=0 a3=7fffa6d515bc items=0 ppid=2248 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.510000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Apr 12 18:53:55.514000 audit[2385]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Apr 12 18:53:55.514000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=2004 a0=3 a1=7fffee80d640 a2=0 a3=7fffee80d62c items=0 ppid=2248 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.514000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:53:55.515000 audit[2385]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Apr 12 18:53:55.515000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fffee80d640 a2=0 a3=7fffee80d62c items=0 ppid=2248 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:55.515000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:53:55.540162 kubelet[2101]: E0412 18:53:55.540073 2101 projected.go:294] Couldn't get configMap tigera-operator/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Apr 12 18:53:55.540162 kubelet[2101]: E0412 18:53:55.540161 2101 projected.go:200] Error preparing data for projected volume kube-api-access-z4hxx for pod tigera-operator/tigera-operator-6bfc79cb9c-84k8h: failed to sync configmap cache: timed out waiting for the condition Apr 12 18:53:55.540881 kubelet[2101]: E0412 18:53:55.540261 2101 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/f08c656b-7288-4277-9d67-015ee358c198-kube-api-access-z4hxx podName:f08c656b-7288-4277-9d67-015ee358c198 nodeName:}" failed. No retries permitted until 2024-04-12 18:53:56.040229305 +0000 UTC m=+13.799907494 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-z4hxx" (UniqueName: "kubernetes.io/projected/f08c656b-7288-4277-9d67-015ee358c198-kube-api-access-z4hxx") pod "tigera-operator-6bfc79cb9c-84k8h" (UID: "f08c656b-7288-4277-9d67-015ee358c198") : failed to sync configmap cache: timed out waiting for the condition Apr 12 18:53:55.620952 kubelet[2101]: E0412 18:53:55.620792 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:53:56.192634 env[1186]: time="2024-04-12T18:53:56.190779417Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-6bfc79cb9c-84k8h,Uid:f08c656b-7288-4277-9d67-015ee358c198,Namespace:tigera-operator,Attempt:0,}" Apr 12 18:53:56.275688 env[1186]: time="2024-04-12T18:53:56.271880161Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:53:56.275688 env[1186]: time="2024-04-12T18:53:56.271945725Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:53:56.275688 env[1186]: time="2024-04-12T18:53:56.271962216Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:53:56.275688 env[1186]: time="2024-04-12T18:53:56.272179764Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d88e1ac69a020b194a371d7046cb9d34784221b317c369f0902b336f1dbaecc6 pid=2395 runtime=io.containerd.runc.v2 Apr 12 18:53:56.321844 systemd[1]: run-containerd-runc-k8s.io-d88e1ac69a020b194a371d7046cb9d34784221b317c369f0902b336f1dbaecc6-runc.xx5OAD.mount: Deactivated successfully. Apr 12 18:53:56.323843 systemd[1]: Started cri-containerd-d88e1ac69a020b194a371d7046cb9d34784221b317c369f0902b336f1dbaecc6.scope. Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.353000 audit: BPF prog-id=113 op=LOAD Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2395 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:56.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438386531616336396130323062313934613337316437303436636239 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=2395 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:56.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438386531616336396130323062313934613337316437303436636239 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.354000 audit: BPF prog-id=114 op=LOAD Apr 12 18:53:56.354000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000265df0 items=0 ppid=2395 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:56.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438386531616336396130323062313934613337316437303436636239 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit: BPF prog-id=115 op=LOAD Apr 12 18:53:56.355000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000265e38 items=0 ppid=2395 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:56.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438386531616336396130323062313934613337316437303436636239 Apr 12 18:53:56.355000 audit: BPF prog-id=115 op=UNLOAD Apr 12 18:53:56.355000 audit: BPF prog-id=114 op=UNLOAD Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { perfmon } for pid=2405 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit[2405]: AVC avc: denied { bpf } for pid=2405 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:56.355000 audit: BPF prog-id=116 op=LOAD Apr 12 18:53:56.355000 audit[2405]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0003cc248 items=0 ppid=2395 pid=2405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:56.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6438386531616336396130323062313934613337316437303436636239 Apr 12 18:53:56.404776 env[1186]: time="2024-04-12T18:53:56.404463089Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-6bfc79cb9c-84k8h,Uid:f08c656b-7288-4277-9d67-015ee358c198,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"d88e1ac69a020b194a371d7046cb9d34784221b317c369f0902b336f1dbaecc6\"" Apr 12 18:53:56.410481 env[1186]: time="2024-04-12T18:53:56.409812559Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.7\"" Apr 12 18:53:59.261270 env[1186]: time="2024-04-12T18:53:59.260089265Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.32.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:59.264646 env[1186]: time="2024-04-12T18:53:59.264450485Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ac4b460566ae96b5d23f41e9a3b5dd3f1a6d0ed6d7f627076a05e38e74701a66,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:59.270297 env[1186]: time="2024-04-12T18:53:59.270208960Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.32.7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:59.271236 env[1186]: time="2024-04-12T18:53:59.271188419Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:cc11f43967358b5c5eccfc5da449498c6d80bb0d4831feb5b7904c7b1ca905bd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:53:59.273116 env[1186]: time="2024-04-12T18:53:59.273063129Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.32.7\" returns image reference \"sha256:ac4b460566ae96b5d23f41e9a3b5dd3f1a6d0ed6d7f627076a05e38e74701a66\"" Apr 12 18:53:59.279252 env[1186]: time="2024-04-12T18:53:59.279188873Z" level=info msg="CreateContainer within sandbox \"d88e1ac69a020b194a371d7046cb9d34784221b317c369f0902b336f1dbaecc6\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Apr 12 18:53:59.330839 env[1186]: time="2024-04-12T18:53:59.330701381Z" level=info msg="CreateContainer within sandbox \"d88e1ac69a020b194a371d7046cb9d34784221b317c369f0902b336f1dbaecc6\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"60ea693d5bd4385907596f3397ce4b9d579ca6a8f4b64086f630ed9f2819ca43\"" Apr 12 18:53:59.331665 env[1186]: time="2024-04-12T18:53:59.331617551Z" level=info msg="StartContainer for \"60ea693d5bd4385907596f3397ce4b9d579ca6a8f4b64086f630ed9f2819ca43\"" Apr 12 18:53:59.385806 systemd[1]: Started cri-containerd-60ea693d5bd4385907596f3397ce4b9d579ca6a8f4b64086f630ed9f2819ca43.scope. Apr 12 18:53:59.428508 kernel: kauditd_printk_skb: 312 callbacks suppressed Apr 12 18:53:59.428717 kernel: audit: type=1400 audit(1712948039.410:1025): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.428755 kernel: audit: type=1400 audit(1712948039.410:1026): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.428796 kernel: audit: type=1400 audit(1712948039.410:1027): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.440442 kernel: audit: type=1400 audit(1712948039.410:1028): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.447618 kernel: audit: type=1400 audit(1712948039.410:1029): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.453510 kernel: audit: type=1400 audit(1712948039.410:1030): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.453721 kernel: audit: type=1400 audit(1712948039.410:1031): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.457139 kernel: audit: type=1400 audit(1712948039.410:1032): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.410000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.463811 kernel: audit: type=1400 audit(1712948039.410:1033): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.410000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.434000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.478029 kernel: audit: type=1400 audit(1712948039.434:1034): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.434000 audit: BPF prog-id=117 op=LOAD Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2395 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:59.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630656136393364356264343338353930373539366633333937636534 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2395 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:59.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630656136393364356264343338353930373539366633333937636534 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.435000 audit: BPF prog-id=118 op=LOAD Apr 12 18:53:59.435000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000329970 items=0 ppid=2395 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:59.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630656136393364356264343338353930373539366633333937636534 Apr 12 18:53:59.442000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.442000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.442000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.442000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.442000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.442000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.442000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.442000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.442000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.442000 audit: BPF prog-id=119 op=LOAD Apr 12 18:53:59.442000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003299b8 items=0 ppid=2395 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:59.442000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630656136393364356264343338353930373539366633333937636534 Apr 12 18:53:59.451000 audit: BPF prog-id=119 op=UNLOAD Apr 12 18:53:59.451000 audit: BPF prog-id=118 op=UNLOAD Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { perfmon } for pid=2436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit[2436]: AVC avc: denied { bpf } for pid=2436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:53:59.451000 audit: BPF prog-id=120 op=LOAD Apr 12 18:53:59.451000 audit[2436]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000329dc8 items=0 ppid=2395 pid=2436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:53:59.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630656136393364356264343338353930373539366633333937636534 Apr 12 18:53:59.539442 env[1186]: time="2024-04-12T18:53:59.539055510Z" level=info msg="StartContainer for \"60ea693d5bd4385907596f3397ce4b9d579ca6a8f4b64086f630ed9f2819ca43\" returns successfully" Apr 12 18:53:59.680525 kubelet[2101]: I0412 18:53:59.678572 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-2qd96" podStartSLOduration=5.678502675 podStartE2EDuration="5.678502675s" podCreationTimestamp="2024-04-12 18:53:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:53:55.656605164 +0000 UTC m=+13.416283363" watchObservedRunningTime="2024-04-12 18:53:59.678502675 +0000 UTC m=+17.438180854" Apr 12 18:53:59.680525 kubelet[2101]: I0412 18:53:59.678766 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="tigera-operator/tigera-operator-6bfc79cb9c-84k8h" podStartSLOduration=2.808039378 podStartE2EDuration="5.67873978s" podCreationTimestamp="2024-04-12 18:53:54 +0000 UTC" firstStartedPulling="2024-04-12 18:53:56.406194843 +0000 UTC m=+14.165873032" lastFinishedPulling="2024-04-12 18:53:59.276895255 +0000 UTC m=+17.036573434" observedRunningTime="2024-04-12 18:53:59.678659189 +0000 UTC m=+17.438337378" watchObservedRunningTime="2024-04-12 18:53:59.67873978 +0000 UTC m=+17.438417980" Apr 12 18:54:01.995000 audit[2469]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2469 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:01.995000 audit[2469]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffdd613b8b0 a2=0 a3=7ffdd613b89c items=0 ppid=2248 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:01.995000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:01.999000 audit[2469]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2469 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:01.999000 audit[2469]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdd613b8b0 a2=0 a3=0 items=0 ppid=2248 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:01.999000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:02.013000 audit[2471]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2471 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:02.013000 audit[2471]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7ffdc2dc2270 a2=0 a3=7ffdc2dc225c items=0 ppid=2248 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:02.013000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:02.017000 audit[2471]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2471 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:02.017000 audit[2471]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdc2dc2270 a2=0 a3=0 items=0 ppid=2248 pid=2471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:02.017000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:02.234627 kubelet[2101]: I0412 18:54:02.230764 2101 topology_manager.go:215] "Topology Admit Handler" podUID="9fd6fde8-a917-49c0-bd46-431d0998c0d6" podNamespace="calico-system" podName="calico-typha-75648d7bb7-28kc6" Apr 12 18:54:02.265040 systemd[1]: Created slice kubepods-besteffort-pod9fd6fde8_a917_49c0_bd46_431d0998c0d6.slice. Apr 12 18:54:02.332434 kubelet[2101]: I0412 18:54:02.332347 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9nhwb\" (UniqueName: \"kubernetes.io/projected/9fd6fde8-a917-49c0-bd46-431d0998c0d6-kube-api-access-9nhwb\") pod \"calico-typha-75648d7bb7-28kc6\" (UID: \"9fd6fde8-a917-49c0-bd46-431d0998c0d6\") " pod="calico-system/calico-typha-75648d7bb7-28kc6" Apr 12 18:54:02.332434 kubelet[2101]: I0412 18:54:02.332448 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/9fd6fde8-a917-49c0-bd46-431d0998c0d6-typha-certs\") pod \"calico-typha-75648d7bb7-28kc6\" (UID: \"9fd6fde8-a917-49c0-bd46-431d0998c0d6\") " pod="calico-system/calico-typha-75648d7bb7-28kc6" Apr 12 18:54:02.332749 kubelet[2101]: I0412 18:54:02.332483 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/9fd6fde8-a917-49c0-bd46-431d0998c0d6-tigera-ca-bundle\") pod \"calico-typha-75648d7bb7-28kc6\" (UID: \"9fd6fde8-a917-49c0-bd46-431d0998c0d6\") " pod="calico-system/calico-typha-75648d7bb7-28kc6" Apr 12 18:54:02.357370 kubelet[2101]: I0412 18:54:02.357311 2101 topology_manager.go:215] "Topology Admit Handler" podUID="ea4c2ac2-34b0-4ce2-8562-8f26464c8b58" podNamespace="calico-system" podName="calico-node-fw8b9" Apr 12 18:54:02.377583 systemd[1]: Created slice kubepods-besteffort-podea4c2ac2_34b0_4ce2_8562_8f26464c8b58.slice. Apr 12 18:54:02.546569 kubelet[2101]: I0412 18:54:02.539803 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-cni-log-dir\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.546569 kubelet[2101]: I0412 18:54:02.539885 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-tigera-ca-bundle\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.546569 kubelet[2101]: I0412 18:54:02.539913 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-cni-bin-dir\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.546569 kubelet[2101]: I0412 18:54:02.539943 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2s4vq\" (UniqueName: \"kubernetes.io/projected/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-kube-api-access-2s4vq\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.546569 kubelet[2101]: I0412 18:54:02.539972 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-xtables-lock\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.546922 kubelet[2101]: I0412 18:54:02.539997 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-lib-modules\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.546922 kubelet[2101]: I0412 18:54:02.540022 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-var-run-calico\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.546922 kubelet[2101]: I0412 18:54:02.540051 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-cni-net-dir\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.546922 kubelet[2101]: I0412 18:54:02.540081 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-node-certs\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.546922 kubelet[2101]: I0412 18:54:02.540106 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-var-lib-calico\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.547117 kubelet[2101]: I0412 18:54:02.540129 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-flexvol-driver-host\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.547117 kubelet[2101]: I0412 18:54:02.540153 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/ea4c2ac2-34b0-4ce2-8562-8f26464c8b58-policysync\") pod \"calico-node-fw8b9\" (UID: \"ea4c2ac2-34b0-4ce2-8562-8f26464c8b58\") " pod="calico-system/calico-node-fw8b9" Apr 12 18:54:02.547117 kubelet[2101]: I0412 18:54:02.541105 2101 topology_manager.go:215] "Topology Admit Handler" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" podNamespace="calico-system" podName="csi-node-driver-gv4d4" Apr 12 18:54:02.547117 kubelet[2101]: E0412 18:54:02.541450 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:02.594453 kubelet[2101]: E0412 18:54:02.593103 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:02.594714 env[1186]: time="2024-04-12T18:54:02.593769346Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-75648d7bb7-28kc6,Uid:9fd6fde8-a917-49c0-bd46-431d0998c0d6,Namespace:calico-system,Attempt:0,}" Apr 12 18:54:02.642762 kubelet[2101]: I0412 18:54:02.641743 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/63b0dc57-1b72-4064-a3cc-9a7caa2fa16b-kubelet-dir\") pod \"csi-node-driver-gv4d4\" (UID: \"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b\") " pod="calico-system/csi-node-driver-gv4d4" Apr 12 18:54:02.642762 kubelet[2101]: I0412 18:54:02.641904 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jv8dr\" (UniqueName: \"kubernetes.io/projected/63b0dc57-1b72-4064-a3cc-9a7caa2fa16b-kube-api-access-jv8dr\") pod \"csi-node-driver-gv4d4\" (UID: \"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b\") " pod="calico-system/csi-node-driver-gv4d4" Apr 12 18:54:02.642762 kubelet[2101]: I0412 18:54:02.642065 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/63b0dc57-1b72-4064-a3cc-9a7caa2fa16b-varrun\") pod \"csi-node-driver-gv4d4\" (UID: \"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b\") " pod="calico-system/csi-node-driver-gv4d4" Apr 12 18:54:02.642762 kubelet[2101]: I0412 18:54:02.642146 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/63b0dc57-1b72-4064-a3cc-9a7caa2fa16b-socket-dir\") pod \"csi-node-driver-gv4d4\" (UID: \"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b\") " pod="calico-system/csi-node-driver-gv4d4" Apr 12 18:54:02.642762 kubelet[2101]: I0412 18:54:02.642185 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/63b0dc57-1b72-4064-a3cc-9a7caa2fa16b-registration-dir\") pod \"csi-node-driver-gv4d4\" (UID: \"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b\") " pod="calico-system/csi-node-driver-gv4d4" Apr 12 18:54:02.861063 kubelet[2101]: E0412 18:54:02.860938 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:02.861063 kubelet[2101]: W0412 18:54:02.860974 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:02.861063 kubelet[2101]: E0412 18:54:02.861023 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:02.875362 kubelet[2101]: E0412 18:54:02.874216 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:02.875362 kubelet[2101]: W0412 18:54:02.874254 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:02.875362 kubelet[2101]: E0412 18:54:02.874293 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:02.879351 kubelet[2101]: E0412 18:54:02.879319 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:02.879574 kubelet[2101]: W0412 18:54:02.879549 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:02.879696 kubelet[2101]: E0412 18:54:02.879674 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:02.938742 env[1186]: time="2024-04-12T18:54:02.937426088Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:54:02.938742 env[1186]: time="2024-04-12T18:54:02.937515766Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:54:02.938742 env[1186]: time="2024-04-12T18:54:02.937532648Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:54:02.938742 env[1186]: time="2024-04-12T18:54:02.937746910Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2c4582404c7042dc003fdb08ee91ed0e82d2381d9716c108fb3fac0dec501a0f pid=2487 runtime=io.containerd.runc.v2 Apr 12 18:54:02.987858 kubelet[2101]: E0412 18:54:02.987817 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:02.990199 env[1186]: time="2024-04-12T18:54:02.989064445Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-fw8b9,Uid:ea4c2ac2-34b0-4ce2-8562-8f26464c8b58,Namespace:calico-system,Attempt:0,}" Apr 12 18:54:02.996072 systemd[1]: Started cri-containerd-2c4582404c7042dc003fdb08ee91ed0e82d2381d9716c108fb3fac0dec501a0f.scope. Apr 12 18:54:03.045000 audit[2514]: NETFILTER_CFG table=filter:93 family=2 entries=16 op=nft_register_rule pid=2514 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:03.045000 audit[2514]: SYSCALL arch=c000003e syscall=46 success=yes exit=5908 a0=3 a1=7fffcae59ec0 a2=0 a3=7fffcae59eac items=0 ppid=2248 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.045000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:03.050000 audit[2514]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2514 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:03.050000 audit[2514]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffcae59ec0 a2=0 a3=0 items=0 ppid=2248 pid=2514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.050000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:03.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.070000 audit: BPF prog-id=121 op=LOAD Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2487 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263343538323430346337303432646330303366646230386565393165 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2487 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263343538323430346337303432646330303366646230386565393165 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.071000 audit: BPF prog-id=122 op=LOAD Apr 12 18:54:03.071000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002cffc0 items=0 ppid=2487 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263343538323430346337303432646330303366646230386565393165 Apr 12 18:54:03.075000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.075000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.075000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.075000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.075000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.075000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.075000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.075000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.075000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.075000 audit: BPF prog-id=123 op=LOAD Apr 12 18:54:03.075000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003c2008 items=0 ppid=2487 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263343538323430346337303432646330303366646230386565393165 Apr 12 18:54:03.102000 audit: BPF prog-id=123 op=UNLOAD Apr 12 18:54:03.102000 audit: BPF prog-id=122 op=UNLOAD Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.117948 env[1186]: time="2024-04-12T18:54:03.113997883Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:54:03.117948 env[1186]: time="2024-04-12T18:54:03.114059819Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:54:03.117948 env[1186]: time="2024-04-12T18:54:03.114074506Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:54:03.117948 env[1186]: time="2024-04-12T18:54:03.114369070Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/69928e3e0ad3a7f1ddbac6412126a12a75e553f1524d4f078f6b88aec56d59cd pid=2523 runtime=io.containerd.runc.v2 Apr 12 18:54:03.102000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.102000 audit: BPF prog-id=124 op=LOAD Apr 12 18:54:03.102000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003c2418 items=0 ppid=2487 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263343538323430346337303432646330303366646230386565393165 Apr 12 18:54:03.174588 systemd[1]: Started cri-containerd-69928e3e0ad3a7f1ddbac6412126a12a75e553f1524d4f078f6b88aec56d59cd.scope. Apr 12 18:54:03.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.246000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.246000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.259779 env[1186]: time="2024-04-12T18:54:03.259721727Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-75648d7bb7-28kc6,Uid:9fd6fde8-a917-49c0-bd46-431d0998c0d6,Namespace:calico-system,Attempt:0,} returns sandbox id \"2c4582404c7042dc003fdb08ee91ed0e82d2381d9716c108fb3fac0dec501a0f\"" Apr 12 18:54:03.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit: BPF prog-id=125 op=LOAD Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2523 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639393238653365306164336137663164646261633634313231323661 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2523 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639393238653365306164336137663164646261633634313231323661 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.260000 audit: BPF prog-id=126 op=LOAD Apr 12 18:54:03.265894 kubelet[2101]: E0412 18:54:03.260795 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:03.260000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000205850 items=0 ppid=2523 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639393238653365306164336137663164646261633634313231323661 Apr 12 18:54:03.272047 env[1186]: time="2024-04-12T18:54:03.272006569Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.3\"" Apr 12 18:54:03.271000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.271000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.271000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.271000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.271000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.271000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.271000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.271000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.271000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.271000 audit: BPF prog-id=127 op=LOAD Apr 12 18:54:03.271000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000205898 items=0 ppid=2523 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.271000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639393238653365306164336137663164646261633634313231323661 Apr 12 18:54:03.279000 audit: BPF prog-id=127 op=UNLOAD Apr 12 18:54:03.279000 audit: BPF prog-id=126 op=UNLOAD Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:03.279000 audit: BPF prog-id=128 op=LOAD Apr 12 18:54:03.279000 audit[2531]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000205ca8 items=0 ppid=2523 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:03.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639393238653365306164336137663164646261633634313231323661 Apr 12 18:54:03.375337 env[1186]: time="2024-04-12T18:54:03.374960753Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-fw8b9,Uid:ea4c2ac2-34b0-4ce2-8562-8f26464c8b58,Namespace:calico-system,Attempt:0,} returns sandbox id \"69928e3e0ad3a7f1ddbac6412126a12a75e553f1524d4f078f6b88aec56d59cd\"" Apr 12 18:54:03.379227 kubelet[2101]: E0412 18:54:03.377921 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:04.492064 kubelet[2101]: E0412 18:54:04.491998 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:04.858738 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3396147615.mount: Deactivated successfully. Apr 12 18:54:06.491641 kubelet[2101]: E0412 18:54:06.491578 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:07.995201 env[1186]: time="2024-04-12T18:54:07.995063631Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:08.031573 env[1186]: time="2024-04-12T18:54:08.024324023Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b542f80277bc5a77197ee77cfea20140a71de63ad22970bd48462555506b5bb9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:08.085880 env[1186]: time="2024-04-12T18:54:08.080453950Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:08.095429 env[1186]: time="2024-04-12T18:54:08.094210346Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:418671dc5b90134cba7b93a914c8329e8ecafd45de67165aeee74252e5f14f3e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:08.095638 env[1186]: time="2024-04-12T18:54:08.095506608Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.27.3\" returns image reference \"sha256:b542f80277bc5a77197ee77cfea20140a71de63ad22970bd48462555506b5bb9\"" Apr 12 18:54:08.098500 env[1186]: time="2024-04-12T18:54:08.098166370Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3\"" Apr 12 18:54:08.144819 env[1186]: time="2024-04-12T18:54:08.141755792Z" level=info msg="CreateContainer within sandbox \"2c4582404c7042dc003fdb08ee91ed0e82d2381d9716c108fb3fac0dec501a0f\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Apr 12 18:54:08.488976 env[1186]: time="2024-04-12T18:54:08.488554943Z" level=info msg="CreateContainer within sandbox \"2c4582404c7042dc003fdb08ee91ed0e82d2381d9716c108fb3fac0dec501a0f\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"51d031366a3f64253fe434feae8711aa42a813654cebc47c7d855a9610a2f47f\"" Apr 12 18:54:08.494320 env[1186]: time="2024-04-12T18:54:08.492007302Z" level=info msg="StartContainer for \"51d031366a3f64253fe434feae8711aa42a813654cebc47c7d855a9610a2f47f\"" Apr 12 18:54:08.496689 kubelet[2101]: E0412 18:54:08.496649 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:08.594131 systemd[1]: Started cri-containerd-51d031366a3f64253fe434feae8711aa42a813654cebc47c7d855a9610a2f47f.scope. Apr 12 18:54:08.655127 kernel: kauditd_printk_skb: 179 callbacks suppressed Apr 12 18:54:08.660463 kernel: audit: type=1400 audit(1712948048.630:1085): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.660567 kernel: audit: type=1400 audit(1712948048.630:1086): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.660603 kernel: audit: type=1400 audit(1712948048.630:1087): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.680007 kernel: audit: type=1400 audit(1712948048.630:1088): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.680199 kernel: audit: type=1400 audit(1712948048.630:1089): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.683481 kernel: audit: type=1400 audit(1712948048.630:1090): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.683579 kernel: audit: type=1400 audit(1712948048.630:1091): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.695569 kernel: audit: type=1400 audit(1712948048.630:1092): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.695699 kernel: audit: type=1400 audit(1712948048.630:1093): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.695734 kernel: audit: type=1400 audit(1712948048.641:1094): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.641000 audit: BPF prog-id=129 op=LOAD Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2487 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:08.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531643033313336366133663634323533666534333466656165383731 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2487 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:08.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531643033313336366133663634323533666534333466656165383731 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.642000 audit: BPF prog-id=130 op=LOAD Apr 12 18:54:08.642000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000212ec0 items=0 ppid=2487 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:08.642000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531643033313336366133663634323533666534333466656165383731 Apr 12 18:54:08.655000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.655000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.655000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.655000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.655000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.655000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.655000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.655000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.655000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.655000 audit: BPF prog-id=131 op=LOAD Apr 12 18:54:08.655000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000398d48 items=0 ppid=2487 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:08.655000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531643033313336366133663634323533666534333466656165383731 Apr 12 18:54:08.673000 audit: BPF prog-id=131 op=UNLOAD Apr 12 18:54:08.673000 audit: BPF prog-id=130 op=UNLOAD Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { perfmon } for pid=2573 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit[2573]: AVC avc: denied { bpf } for pid=2573 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:08.673000 audit: BPF prog-id=132 op=LOAD Apr 12 18:54:08.673000 audit[2573]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000399158 items=0 ppid=2487 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:08.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3531643033313336366133663634323533666534333466656165383731 Apr 12 18:54:08.785021 env[1186]: time="2024-04-12T18:54:08.784964289Z" level=info msg="StartContainer for \"51d031366a3f64253fe434feae8711aa42a813654cebc47c7d855a9610a2f47f\" returns successfully" Apr 12 18:54:09.751247 kubelet[2101]: E0412 18:54:09.751168 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:09.782266 kubelet[2101]: I0412 18:54:09.779255 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-typha-75648d7bb7-28kc6" podStartSLOduration=2.949142304 podStartE2EDuration="7.779193351s" podCreationTimestamp="2024-04-12 18:54:02 +0000 UTC" firstStartedPulling="2024-04-12 18:54:03.266980644 +0000 UTC m=+21.026658823" lastFinishedPulling="2024-04-12 18:54:08.097031691 +0000 UTC m=+25.856709870" observedRunningTime="2024-04-12 18:54:09.778813749 +0000 UTC m=+27.538491958" watchObservedRunningTime="2024-04-12 18:54:09.779193351 +0000 UTC m=+27.538871530" Apr 12 18:54:09.794825 kubelet[2101]: E0412 18:54:09.794724 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.794825 kubelet[2101]: W0412 18:54:09.794759 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.794825 kubelet[2101]: E0412 18:54:09.794795 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.802323 kubelet[2101]: E0412 18:54:09.801787 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.802323 kubelet[2101]: W0412 18:54:09.801827 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.802323 kubelet[2101]: E0412 18:54:09.801865 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.802323 kubelet[2101]: E0412 18:54:09.802256 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.802323 kubelet[2101]: W0412 18:54:09.802268 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.802323 kubelet[2101]: E0412 18:54:09.802283 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.803523 kubelet[2101]: E0412 18:54:09.803256 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.803523 kubelet[2101]: W0412 18:54:09.803284 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.803523 kubelet[2101]: E0412 18:54:09.803317 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.805757 kubelet[2101]: E0412 18:54:09.805623 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.805757 kubelet[2101]: W0412 18:54:09.805642 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.805757 kubelet[2101]: E0412 18:54:09.805665 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.809593 kubelet[2101]: E0412 18:54:09.809392 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.809593 kubelet[2101]: W0412 18:54:09.809445 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.809593 kubelet[2101]: E0412 18:54:09.809472 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.809983 kubelet[2101]: E0412 18:54:09.809855 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.809983 kubelet[2101]: W0412 18:54:09.809873 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.809983 kubelet[2101]: E0412 18:54:09.809887 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.810244 kubelet[2101]: E0412 18:54:09.810186 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.810244 kubelet[2101]: W0412 18:54:09.810229 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.810345 kubelet[2101]: E0412 18:54:09.810265 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.819459 kubelet[2101]: E0412 18:54:09.819287 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.819459 kubelet[2101]: W0412 18:54:09.819333 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.819459 kubelet[2101]: E0412 18:54:09.819373 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.826644 kubelet[2101]: E0412 18:54:09.819853 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.826644 kubelet[2101]: W0412 18:54:09.819866 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.826644 kubelet[2101]: E0412 18:54:09.820142 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.826644 kubelet[2101]: E0412 18:54:09.820727 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.826644 kubelet[2101]: W0412 18:54:09.820739 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.826644 kubelet[2101]: E0412 18:54:09.820758 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.826644 kubelet[2101]: E0412 18:54:09.821185 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.826644 kubelet[2101]: W0412 18:54:09.821196 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.826644 kubelet[2101]: E0412 18:54:09.821219 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.830733 kubelet[2101]: E0412 18:54:09.830661 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.830733 kubelet[2101]: W0412 18:54:09.830710 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.831279 kubelet[2101]: E0412 18:54:09.830747 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.831608 kubelet[2101]: E0412 18:54:09.831555 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.831608 kubelet[2101]: W0412 18:54:09.831575 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.831608 kubelet[2101]: E0412 18:54:09.831590 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.833277 kubelet[2101]: E0412 18:54:09.832087 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.833277 kubelet[2101]: W0412 18:54:09.832113 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.833277 kubelet[2101]: E0412 18:54:09.832130 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.837311 kubelet[2101]: E0412 18:54:09.836481 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.837311 kubelet[2101]: W0412 18:54:09.836516 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.837311 kubelet[2101]: E0412 18:54:09.836550 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.839470 kubelet[2101]: E0412 18:54:09.839357 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.839470 kubelet[2101]: W0412 18:54:09.839390 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.839470 kubelet[2101]: E0412 18:54:09.839446 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.842428 kubelet[2101]: E0412 18:54:09.842352 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.842428 kubelet[2101]: W0412 18:54:09.842381 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.842616 kubelet[2101]: E0412 18:54:09.842603 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.843155 kubelet[2101]: E0412 18:54:09.842887 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.843155 kubelet[2101]: W0412 18:54:09.842907 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.843155 kubelet[2101]: E0412 18:54:09.842924 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.843155 kubelet[2101]: E0412 18:54:09.843159 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.843678 kubelet[2101]: W0412 18:54:09.843171 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.843678 kubelet[2101]: E0412 18:54:09.843186 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.853895 kubelet[2101]: E0412 18:54:09.848307 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.853895 kubelet[2101]: W0412 18:54:09.848336 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.853895 kubelet[2101]: E0412 18:54:09.848392 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.857581 kubelet[2101]: E0412 18:54:09.857513 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.857581 kubelet[2101]: W0412 18:54:09.857559 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.857581 kubelet[2101]: E0412 18:54:09.857610 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.858172 kubelet[2101]: E0412 18:54:09.858136 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.858172 kubelet[2101]: W0412 18:54:09.858155 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.858296 kubelet[2101]: E0412 18:54:09.858285 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.858612 kubelet[2101]: E0412 18:54:09.858558 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.858612 kubelet[2101]: W0412 18:54:09.858575 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.858738 kubelet[2101]: E0412 18:54:09.858709 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.859029 kubelet[2101]: E0412 18:54:09.858997 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.859029 kubelet[2101]: W0412 18:54:09.859016 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.859150 kubelet[2101]: E0412 18:54:09.859123 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.859431 kubelet[2101]: E0412 18:54:09.859390 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.859431 kubelet[2101]: W0412 18:54:09.859422 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.859529 kubelet[2101]: E0412 18:54:09.859438 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.866313 kubelet[2101]: E0412 18:54:09.865771 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.866313 kubelet[2101]: W0412 18:54:09.865838 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.866313 kubelet[2101]: E0412 18:54:09.865901 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.867037 kubelet[2101]: E0412 18:54:09.866707 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.867037 kubelet[2101]: W0412 18:54:09.866742 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.867037 kubelet[2101]: E0412 18:54:09.866828 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.878263 kubelet[2101]: E0412 18:54:09.875717 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.878263 kubelet[2101]: W0412 18:54:09.875750 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.878263 kubelet[2101]: E0412 18:54:09.876173 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.880478 kubelet[2101]: E0412 18:54:09.880423 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.880478 kubelet[2101]: W0412 18:54:09.880464 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.880636 kubelet[2101]: E0412 18:54:09.880516 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.880991 kubelet[2101]: E0412 18:54:09.880970 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.880991 kubelet[2101]: W0412 18:54:09.880987 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.880991 kubelet[2101]: E0412 18:54:09.881003 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.886389 kubelet[2101]: E0412 18:54:09.881382 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.886389 kubelet[2101]: W0412 18:54:09.881431 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.886389 kubelet[2101]: E0412 18:54:09.881504 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:09.887651 kubelet[2101]: E0412 18:54:09.887619 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:09.887862 kubelet[2101]: W0412 18:54:09.887835 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:09.887987 kubelet[2101]: E0412 18:54:09.887966 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.490761 kubelet[2101]: E0412 18:54:10.490678 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:10.754608 kubelet[2101]: I0412 18:54:10.752765 2101 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Apr 12 18:54:10.754608 kubelet[2101]: E0412 18:54:10.753471 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:10.771521 kubelet[2101]: E0412 18:54:10.761994 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.771521 kubelet[2101]: W0412 18:54:10.762026 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.771521 kubelet[2101]: E0412 18:54:10.762058 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.771521 kubelet[2101]: E0412 18:54:10.762410 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.771521 kubelet[2101]: W0412 18:54:10.762419 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.771521 kubelet[2101]: E0412 18:54:10.762432 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.771521 kubelet[2101]: E0412 18:54:10.762592 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.771521 kubelet[2101]: W0412 18:54:10.762600 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.771521 kubelet[2101]: E0412 18:54:10.762612 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.771521 kubelet[2101]: E0412 18:54:10.762769 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772062 kubelet[2101]: W0412 18:54:10.762777 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772062 kubelet[2101]: E0412 18:54:10.762788 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772062 kubelet[2101]: E0412 18:54:10.762967 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772062 kubelet[2101]: W0412 18:54:10.762975 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772062 kubelet[2101]: E0412 18:54:10.762987 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772062 kubelet[2101]: E0412 18:54:10.763139 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772062 kubelet[2101]: W0412 18:54:10.763149 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772062 kubelet[2101]: E0412 18:54:10.763160 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772062 kubelet[2101]: E0412 18:54:10.767682 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772062 kubelet[2101]: W0412 18:54:10.767708 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772456 kubelet[2101]: E0412 18:54:10.767739 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772456 kubelet[2101]: E0412 18:54:10.767949 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772456 kubelet[2101]: W0412 18:54:10.767957 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772456 kubelet[2101]: E0412 18:54:10.767969 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772456 kubelet[2101]: E0412 18:54:10.768173 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772456 kubelet[2101]: W0412 18:54:10.768193 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772456 kubelet[2101]: E0412 18:54:10.768206 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772456 kubelet[2101]: E0412 18:54:10.768372 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772456 kubelet[2101]: W0412 18:54:10.768381 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772456 kubelet[2101]: E0412 18:54:10.768393 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772802 kubelet[2101]: E0412 18:54:10.768566 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772802 kubelet[2101]: W0412 18:54:10.768575 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772802 kubelet[2101]: E0412 18:54:10.768592 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772802 kubelet[2101]: E0412 18:54:10.768746 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772802 kubelet[2101]: W0412 18:54:10.768754 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772802 kubelet[2101]: E0412 18:54:10.768766 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772802 kubelet[2101]: E0412 18:54:10.768989 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.772802 kubelet[2101]: W0412 18:54:10.768999 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.772802 kubelet[2101]: E0412 18:54:10.769011 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.772802 kubelet[2101]: E0412 18:54:10.769194 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.773139 kubelet[2101]: W0412 18:54:10.769202 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.773139 kubelet[2101]: E0412 18:54:10.769213 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.773139 kubelet[2101]: E0412 18:54:10.769392 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.773139 kubelet[2101]: W0412 18:54:10.769408 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.773139 kubelet[2101]: E0412 18:54:10.769422 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.773139 kubelet[2101]: E0412 18:54:10.769654 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.773139 kubelet[2101]: W0412 18:54:10.769662 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.773139 kubelet[2101]: E0412 18:54:10.769673 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.773139 kubelet[2101]: E0412 18:54:10.769873 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.773139 kubelet[2101]: W0412 18:54:10.769880 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.773827 kubelet[2101]: E0412 18:54:10.769899 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.773827 kubelet[2101]: E0412 18:54:10.770331 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.773827 kubelet[2101]: W0412 18:54:10.770360 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.773827 kubelet[2101]: E0412 18:54:10.770395 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.773827 kubelet[2101]: E0412 18:54:10.770607 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.773827 kubelet[2101]: W0412 18:54:10.770615 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.773827 kubelet[2101]: E0412 18:54:10.770629 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.773827 kubelet[2101]: E0412 18:54:10.770760 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.773827 kubelet[2101]: W0412 18:54:10.770767 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.773827 kubelet[2101]: E0412 18:54:10.770780 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.774797 kubelet[2101]: E0412 18:54:10.770960 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.774797 kubelet[2101]: W0412 18:54:10.770967 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.774797 kubelet[2101]: E0412 18:54:10.770979 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.774797 kubelet[2101]: E0412 18:54:10.771460 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.774797 kubelet[2101]: W0412 18:54:10.771477 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.774797 kubelet[2101]: E0412 18:54:10.771497 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.774797 kubelet[2101]: E0412 18:54:10.771752 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.774797 kubelet[2101]: W0412 18:54:10.771762 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.774797 kubelet[2101]: E0412 18:54:10.771786 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.774797 kubelet[2101]: E0412 18:54:10.772007 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.775144 kubelet[2101]: W0412 18:54:10.772015 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.775144 kubelet[2101]: E0412 18:54:10.772169 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.775144 kubelet[2101]: W0412 18:54:10.772187 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.775144 kubelet[2101]: E0412 18:54:10.772199 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.775144 kubelet[2101]: E0412 18:54:10.772308 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.775144 kubelet[2101]: E0412 18:54:10.772388 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.775144 kubelet[2101]: W0412 18:54:10.772414 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.775144 kubelet[2101]: E0412 18:54:10.772427 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.776112 kubelet[2101]: E0412 18:54:10.775364 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.776112 kubelet[2101]: W0412 18:54:10.775391 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.776112 kubelet[2101]: E0412 18:54:10.775441 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.776112 kubelet[2101]: E0412 18:54:10.776073 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.776112 kubelet[2101]: W0412 18:54:10.776084 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.776112 kubelet[2101]: E0412 18:54:10.776118 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.777092 kubelet[2101]: E0412 18:54:10.777008 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.777092 kubelet[2101]: W0412 18:54:10.777023 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.777232 kubelet[2101]: E0412 18:54:10.777160 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.777995 kubelet[2101]: E0412 18:54:10.777963 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.777995 kubelet[2101]: W0412 18:54:10.777982 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.777995 kubelet[2101]: E0412 18:54:10.777999 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.781143 kubelet[2101]: E0412 18:54:10.781093 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.781276 kubelet[2101]: W0412 18:54:10.781162 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.781276 kubelet[2101]: E0412 18:54:10.781203 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.785290 kubelet[2101]: E0412 18:54:10.782658 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.785290 kubelet[2101]: W0412 18:54:10.782672 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.785290 kubelet[2101]: E0412 18:54:10.782690 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:10.786540 kubelet[2101]: E0412 18:54:10.786373 2101 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Apr 12 18:54:10.786540 kubelet[2101]: W0412 18:54:10.786395 2101 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Apr 12 18:54:10.786540 kubelet[2101]: E0412 18:54:10.786438 2101 plugins.go:730] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Apr 12 18:54:12.492453 kubelet[2101]: E0412 18:54:12.491921 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:13.299700 env[1186]: time="2024-04-12T18:54:13.299591086Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:13.311663 env[1186]: time="2024-04-12T18:54:13.309918833Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ab5b4f1ca28931c15f9831ae3bfa04c21600da454ce8bbe57872b747c86e221b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:13.330054 env[1186]: time="2024-04-12T18:54:13.326558182Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:13.334512 env[1186]: time="2024-04-12T18:54:13.334451841Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.27.3\" returns image reference \"sha256:ab5b4f1ca28931c15f9831ae3bfa04c21600da454ce8bbe57872b747c86e221b\"" Apr 12 18:54:13.337636 env[1186]: time="2024-04-12T18:54:13.334894402Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:256c6fee1c0cd345ce1c83a28132e3134a9f271704d41d214436bf7ec48ba4b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:13.342347 env[1186]: time="2024-04-12T18:54:13.341929381Z" level=info msg="CreateContainer within sandbox \"69928e3e0ad3a7f1ddbac6412126a12a75e553f1524d4f078f6b88aec56d59cd\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Apr 12 18:54:13.393912 env[1186]: time="2024-04-12T18:54:13.393801583Z" level=info msg="CreateContainer within sandbox \"69928e3e0ad3a7f1ddbac6412126a12a75e553f1524d4f078f6b88aec56d59cd\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"a4ceb6715fe7b621a7722b1286b5fcca8fc5ec3fe578a0183043c69553b91124\"" Apr 12 18:54:13.396821 env[1186]: time="2024-04-12T18:54:13.396775864Z" level=info msg="StartContainer for \"a4ceb6715fe7b621a7722b1286b5fcca8fc5ec3fe578a0183043c69553b91124\"" Apr 12 18:54:13.480879 systemd[1]: run-containerd-runc-k8s.io-a4ceb6715fe7b621a7722b1286b5fcca8fc5ec3fe578a0183043c69553b91124-runc.w968oi.mount: Deactivated successfully. Apr 12 18:54:13.518280 systemd[1]: Started cri-containerd-a4ceb6715fe7b621a7722b1286b5fcca8fc5ec3fe578a0183043c69553b91124.scope. Apr 12 18:54:13.584000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.584000 audit[2678]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001c56b0 a2=3c a3=7fd4e8369b48 items=0 ppid=2523 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:13.584000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636562363731356665376236323161373732326231323836623566 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.586000 audit: BPF prog-id=133 op=LOAD Apr 12 18:54:13.586000 audit[2678]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c59d8 a2=78 a3=c0002e1ea8 items=0 ppid=2523 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:13.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636562363731356665376236323161373732326231323836623566 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit: BPF prog-id=134 op=LOAD Apr 12 18:54:13.587000 audit[2678]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001c5770 a2=78 a3=c0002e1ef8 items=0 ppid=2523 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:13.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636562363731356665376236323161373732326231323836623566 Apr 12 18:54:13.587000 audit: BPF prog-id=134 op=UNLOAD Apr 12 18:54:13.587000 audit: BPF prog-id=133 op=UNLOAD Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { perfmon } for pid=2678 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit[2678]: AVC avc: denied { bpf } for pid=2678 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:13.587000 audit: BPF prog-id=135 op=LOAD Apr 12 18:54:13.587000 audit[2678]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001c5c30 a2=78 a3=c0002e1f88 items=0 ppid=2523 pid=2678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:13.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636562363731356665376236323161373732326231323836623566 Apr 12 18:54:13.644130 env[1186]: time="2024-04-12T18:54:13.644023388Z" level=info msg="StartContainer for \"a4ceb6715fe7b621a7722b1286b5fcca8fc5ec3fe578a0183043c69553b91124\" returns successfully" Apr 12 18:54:13.663453 systemd[1]: cri-containerd-a4ceb6715fe7b621a7722b1286b5fcca8fc5ec3fe578a0183043c69553b91124.scope: Deactivated successfully. Apr 12 18:54:13.671000 audit: BPF prog-id=135 op=UNLOAD Apr 12 18:54:13.677282 kernel: kauditd_printk_skb: 90 callbacks suppressed Apr 12 18:54:13.677587 kernel: audit: type=1334 audit(1712948053.671:1109): prog-id=135 op=UNLOAD Apr 12 18:54:13.779213 kubelet[2101]: E0412 18:54:13.778624 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:13.799195 env[1186]: time="2024-04-12T18:54:13.795755728Z" level=info msg="shim disconnected" id=a4ceb6715fe7b621a7722b1286b5fcca8fc5ec3fe578a0183043c69553b91124 Apr 12 18:54:13.799195 env[1186]: time="2024-04-12T18:54:13.795823054Z" level=warning msg="cleaning up after shim disconnected" id=a4ceb6715fe7b621a7722b1286b5fcca8fc5ec3fe578a0183043c69553b91124 namespace=k8s.io Apr 12 18:54:13.799195 env[1186]: time="2024-04-12T18:54:13.795836058Z" level=info msg="cleaning up dead shim" Apr 12 18:54:13.840682 env[1186]: time="2024-04-12T18:54:13.839348748Z" level=warning msg="cleanup warnings time=\"2024-04-12T18:54:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2716 runtime=io.containerd.runc.v2\n" Apr 12 18:54:14.367104 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a4ceb6715fe7b621a7722b1286b5fcca8fc5ec3fe578a0183043c69553b91124-rootfs.mount: Deactivated successfully. Apr 12 18:54:14.490767 kubelet[2101]: E0412 18:54:14.490723 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:14.794343 kubelet[2101]: E0412 18:54:14.791155 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:14.801870 env[1186]: time="2024-04-12T18:54:14.801516022Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.3\"" Apr 12 18:54:16.492337 kubelet[2101]: E0412 18:54:16.492243 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:16.980877 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2637851613.mount: Deactivated successfully. Apr 12 18:54:18.493535 kubelet[2101]: E0412 18:54:18.492340 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:18.967675 kubelet[2101]: I0412 18:54:18.966760 2101 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Apr 12 18:54:18.968525 kubelet[2101]: E0412 18:54:18.968126 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:19.057000 audit[2735]: NETFILTER_CFG table=filter:95 family=2 entries=15 op=nft_register_rule pid=2735 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:19.057000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffd517f3950 a2=0 a3=7ffd517f393c items=0 ppid=2248 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:19.070031 kernel: audit: type=1325 audit(1712948059.057:1110): table=filter:95 family=2 entries=15 op=nft_register_rule pid=2735 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:19.070266 kernel: audit: type=1300 audit(1712948059.057:1110): arch=c000003e syscall=46 success=yes exit=5164 a0=3 a1=7ffd517f3950 a2=0 a3=7ffd517f393c items=0 ppid=2248 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:19.057000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:19.074450 kernel: audit: type=1327 audit(1712948059.057:1110): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:19.058000 audit[2735]: NETFILTER_CFG table=nat:96 family=2 entries=19 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:19.058000 audit[2735]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd517f3950 a2=0 a3=7ffd517f393c items=0 ppid=2248 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:19.101115 kernel: audit: type=1325 audit(1712948059.058:1111): table=nat:96 family=2 entries=19 op=nft_register_chain pid=2735 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:19.101324 kernel: audit: type=1300 audit(1712948059.058:1111): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd517f3950 a2=0 a3=7ffd517f393c items=0 ppid=2248 pid=2735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:19.101365 kernel: audit: type=1327 audit(1712948059.058:1111): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:19.058000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:19.841382 kubelet[2101]: E0412 18:54:19.839486 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:20.500018 kubelet[2101]: E0412 18:54:20.495501 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:22.324789 env[1186]: time="2024-04-12T18:54:22.324665239Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:22.359966 env[1186]: time="2024-04-12T18:54:22.359885467Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6527a355814010ee83110dd5165fae88f7d9de75775b78565824d51f8da54897,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:22.371257 env[1186]: time="2024-04-12T18:54:22.362978995Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:22.384454 env[1186]: time="2024-04-12T18:54:22.382433622Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:21ccc42ae417f1082c03737e9da5fbfbd4a21732babfcef4cd34240eacf26b41,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:22.394905 env[1186]: time="2024-04-12T18:54:22.387297340Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.27.3\" returns image reference \"sha256:6527a355814010ee83110dd5165fae88f7d9de75775b78565824d51f8da54897\"" Apr 12 18:54:22.404957 env[1186]: time="2024-04-12T18:54:22.404817936Z" level=info msg="CreateContainer within sandbox \"69928e3e0ad3a7f1ddbac6412126a12a75e553f1524d4f078f6b88aec56d59cd\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Apr 12 18:54:22.462053 env[1186]: time="2024-04-12T18:54:22.461926338Z" level=info msg="CreateContainer within sandbox \"69928e3e0ad3a7f1ddbac6412126a12a75e553f1524d4f078f6b88aec56d59cd\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d9d90fdf623948d3ca5984ecd450592054ebbd63aeb02bac4f1c77aeb35a7896\"" Apr 12 18:54:22.463382 env[1186]: time="2024-04-12T18:54:22.463329375Z" level=info msg="StartContainer for \"d9d90fdf623948d3ca5984ecd450592054ebbd63aeb02bac4f1c77aeb35a7896\"" Apr 12 18:54:22.497615 kubelet[2101]: E0412 18:54:22.494386 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:22.530175 systemd[1]: Started cri-containerd-d9d90fdf623948d3ca5984ecd450592054ebbd63aeb02bac4f1c77aeb35a7896.scope. Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fdf2c5d43e8 items=0 ppid=2523 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:22.604678 kernel: audit: type=1400 audit(1712948062.583:1112): avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.604929 kernel: audit: type=1300 audit(1712948062.583:1112): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fdf2c5d43e8 items=0 ppid=2523 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:22.605971 kernel: audit: type=1327 audit(1712948062.583:1112): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439643930666466363233393438643363613539383465636434353035 Apr 12 18:54:22.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439643930666466363233393438643363613539383465636434353035 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.622368 kernel: audit: type=1400 audit(1712948062.583:1113): avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.583000 audit: BPF prog-id=136 op=LOAD Apr 12 18:54:22.583000 audit[2742]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00028ae98 items=0 ppid=2523 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:22.583000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439643930666466363233393438643363613539383465636434353035 Apr 12 18:54:22.597000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.597000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.597000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.597000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.597000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.597000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.597000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.597000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.597000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.597000 audit: BPF prog-id=137 op=LOAD Apr 12 18:54:22.597000 audit[2742]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00028aee8 items=0 ppid=2523 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:22.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439643930666466363233393438643363613539383465636434353035 Apr 12 18:54:22.605000 audit: BPF prog-id=137 op=UNLOAD Apr 12 18:54:22.605000 audit: BPF prog-id=136 op=UNLOAD Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { perfmon } for pid=2742 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit[2742]: AVC avc: denied { bpf } for pid=2742 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:22.605000 audit: BPF prog-id=138 op=LOAD Apr 12 18:54:22.605000 audit[2742]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00028af78 items=0 ppid=2523 pid=2742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:22.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439643930666466363233393438643363613539383465636434353035 Apr 12 18:54:22.782712 env[1186]: time="2024-04-12T18:54:22.782625050Z" level=info msg="StartContainer for \"d9d90fdf623948d3ca5984ecd450592054ebbd63aeb02bac4f1c77aeb35a7896\" returns successfully" Apr 12 18:54:22.860194 kubelet[2101]: E0412 18:54:22.860008 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:23.865173 kubelet[2101]: E0412 18:54:23.864663 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:24.105726 systemd[1]: cri-containerd-d9d90fdf623948d3ca5984ecd450592054ebbd63aeb02bac4f1c77aeb35a7896.scope: Deactivated successfully. Apr 12 18:54:24.118452 kernel: kauditd_printk_skb: 39 callbacks suppressed Apr 12 18:54:24.118646 kernel: audit: type=1334 audit(1712948064.114:1118): prog-id=138 op=UNLOAD Apr 12 18:54:24.114000 audit: BPF prog-id=138 op=UNLOAD Apr 12 18:54:24.138095 kubelet[2101]: I0412 18:54:24.134316 2101 kubelet_node_status.go:497] "Fast updating node status as it just became ready" Apr 12 18:54:24.201766 kubelet[2101]: I0412 18:54:24.200839 2101 topology_manager.go:215] "Topology Admit Handler" podUID="4af71046-a0e9-4b27-8d92-cee652a23de0" podNamespace="kube-system" podName="coredns-76f75df574-hkcfz" Apr 12 18:54:24.210079 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d9d90fdf623948d3ca5984ecd450592054ebbd63aeb02bac4f1c77aeb35a7896-rootfs.mount: Deactivated successfully. Apr 12 18:54:24.239755 kubelet[2101]: I0412 18:54:24.238834 2101 topology_manager.go:215] "Topology Admit Handler" podUID="70d0491e-916d-4334-8058-e007f6b7c886" podNamespace="kube-system" podName="coredns-76f75df574-dthn7" Apr 12 18:54:24.239755 kubelet[2101]: I0412 18:54:24.239734 2101 topology_manager.go:215] "Topology Admit Handler" podUID="54d0b786-ab92-49a5-9480-ceea1bb2f91f" podNamespace="calico-system" podName="calico-kube-controllers-6c5d75f8dc-vqn77" Apr 12 18:54:24.239561 systemd[1]: Created slice kubepods-burstable-pod4af71046_a0e9_4b27_8d92_cee652a23de0.slice. Apr 12 18:54:24.279660 systemd[1]: Created slice kubepods-burstable-pod70d0491e_916d_4334_8058_e007f6b7c886.slice. Apr 12 18:54:24.296581 systemd[1]: Created slice kubepods-besteffort-pod54d0b786_ab92_49a5_9480_ceea1bb2f91f.slice. Apr 12 18:54:24.308560 kubelet[2101]: I0412 18:54:24.306939 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-plxr9\" (UniqueName: \"kubernetes.io/projected/54d0b786-ab92-49a5-9480-ceea1bb2f91f-kube-api-access-plxr9\") pod \"calico-kube-controllers-6c5d75f8dc-vqn77\" (UID: \"54d0b786-ab92-49a5-9480-ceea1bb2f91f\") " pod="calico-system/calico-kube-controllers-6c5d75f8dc-vqn77" Apr 12 18:54:24.308560 kubelet[2101]: I0412 18:54:24.307012 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/70d0491e-916d-4334-8058-e007f6b7c886-config-volume\") pod \"coredns-76f75df574-dthn7\" (UID: \"70d0491e-916d-4334-8058-e007f6b7c886\") " pod="kube-system/coredns-76f75df574-dthn7" Apr 12 18:54:24.308560 kubelet[2101]: I0412 18:54:24.307050 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/54d0b786-ab92-49a5-9480-ceea1bb2f91f-tigera-ca-bundle\") pod \"calico-kube-controllers-6c5d75f8dc-vqn77\" (UID: \"54d0b786-ab92-49a5-9480-ceea1bb2f91f\") " pod="calico-system/calico-kube-controllers-6c5d75f8dc-vqn77" Apr 12 18:54:24.308560 kubelet[2101]: I0412 18:54:24.307085 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mrmt9\" (UniqueName: \"kubernetes.io/projected/4af71046-a0e9-4b27-8d92-cee652a23de0-kube-api-access-mrmt9\") pod \"coredns-76f75df574-hkcfz\" (UID: \"4af71046-a0e9-4b27-8d92-cee652a23de0\") " pod="kube-system/coredns-76f75df574-hkcfz" Apr 12 18:54:24.308560 kubelet[2101]: I0412 18:54:24.307116 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4af71046-a0e9-4b27-8d92-cee652a23de0-config-volume\") pod \"coredns-76f75df574-hkcfz\" (UID: \"4af71046-a0e9-4b27-8d92-cee652a23de0\") " pod="kube-system/coredns-76f75df574-hkcfz" Apr 12 18:54:24.309090 kubelet[2101]: I0412 18:54:24.307148 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-s4jzk\" (UniqueName: \"kubernetes.io/projected/70d0491e-916d-4334-8058-e007f6b7c886-kube-api-access-s4jzk\") pod \"coredns-76f75df574-dthn7\" (UID: \"70d0491e-916d-4334-8058-e007f6b7c886\") " pod="kube-system/coredns-76f75df574-dthn7" Apr 12 18:54:24.518734 systemd[1]: Created slice kubepods-besteffort-pod63b0dc57_1b72_4064_a3cc_9a7caa2fa16b.slice. Apr 12 18:54:24.542834 env[1186]: time="2024-04-12T18:54:24.541739731Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gv4d4,Uid:63b0dc57-1b72-4064-a3cc-9a7caa2fa16b,Namespace:calico-system,Attempt:0,}" Apr 12 18:54:24.584205 kubelet[2101]: E0412 18:54:24.584137 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:24.585192 env[1186]: time="2024-04-12T18:54:24.585138771Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-dthn7,Uid:70d0491e-916d-4334-8058-e007f6b7c886,Namespace:kube-system,Attempt:0,}" Apr 12 18:54:24.611206 env[1186]: time="2024-04-12T18:54:24.611142993Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c5d75f8dc-vqn77,Uid:54d0b786-ab92-49a5-9480-ceea1bb2f91f,Namespace:calico-system,Attempt:0,}" Apr 12 18:54:24.748124 env[1186]: time="2024-04-12T18:54:24.746558634Z" level=info msg="shim disconnected" id=d9d90fdf623948d3ca5984ecd450592054ebbd63aeb02bac4f1c77aeb35a7896 Apr 12 18:54:24.748124 env[1186]: time="2024-04-12T18:54:24.746621503Z" level=warning msg="cleaning up after shim disconnected" id=d9d90fdf623948d3ca5984ecd450592054ebbd63aeb02bac4f1c77aeb35a7896 namespace=k8s.io Apr 12 18:54:24.748124 env[1186]: time="2024-04-12T18:54:24.746634918Z" level=info msg="cleaning up dead shim" Apr 12 18:54:24.804890 env[1186]: time="2024-04-12T18:54:24.804710033Z" level=warning msg="cleanup warnings time=\"2024-04-12T18:54:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2787 runtime=io.containerd.runc.v2\n" Apr 12 18:54:24.866120 kubelet[2101]: E0412 18:54:24.865428 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:24.867134 env[1186]: time="2024-04-12T18:54:24.867090336Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-hkcfz,Uid:4af71046-a0e9-4b27-8d92-cee652a23de0,Namespace:kube-system,Attempt:0,}" Apr 12 18:54:24.871094 kubelet[2101]: E0412 18:54:24.870887 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:24.872003 env[1186]: time="2024-04-12T18:54:24.871968068Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.3\"" Apr 12 18:54:25.009134 env[1186]: time="2024-04-12T18:54:25.008968253Z" level=error msg="Failed to destroy network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.009837 env[1186]: time="2024-04-12T18:54:25.009799516Z" level=error msg="encountered an error cleaning up failed sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.010030 env[1186]: time="2024-04-12T18:54:25.009978244Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c5d75f8dc-vqn77,Uid:54d0b786-ab92-49a5-9480-ceea1bb2f91f,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.014990 kubelet[2101]: E0412 18:54:25.010520 2101 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.014990 kubelet[2101]: E0412 18:54:25.010612 2101 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6c5d75f8dc-vqn77" Apr 12 18:54:25.014990 kubelet[2101]: E0412 18:54:25.010640 2101 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6c5d75f8dc-vqn77" Apr 12 18:54:25.015395 kubelet[2101]: E0412 18:54:25.010730 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6c5d75f8dc-vqn77_calico-system(54d0b786-ab92-49a5-9480-ceea1bb2f91f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6c5d75f8dc-vqn77_calico-system(54d0b786-ab92-49a5-9480-ceea1bb2f91f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6c5d75f8dc-vqn77" podUID="54d0b786-ab92-49a5-9480-ceea1bb2f91f" Apr 12 18:54:25.030078 env[1186]: time="2024-04-12T18:54:25.026842491Z" level=error msg="Failed to destroy network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.030078 env[1186]: time="2024-04-12T18:54:25.027358347Z" level=error msg="encountered an error cleaning up failed sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.030078 env[1186]: time="2024-04-12T18:54:25.027444410Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gv4d4,Uid:63b0dc57-1b72-4064-a3cc-9a7caa2fa16b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.030379 kubelet[2101]: E0412 18:54:25.027748 2101 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.030379 kubelet[2101]: E0412 18:54:25.027836 2101 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-gv4d4" Apr 12 18:54:25.030379 kubelet[2101]: E0412 18:54:25.027873 2101 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-gv4d4" Apr 12 18:54:25.030559 kubelet[2101]: E0412 18:54:25.027975 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-gv4d4_calico-system(63b0dc57-1b72-4064-a3cc-9a7caa2fa16b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-gv4d4_calico-system(63b0dc57-1b72-4064-a3cc-9a7caa2fa16b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:25.048663 env[1186]: time="2024-04-12T18:54:25.048553057Z" level=error msg="Failed to destroy network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.049175 env[1186]: time="2024-04-12T18:54:25.049114459Z" level=error msg="encountered an error cleaning up failed sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.049248 env[1186]: time="2024-04-12T18:54:25.049202716Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-dthn7,Uid:70d0491e-916d-4334-8058-e007f6b7c886,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.050173 kubelet[2101]: E0412 18:54:25.049646 2101 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.050173 kubelet[2101]: E0412 18:54:25.049724 2101 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-dthn7" Apr 12 18:54:25.050173 kubelet[2101]: E0412 18:54:25.049747 2101 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-dthn7" Apr 12 18:54:25.050333 kubelet[2101]: E0412 18:54:25.049816 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-dthn7_kube-system(70d0491e-916d-4334-8058-e007f6b7c886)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-dthn7_kube-system(70d0491e-916d-4334-8058-e007f6b7c886)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-dthn7" podUID="70d0491e-916d-4334-8058-e007f6b7c886" Apr 12 18:54:25.059336 env[1186]: time="2024-04-12T18:54:25.059108518Z" level=error msg="Failed to destroy network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.059715 env[1186]: time="2024-04-12T18:54:25.059663098Z" level=error msg="encountered an error cleaning up failed sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.059776 env[1186]: time="2024-04-12T18:54:25.059736316Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-hkcfz,Uid:4af71046-a0e9-4b27-8d92-cee652a23de0,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.060780 kubelet[2101]: E0412 18:54:25.060229 2101 remote_runtime.go:193] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.060780 kubelet[2101]: E0412 18:54:25.060342 2101 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-hkcfz" Apr 12 18:54:25.060780 kubelet[2101]: E0412 18:54:25.060369 2101 kuberuntime_manager.go:1172] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-76f75df574-hkcfz" Apr 12 18:54:25.060971 kubelet[2101]: E0412 18:54:25.060460 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-76f75df574-hkcfz_kube-system(4af71046-a0e9-4b27-8d92-cee652a23de0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-76f75df574-hkcfz_kube-system(4af71046-a0e9-4b27-8d92-cee652a23de0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-hkcfz" podUID="4af71046-a0e9-4b27-8d92-cee652a23de0" Apr 12 18:54:25.217717 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4-shm.mount: Deactivated successfully. Apr 12 18:54:25.873314 kubelet[2101]: I0412 18:54:25.872462 2101 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:25.874150 env[1186]: time="2024-04-12T18:54:25.874084820Z" level=info msg="StopPodSandbox for \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\"" Apr 12 18:54:25.877983 kubelet[2101]: I0412 18:54:25.875845 2101 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:54:25.878173 env[1186]: time="2024-04-12T18:54:25.876383360Z" level=info msg="StopPodSandbox for \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\"" Apr 12 18:54:25.901490 kubelet[2101]: I0412 18:54:25.900076 2101 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:25.902971 env[1186]: time="2024-04-12T18:54:25.902821811Z" level=info msg="StopPodSandbox for \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\"" Apr 12 18:54:25.911831 kubelet[2101]: I0412 18:54:25.911362 2101 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:25.912262 env[1186]: time="2024-04-12T18:54:25.912222097Z" level=info msg="StopPodSandbox for \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\"" Apr 12 18:54:25.972881 env[1186]: time="2024-04-12T18:54:25.972788367Z" level=error msg="StopPodSandbox for \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\" failed" error="failed to destroy network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:25.973231 kubelet[2101]: E0412 18:54:25.973195 2101 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:25.973316 kubelet[2101]: E0412 18:54:25.973307 2101 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a"} Apr 12 18:54:25.973369 kubelet[2101]: E0412 18:54:25.973356 2101 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"70d0491e-916d-4334-8058-e007f6b7c886\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:54:25.973506 kubelet[2101]: E0412 18:54:25.973410 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"70d0491e-916d-4334-8058-e007f6b7c886\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-dthn7" podUID="70d0491e-916d-4334-8058-e007f6b7c886" Apr 12 18:54:26.000080 env[1186]: time="2024-04-12T18:54:25.999975966Z" level=error msg="StopPodSandbox for \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\" failed" error="failed to destroy network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:26.000949 kubelet[2101]: E0412 18:54:26.000334 2101 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:26.000949 kubelet[2101]: E0412 18:54:26.000394 2101 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4"} Apr 12 18:54:26.000949 kubelet[2101]: E0412 18:54:26.000459 2101 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:54:26.000949 kubelet[2101]: E0412 18:54:26.000495 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-gv4d4" podUID="63b0dc57-1b72-4064-a3cc-9a7caa2fa16b" Apr 12 18:54:26.023176 env[1186]: time="2024-04-12T18:54:26.019146158Z" level=error msg="StopPodSandbox for \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\" failed" error="failed to destroy network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:26.023662 kubelet[2101]: E0412 18:54:26.019495 2101 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:54:26.023662 kubelet[2101]: E0412 18:54:26.019557 2101 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d"} Apr 12 18:54:26.023662 kubelet[2101]: E0412 18:54:26.019606 2101 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"54d0b786-ab92-49a5-9480-ceea1bb2f91f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:54:26.023662 kubelet[2101]: E0412 18:54:26.019658 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"54d0b786-ab92-49a5-9480-ceea1bb2f91f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6c5d75f8dc-vqn77" podUID="54d0b786-ab92-49a5-9480-ceea1bb2f91f" Apr 12 18:54:26.029320 env[1186]: time="2024-04-12T18:54:26.029185328Z" level=error msg="StopPodSandbox for \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\" failed" error="failed to destroy network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Apr 12 18:54:26.029635 kubelet[2101]: E0412 18:54:26.029559 2101 remote_runtime.go:222] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:26.029635 kubelet[2101]: E0412 18:54:26.029633 2101 kuberuntime_manager.go:1381] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb"} Apr 12 18:54:26.030046 kubelet[2101]: E0412 18:54:26.029687 2101 kuberuntime_manager.go:1081] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4af71046-a0e9-4b27-8d92-cee652a23de0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Apr 12 18:54:26.030046 kubelet[2101]: E0412 18:54:26.029738 2101 pod_workers.go:1298] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4af71046-a0e9-4b27-8d92-cee652a23de0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-76f75df574-hkcfz" podUID="4af71046-a0e9-4b27-8d92-cee652a23de0" Apr 12 18:54:30.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.120:22-10.0.0.1:51884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:30.569601 systemd[1]: Started sshd@7-10.0.0.120:22-10.0.0.1:51884.service. Apr 12 18:54:30.579820 kernel: audit: type=1130 audit(1712948070.568:1119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.120:22-10.0.0.1:51884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:31.036000 audit[3039]: USER_ACCT pid=3039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:31.038733 sshd[3039]: Accepted publickey for core from 10.0.0.1 port 51884 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:54:31.044486 kernel: audit: type=1101 audit(1712948071.036:1120): pid=3039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:31.044000 audit[3039]: CRED_ACQ pid=3039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:31.052154 sshd[3039]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:54:31.062319 kernel: audit: type=1103 audit(1712948071.044:1121): pid=3039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:31.062524 kernel: audit: type=1006 audit(1712948071.044:1122): pid=3039 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Apr 12 18:54:31.062561 kernel: audit: type=1300 audit(1712948071.044:1122): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc64f9ace0 a2=3 a3=0 items=0 ppid=1 pid=3039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:31.044000 audit[3039]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc64f9ace0 a2=3 a3=0 items=0 ppid=1 pid=3039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:31.044000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:31.096938 kernel: audit: type=1327 audit(1712948071.044:1122): proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:31.088000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:31.106999 systemd[1]: Started session-8.scope. Apr 12 18:54:31.109013 systemd-logind[1168]: New session 8 of user core. Apr 12 18:54:31.111466 kernel: audit: type=1400 audit(1712948071.088:1123): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:31.088000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023d05a0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:31.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:31.137618 kernel: audit: type=1300 audit(1712948071.088:1123): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023d05a0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:31.137805 kernel: audit: type=1327 audit(1712948071.088:1123): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:31.088000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:31.088000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00101aac0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:31.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:31.136000 audit[3039]: USER_START pid=3039 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:31.138000 audit[3041]: CRED_ACQ pid=3041 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:31.158968 kernel: audit: type=1400 audit(1712948071.088:1124): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:31.571335 sshd[3039]: pam_unix(sshd:session): session closed for user core Apr 12 18:54:31.572000 audit[3039]: USER_END pid=3039 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:31.573000 audit[3039]: CRED_DISP pid=3039 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:31.580742 systemd[1]: sshd@7-10.0.0.120:22-10.0.0.1:51884.service: Deactivated successfully. Apr 12 18:54:31.581709 systemd[1]: session-8.scope: Deactivated successfully. Apr 12 18:54:31.583153 systemd-logind[1168]: Session 8 logged out. Waiting for processes to exit. Apr 12 18:54:31.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.120:22-10.0.0.1:51884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:31.597422 systemd-logind[1168]: Removed session 8. Apr 12 18:54:33.968429 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount777130166.mount: Deactivated successfully. Apr 12 18:54:34.257000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:34.257000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5f a1=c0063ac3c0 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:54:34.257000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:54:34.258000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:34.258000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=66 a1=c008a80520 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:54:34.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:54:34.258000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=521034 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:34.258000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=65 a1=c004b14060 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:54:34.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:54:34.258000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=521028 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:34.258000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c0034570b0 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:54:34.258000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:54:34.266000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:34.266000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c005b33260 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:54:34.266000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:54:34.271000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:34.271000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5f a1=c006bbfb00 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:54:34.271000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:54:34.668558 env[1186]: time="2024-04-12T18:54:34.665037743Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:34.675514 env[1186]: time="2024-04-12T18:54:34.675325389Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5c6ffd2b2a1d03e9506d4669a91587cd464de04cb141392742fbf4dff2fbd931,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:34.687957 env[1186]: time="2024-04-12T18:54:34.684322778Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:34.697016 env[1186]: time="2024-04-12T18:54:34.694789573Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:0dec3ede02137c9bc7a49b50006739ddb7c20fc2b8fa12d2bd8234c680e8df34,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:34.697016 env[1186]: time="2024-04-12T18:54:34.695154994Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.27.3\" returns image reference \"sha256:5c6ffd2b2a1d03e9506d4669a91587cd464de04cb141392742fbf4dff2fbd931\"" Apr 12 18:54:34.725117 env[1186]: time="2024-04-12T18:54:34.723891959Z" level=info msg="CreateContainer within sandbox \"69928e3e0ad3a7f1ddbac6412126a12a75e553f1524d4f078f6b88aec56d59cd\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Apr 12 18:54:34.777909 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2259261569.mount: Deactivated successfully. Apr 12 18:54:34.815229 env[1186]: time="2024-04-12T18:54:34.815119037Z" level=info msg="CreateContainer within sandbox \"69928e3e0ad3a7f1ddbac6412126a12a75e553f1524d4f078f6b88aec56d59cd\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"913119e654fa0be3129e14172ce9ba552f080f3d446c98154fd64f9d1d213fe0\"" Apr 12 18:54:34.816227 env[1186]: time="2024-04-12T18:54:34.816181062Z" level=info msg="StartContainer for \"913119e654fa0be3129e14172ce9ba552f080f3d446c98154fd64f9d1d213fe0\"" Apr 12 18:54:34.888301 systemd[1]: Started cri-containerd-913119e654fa0be3129e14172ce9ba552f080f3d446c98154fd64f9d1d213fe0.scope. Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f08ce597088 items=0 ppid=2523 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:34.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931333131396536353466613062653331323965313431373263653962 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.921000 audit: BPF prog-id=139 op=LOAD Apr 12 18:54:34.921000 audit[3064]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001dce28 items=0 ppid=2523 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:34.921000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931333131396536353466613062653331323965313431373263653962 Apr 12 18:54:34.924000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.924000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.924000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.924000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.924000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.924000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.924000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.924000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.924000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.924000 audit: BPF prog-id=140 op=LOAD Apr 12 18:54:34.924000 audit[3064]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001dce78 items=0 ppid=2523 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:34.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931333131396536353466613062653331323965313431373263653962 Apr 12 18:54:34.927000 audit: BPF prog-id=140 op=UNLOAD Apr 12 18:54:34.927000 audit: BPF prog-id=139 op=UNLOAD Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { perfmon } for pid=3064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit[3064]: AVC avc: denied { bpf } for pid=3064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:34.927000 audit: BPF prog-id=141 op=LOAD Apr 12 18:54:34.927000 audit[3064]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0001dcf08 items=0 ppid=2523 pid=3064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:34.927000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931333131396536353466613062653331323965313431373263653962 Apr 12 18:54:35.358773 env[1186]: time="2024-04-12T18:54:35.358685103Z" level=info msg="StartContainer for \"913119e654fa0be3129e14172ce9ba552f080f3d446c98154fd64f9d1d213fe0\" returns successfully" Apr 12 18:54:35.483284 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Apr 12 18:54:35.483536 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Apr 12 18:54:36.368727 kubelet[2101]: E0412 18:54:36.368668 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:36.568000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.120:22-10.0.0.1:51896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:36.569232 systemd[1]: Started sshd@8-10.0.0.120:22-10.0.0.1:51896.service. Apr 12 18:54:36.571581 kernel: kauditd_printk_skb: 68 callbacks suppressed Apr 12 18:54:36.571655 kernel: audit: type=1130 audit(1712948076.568:1142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.120:22-10.0.0.1:51896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:36.656000 audit[3147]: USER_ACCT pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.659656 sshd[3147]: Accepted publickey for core from 10.0.0.1 port 51896 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:54:36.664530 kernel: audit: type=1101 audit(1712948076.656:1143): pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.680900 kernel: audit: type=1103 audit(1712948076.665:1144): pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.681104 kernel: audit: type=1006 audit(1712948076.665:1145): pid=3147 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Apr 12 18:54:36.665000 audit[3147]: CRED_ACQ pid=3147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.667393 sshd[3147]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:54:36.665000 audit[3147]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc37c7ae10 a2=3 a3=0 items=0 ppid=1 pid=3147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:36.688441 kernel: audit: type=1300 audit(1712948076.665:1145): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc37c7ae10 a2=3 a3=0 items=0 ppid=1 pid=3147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:36.665000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:36.691177 systemd-logind[1168]: New session 9 of user core. Apr 12 18:54:36.697144 kernel: audit: type=1327 audit(1712948076.665:1145): proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:36.698089 systemd[1]: Started session-9.scope. Apr 12 18:54:36.722000 audit[3147]: USER_START pid=3147 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.733932 kernel: audit: type=1105 audit(1712948076.722:1146): pid=3147 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.734159 kernel: audit: type=1103 audit(1712948076.725:1147): pid=3149 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.725000 audit[3149]: CRED_ACQ pid=3149 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.932611 sshd[3147]: pam_unix(sshd:session): session closed for user core Apr 12 18:54:36.955357 kernel: audit: type=1106 audit(1712948076.940:1148): pid=3147 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.955727 kernel: audit: type=1104 audit(1712948076.940:1149): pid=3147 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.940000 audit[3147]: USER_END pid=3147 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.940000 audit[3147]: CRED_DISP pid=3147 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:36.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.120:22-10.0.0.1:51896 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:36.956655 systemd[1]: sshd@8-10.0.0.120:22-10.0.0.1:51896.service: Deactivated successfully. Apr 12 18:54:36.964272 systemd[1]: session-9.scope: Deactivated successfully. Apr 12 18:54:36.972291 systemd-logind[1168]: Session 9 logged out. Waiting for processes to exit. Apr 12 18:54:36.983544 systemd-logind[1168]: Removed session 9. Apr 12 18:54:37.248000 audit[3240]: AVC avc: denied { write } for pid=3240 comm="tee" name="fd" dev="proc" ino=24005 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:54:37.248000 audit[3240]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdd130d991 a2=241 a3=1b6 items=1 ppid=3192 pid=3240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.248000 audit: CWD cwd="/etc/service/enabled/cni/log" Apr 12 18:54:37.248000 audit: PATH item=0 name="/dev/fd/63" inode=25086 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:54:37.248000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:54:37.258000 audit[3237]: AVC avc: denied { write } for pid=3237 comm="tee" name="fd" dev="proc" ino=25094 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:54:37.258000 audit[3237]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc2ffe2990 a2=241 a3=1b6 items=1 ppid=3181 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.258000 audit: CWD cwd="/etc/service/enabled/bird/log" Apr 12 18:54:37.258000 audit: PATH item=0 name="/dev/fd/63" inode=24000 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:54:37.258000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:54:37.263000 audit[3226]: AVC avc: denied { write } for pid=3226 comm="tee" name="fd" dev="proc" ino=24009 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:54:37.263000 audit[3226]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffc0316980 a2=241 a3=1b6 items=1 ppid=3188 pid=3226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.263000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Apr 12 18:54:37.263000 audit: PATH item=0 name="/dev/fd/63" inode=23458 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:54:37.263000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:54:37.266000 audit[3227]: AVC avc: denied { write } for pid=3227 comm="tee" name="fd" dev="proc" ino=24013 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:54:37.266000 audit[3227]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd4513098f a2=241 a3=1b6 items=1 ppid=3185 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.266000 audit: CWD cwd="/etc/service/enabled/felix/log" Apr 12 18:54:37.266000 audit: PATH item=0 name="/dev/fd/63" inode=25078 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:54:37.266000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:54:37.271000 audit[3242]: AVC avc: denied { write } for pid=3242 comm="tee" name="fd" dev="proc" ino=24017 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:54:37.271000 audit[3242]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc5037197f a2=241 a3=1b6 items=1 ppid=3184 pid=3242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.271000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Apr 12 18:54:37.271000 audit: PATH item=0 name="/dev/fd/63" inode=23461 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:54:37.271000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:54:37.272000 audit[3261]: AVC avc: denied { write } for pid=3261 comm="tee" name="fd" dev="proc" ino=25836 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:54:37.272000 audit[3261]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcae63098f a2=241 a3=1b6 items=1 ppid=3190 pid=3261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.272000 audit: CWD cwd="/etc/service/enabled/bird6/log" Apr 12 18:54:37.272000 audit: PATH item=0 name="/dev/fd/63" inode=25099 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:54:37.272000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:54:37.301000 audit[3268]: AVC avc: denied { write } for pid=3268 comm="tee" name="fd" dev="proc" ino=25842 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Apr 12 18:54:37.301000 audit[3268]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffebb5f398f a2=241 a3=1b6 items=1 ppid=3201 pid=3268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.301000 audit: CWD cwd="/etc/service/enabled/confd/log" Apr 12 18:54:37.301000 audit: PATH item=0 name="/dev/fd/63" inode=24022 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Apr 12 18:54:37.301000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Apr 12 18:54:37.370976 kubelet[2101]: E0412 18:54:37.370899 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:37.796000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.796000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.796000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.796000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.796000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.796000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.796000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.796000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.796000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.796000 audit: BPF prog-id=142 op=LOAD Apr 12 18:54:37.796000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff053d9eb0 a2=70 a3=7fe6eb1d9000 items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.796000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.802000 audit: BPF prog-id=142 op=UNLOAD Apr 12 18:54:37.802000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.802000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.802000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.802000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.802000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.802000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.802000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.802000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.802000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.802000 audit: BPF prog-id=143 op=LOAD Apr 12 18:54:37.802000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff053d9eb0 a2=70 a3=6f items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.802000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.821000 audit: BPF prog-id=143 op=UNLOAD Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff053d9e60 a2=70 a3=7fff053d9eb0 items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.821000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.821000 audit: BPF prog-id=144 op=LOAD Apr 12 18:54:37.821000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=5 a1=7fff053d9e40 a2=70 a3=7fff053d9eb0 items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.821000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.824000 audit: BPF prog-id=144 op=UNLOAD Apr 12 18:54:37.824000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.824000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff053d9f20 a2=70 a3=0 items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.824000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.824000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.824000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff053d9f10 a2=70 a3=0 items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.824000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.824000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.824000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff053d9e80 a2=70 a3=0 items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.824000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff053d9f50 a2=70 a3=1251e10 items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff053d9f50 a2=70 a3=124e880 items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.825000 audit: BPF prog-id=145 op=LOAD Apr 12 18:54:37.825000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff053d9e70 a2=70 a3=0 items=0 ppid=3187 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.825000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Apr 12 18:54:37.840000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.840000 audit[3358]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc626d0430 a2=70 a3=208 items=0 ppid=3187 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.840000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Apr 12 18:54:37.840000 audit[3358]: AVC avc: denied { bpf } for pid=3358 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:37.840000 audit[3358]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffc626d0300 a2=70 a3=3 items=0 ppid=3187 pid=3358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.840000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Apr 12 18:54:37.868000 audit: BPF prog-id=145 op=UNLOAD Apr 12 18:54:37.993000 audit[3389]: NETFILTER_CFG table=mangle:97 family=2 entries=16 op=nft_register_chain pid=3389 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:37.993000 audit[3389]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff31204540 a2=0 a3=7fff3120452c items=0 ppid=3187 pid=3389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:37.993000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:38.001000 audit[3387]: NETFILTER_CFG table=nat:98 family=2 entries=15 op=nft_register_chain pid=3387 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:38.001000 audit[3387]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffff8818860 a2=0 a3=7ffff881884c items=0 ppid=3187 pid=3387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:38.001000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:38.023000 audit[3386]: NETFILTER_CFG table=raw:99 family=2 entries=19 op=nft_register_chain pid=3386 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:38.023000 audit[3386]: SYSCALL arch=c000003e syscall=46 success=yes exit=6992 a0=3 a1=7ffd4b783880 a2=0 a3=7ffd4b78386c items=0 ppid=3187 pid=3386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:38.023000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:38.030000 audit[3391]: NETFILTER_CFG table=filter:100 family=2 entries=39 op=nft_register_chain pid=3391 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:38.030000 audit[3391]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffc521aff40 a2=0 a3=7ffc521aff2c items=0 ppid=3187 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:38.030000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:38.636805 systemd-networkd[1082]: vxlan.calico: Link UP Apr 12 18:54:38.636827 systemd-networkd[1082]: vxlan.calico: Gained carrier Apr 12 18:54:39.499760 env[1186]: time="2024-04-12T18:54:39.494682240Z" level=info msg="StopPodSandbox for \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\"" Apr 12 18:54:39.660765 kubelet[2101]: I0412 18:54:39.660324 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-node-fw8b9" podStartSLOduration=6.342891213 podStartE2EDuration="37.660266763s" podCreationTimestamp="2024-04-12 18:54:02 +0000 UTC" firstStartedPulling="2024-04-12 18:54:03.378767159 +0000 UTC m=+21.138445338" lastFinishedPulling="2024-04-12 18:54:34.696142709 +0000 UTC m=+52.455820888" observedRunningTime="2024-04-12 18:54:36.42305497 +0000 UTC m=+54.182733180" watchObservedRunningTime="2024-04-12 18:54:39.660266763 +0000 UTC m=+57.419944942" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.647 [INFO][3416] k8s.go 585: Cleaning up netns ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.647 [INFO][3416] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" iface="eth0" netns="/var/run/netns/cni-449b99ba-97b4-189a-f6a7-bcaaa8566c8b" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.650 [INFO][3416] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" iface="eth0" netns="/var/run/netns/cni-449b99ba-97b4-189a-f6a7-bcaaa8566c8b" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.663 [INFO][3416] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" iface="eth0" netns="/var/run/netns/cni-449b99ba-97b4-189a-f6a7-bcaaa8566c8b" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.663 [INFO][3416] k8s.go 592: Releasing IP address(es) ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.663 [INFO][3416] utils.go 188: Calico CNI releasing IP address ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.851 [INFO][3424] ipam_plugin.go 415: Releasing address using handleID ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" HandleID="k8s-pod-network.3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.852 [INFO][3424] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.852 [INFO][3424] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.879 [WARNING][3424] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" HandleID="k8s-pod-network.3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.879 [INFO][3424] ipam_plugin.go 443: Releasing address using workloadID ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" HandleID="k8s-pod-network.3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.911 [INFO][3424] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:39.926654 env[1186]: 2024-04-12 18:54:39.922 [INFO][3416] k8s.go 598: Teardown processing complete. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:39.934443 systemd[1]: run-netns-cni\x2d449b99ba\x2d97b4\x2d189a\x2df6a7\x2dbcaaa8566c8b.mount: Deactivated successfully. Apr 12 18:54:39.938213 env[1186]: time="2024-04-12T18:54:39.938112921Z" level=info msg="TearDown network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\" successfully" Apr 12 18:54:39.938213 env[1186]: time="2024-04-12T18:54:39.938198943Z" level=info msg="StopPodSandbox for \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\" returns successfully" Apr 12 18:54:39.939424 env[1186]: time="2024-04-12T18:54:39.939360985Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gv4d4,Uid:63b0dc57-1b72-4064-a3cc-9a7caa2fa16b,Namespace:calico-system,Attempt:1,}" Apr 12 18:54:40.072934 systemd-networkd[1082]: vxlan.calico: Gained IPv6LL Apr 12 18:54:40.501589 env[1186]: time="2024-04-12T18:54:40.493427460Z" level=info msg="StopPodSandbox for \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\"" Apr 12 18:54:40.501589 env[1186]: time="2024-04-12T18:54:40.495874456Z" level=info msg="StopPodSandbox for \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\"" Apr 12 18:54:40.870024 systemd-networkd[1082]: calie1cfe2b3853: Link UP Apr 12 18:54:40.885822 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Apr 12 18:54:40.885978 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calie1cfe2b3853: link becomes ready Apr 12 18:54:40.887624 systemd-networkd[1082]: calie1cfe2b3853: Gained carrier Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.653 [INFO][3475] k8s.go 585: Cleaning up netns ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.654 [INFO][3475] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" iface="eth0" netns="/var/run/netns/cni-1b22df86-2ba9-4dd7-41db-f8648199db49" Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.654 [INFO][3475] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" iface="eth0" netns="/var/run/netns/cni-1b22df86-2ba9-4dd7-41db-f8648199db49" Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.660 [INFO][3475] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" iface="eth0" netns="/var/run/netns/cni-1b22df86-2ba9-4dd7-41db-f8648199db49" Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.660 [INFO][3475] k8s.go 592: Releasing IP address(es) ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.660 [INFO][3475] utils.go 188: Calico CNI releasing IP address ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.725 [INFO][3499] ipam_plugin.go 415: Releasing address using handleID ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" HandleID="k8s-pod-network.befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.726 [INFO][3499] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.839 [INFO][3499] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.874 [WARNING][3499] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" HandleID="k8s-pod-network.befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.874 [INFO][3499] ipam_plugin.go 443: Releasing address using workloadID ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" HandleID="k8s-pod-network.befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.891 [INFO][3499] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:40.902626 env[1186]: 2024-04-12 18:54:40.900 [INFO][3475] k8s.go 598: Teardown processing complete. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:40.914980 env[1186]: time="2024-04-12T18:54:40.914899115Z" level=info msg="TearDown network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\" successfully" Apr 12 18:54:40.915084 systemd[1]: run-netns-cni\x2d1b22df86\x2d2ba9\x2d4dd7\x2d41db\x2df8648199db49.mount: Deactivated successfully. Apr 12 18:54:40.915351 env[1186]: time="2024-04-12T18:54:40.915323446Z" level=info msg="StopPodSandbox for \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\" returns successfully" Apr 12 18:54:40.925454 kubelet[2101]: E0412 18:54:40.916282 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.471 [INFO][3432] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--gv4d4-eth0 csi-node-driver- calico-system 63b0dc57-1b72-4064-a3cc-9a7caa2fa16b 842 0 2024-04-12 18:54:02 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:64699887c5 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:default] map[] [] [] []} {k8s localhost csi-node-driver-gv4d4 eth0 default [] [] [kns.calico-system ksa.calico-system.default] calie1cfe2b3853 [] []}} ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Namespace="calico-system" Pod="csi-node-driver-gv4d4" WorkloadEndpoint="localhost-k8s-csi--node--driver--gv4d4-" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.471 [INFO][3432] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Namespace="calico-system" Pod="csi-node-driver-gv4d4" WorkloadEndpoint="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.640 [INFO][3474] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" HandleID="k8s-pod-network.67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.710 [INFO][3474] ipam_plugin.go 268: Auto assigning IP ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" HandleID="k8s-pod-network.67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ed910), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-gv4d4", "timestamp":"2024-04-12 18:54:40.640962965 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.710 [INFO][3474] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.711 [INFO][3474] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.711 [INFO][3474] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.719 [INFO][3474] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" host="localhost" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.738 [INFO][3474] ipam.go 372: Looking up existing affinities for host host="localhost" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.764 [INFO][3474] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.774 [INFO][3474] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.785 [INFO][3474] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.785 [INFO][3474] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" host="localhost" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.799 [INFO][3474] ipam.go 1682: Creating new handle: k8s-pod-network.67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5 Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.819 [INFO][3474] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" host="localhost" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.839 [INFO][3474] ipam.go 1216: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" host="localhost" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.839 [INFO][3474] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" host="localhost" Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.839 [INFO][3474] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:40.940000 env[1186]: 2024-04-12 18:54:40.842 [INFO][3474] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" HandleID="k8s-pod-network.67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:40.940863 env[1186]: 2024-04-12 18:54:40.860 [INFO][3432] k8s.go 385: Populated endpoint ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Namespace="calico-system" Pod="csi-node-driver-gv4d4" WorkloadEndpoint="localhost-k8s-csi--node--driver--gv4d4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gv4d4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b", ResourceVersion:"842", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 54, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"64699887c5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-gv4d4", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie1cfe2b3853", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:40.940863 env[1186]: 2024-04-12 18:54:40.860 [INFO][3432] k8s.go 386: Calico CNI using IPs: [192.168.88.129/32] ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Namespace="calico-system" Pod="csi-node-driver-gv4d4" WorkloadEndpoint="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:40.940863 env[1186]: 2024-04-12 18:54:40.860 [INFO][3432] dataplane_linux.go 68: Setting the host side veth name to calie1cfe2b3853 ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Namespace="calico-system" Pod="csi-node-driver-gv4d4" WorkloadEndpoint="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:40.940863 env[1186]: 2024-04-12 18:54:40.887 [INFO][3432] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Namespace="calico-system" Pod="csi-node-driver-gv4d4" WorkloadEndpoint="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:40.940863 env[1186]: 2024-04-12 18:54:40.888 [INFO][3432] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Namespace="calico-system" Pod="csi-node-driver-gv4d4" WorkloadEndpoint="localhost-k8s-csi--node--driver--gv4d4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gv4d4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b", ResourceVersion:"842", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 54, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"64699887c5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5", Pod:"csi-node-driver-gv4d4", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie1cfe2b3853", MAC:"6e:cd:d8:eb:0c:07", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:40.940863 env[1186]: 2024-04-12 18:54:40.929 [INFO][3432] k8s.go 498: Wrote updated endpoint to datastore ContainerID="67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5" Namespace="calico-system" Pod="csi-node-driver-gv4d4" WorkloadEndpoint="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:40.940863 env[1186]: time="2024-04-12T18:54:40.937135833Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-dthn7,Uid:70d0491e-916d-4334-8058-e007f6b7c886,Namespace:kube-system,Attempt:1,}" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.702 [INFO][3488] k8s.go 585: Cleaning up netns ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.710 [INFO][3488] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" iface="eth0" netns="/var/run/netns/cni-6886e305-708d-124d-25dd-43aba2a4cc5a" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.710 [INFO][3488] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" iface="eth0" netns="/var/run/netns/cni-6886e305-708d-124d-25dd-43aba2a4cc5a" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.711 [INFO][3488] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" iface="eth0" netns="/var/run/netns/cni-6886e305-708d-124d-25dd-43aba2a4cc5a" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.711 [INFO][3488] k8s.go 592: Releasing IP address(es) ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.711 [INFO][3488] utils.go 188: Calico CNI releasing IP address ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.805 [INFO][3506] ipam_plugin.go 415: Releasing address using handleID ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" HandleID="k8s-pod-network.3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.805 [INFO][3506] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.895 [INFO][3506] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.924 [WARNING][3506] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" HandleID="k8s-pod-network.3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.924 [INFO][3506] ipam_plugin.go 443: Releasing address using workloadID ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" HandleID="k8s-pod-network.3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.936 [INFO][3506] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:40.958386 env[1186]: 2024-04-12 18:54:40.940 [INFO][3488] k8s.go 598: Teardown processing complete. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:40.967186 systemd[1]: run-netns-cni\x2d6886e305\x2d708d\x2d124d\x2d25dd\x2d43aba2a4cc5a.mount: Deactivated successfully. Apr 12 18:54:40.975925 env[1186]: time="2024-04-12T18:54:40.975851718Z" level=info msg="TearDown network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\" successfully" Apr 12 18:54:40.975925 env[1186]: time="2024-04-12T18:54:40.975915348Z" level=info msg="StopPodSandbox for \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\" returns successfully" Apr 12 18:54:40.976783 kubelet[2101]: E0412 18:54:40.976301 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:40.978627 env[1186]: time="2024-04-12T18:54:40.978586226Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-hkcfz,Uid:4af71046-a0e9-4b27-8d92-cee652a23de0,Namespace:kube-system,Attempt:1,}" Apr 12 18:54:41.012615 env[1186]: time="2024-04-12T18:54:41.011010129Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:54:41.012615 env[1186]: time="2024-04-12T18:54:41.011071766Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:54:41.012615 env[1186]: time="2024-04-12T18:54:41.011088226Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:54:41.012615 env[1186]: time="2024-04-12T18:54:41.011244251Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5 pid=3537 runtime=io.containerd.runc.v2 Apr 12 18:54:41.024000 audit[3548]: NETFILTER_CFG table=filter:101 family=2 entries=36 op=nft_register_chain pid=3548 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:41.024000 audit[3548]: SYSCALL arch=c000003e syscall=46 success=yes exit=20404 a0=3 a1=7ffd15298340 a2=0 a3=7ffd1529832c items=0 ppid=3187 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.024000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:41.123482 systemd[1]: Started cri-containerd-67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5.scope. Apr 12 18:54:41.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.157000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.157000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.159000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.159000 audit: BPF prog-id=146 op=LOAD Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3537 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637643064306437323030633361396238333563323531613766656433 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3537 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637643064306437323030633361396238333563323531613766656433 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.160000 audit: BPF prog-id=147 op=LOAD Apr 12 18:54:41.160000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000408110 items=0 ppid=3537 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.160000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637643064306437323030633361396238333563323531613766656433 Apr 12 18:54:41.185000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.185000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.185000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.185000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.185000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.185000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.185000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.185000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.185000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.185000 audit: BPF prog-id=148 op=LOAD Apr 12 18:54:41.185000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000408158 items=0 ppid=3537 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.185000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637643064306437323030633361396238333563323531613766656433 Apr 12 18:54:41.195000 audit: BPF prog-id=148 op=UNLOAD Apr 12 18:54:41.195000 audit: BPF prog-id=147 op=UNLOAD Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { perfmon } for pid=3562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit[3562]: AVC avc: denied { bpf } for pid=3562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.195000 audit: BPF prog-id=149 op=LOAD Apr 12 18:54:41.195000 audit[3562]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000408568 items=0 ppid=3537 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.195000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637643064306437323030633361396238333563323531613766656433 Apr 12 18:54:41.239622 systemd-resolved[1134]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Apr 12 18:54:41.291702 env[1186]: time="2024-04-12T18:54:41.291603878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-gv4d4,Uid:63b0dc57-1b72-4064-a3cc-9a7caa2fa16b,Namespace:calico-system,Attempt:1,} returns sandbox id \"67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5\"" Apr 12 18:54:41.331840 env[1186]: time="2024-04-12T18:54:41.330363885Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.3\"" Apr 12 18:54:41.470810 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5a4204a9370: link becomes ready Apr 12 18:54:41.460828 systemd-networkd[1082]: cali5a4204a9370: Link UP Apr 12 18:54:41.469207 systemd-networkd[1082]: cali5a4204a9370: Gained carrier Apr 12 18:54:41.508899 env[1186]: time="2024-04-12T18:54:41.508138864Z" level=info msg="StopPodSandbox for \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\"" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.131 [INFO][3550] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--76f75df574--dthn7-eth0 coredns-76f75df574- kube-system 70d0491e-916d-4334-8058-e007f6b7c886 851 0 2024-04-12 18:53:54 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-76f75df574-dthn7 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali5a4204a9370 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Namespace="kube-system" Pod="coredns-76f75df574-dthn7" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--dthn7-" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.131 [INFO][3550] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Namespace="kube-system" Pod="coredns-76f75df574-dthn7" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.286 [INFO][3593] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" HandleID="k8s-pod-network.6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.330 [INFO][3593] ipam_plugin.go 268: Auto assigning IP ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" HandleID="k8s-pod-network.6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad970), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-76f75df574-dthn7", "timestamp":"2024-04-12 18:54:41.286042168 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.331 [INFO][3593] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.331 [INFO][3593] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.331 [INFO][3593] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.347 [INFO][3593] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" host="localhost" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.366 [INFO][3593] ipam.go 372: Looking up existing affinities for host host="localhost" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.378 [INFO][3593] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.383 [INFO][3593] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.392 [INFO][3593] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.392 [INFO][3593] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" host="localhost" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.412 [INFO][3593] ipam.go 1682: Creating new handle: k8s-pod-network.6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.422 [INFO][3593] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" host="localhost" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.437 [INFO][3593] ipam.go 1216: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" host="localhost" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.437 [INFO][3593] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" host="localhost" Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.437 [INFO][3593] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:41.544721 env[1186]: 2024-04-12 18:54:41.437 [INFO][3593] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" HandleID="k8s-pod-network.6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:41.545749 env[1186]: 2024-04-12 18:54:41.449 [INFO][3550] k8s.go 385: Populated endpoint ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Namespace="kube-system" Pod="coredns-76f75df574-dthn7" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--dthn7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--dthn7-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"70d0491e-916d-4334-8058-e007f6b7c886", ResourceVersion:"851", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 53, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-76f75df574-dthn7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5a4204a9370", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:41.545749 env[1186]: 2024-04-12 18:54:41.449 [INFO][3550] k8s.go 386: Calico CNI using IPs: [192.168.88.130/32] ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Namespace="kube-system" Pod="coredns-76f75df574-dthn7" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:41.545749 env[1186]: 2024-04-12 18:54:41.449 [INFO][3550] dataplane_linux.go 68: Setting the host side veth name to cali5a4204a9370 ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Namespace="kube-system" Pod="coredns-76f75df574-dthn7" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:41.545749 env[1186]: 2024-04-12 18:54:41.470 [INFO][3550] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Namespace="kube-system" Pod="coredns-76f75df574-dthn7" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:41.545749 env[1186]: 2024-04-12 18:54:41.478 [INFO][3550] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Namespace="kube-system" Pod="coredns-76f75df574-dthn7" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--dthn7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--dthn7-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"70d0491e-916d-4334-8058-e007f6b7c886", ResourceVersion:"851", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 53, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df", Pod:"coredns-76f75df574-dthn7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5a4204a9370", MAC:"e6:0f:fe:d7:d7:dc", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:41.545749 env[1186]: 2024-04-12 18:54:41.535 [INFO][3550] k8s.go 498: Wrote updated endpoint to datastore ContainerID="6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df" Namespace="kube-system" Pod="coredns-76f75df574-dthn7" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:41.584832 kernel: kauditd_printk_skb: 185 callbacks suppressed Apr 12 18:54:41.585006 kernel: audit: type=1325 audit(1712948081.575:1197): table=filter:102 family=2 entries=40 op=nft_register_chain pid=3652 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:41.575000 audit[3652]: NETFILTER_CFG table=filter:102 family=2 entries=40 op=nft_register_chain pid=3652 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:41.590953 kernel: audit: type=1300 audit(1712948081.575:1197): arch=c000003e syscall=46 success=yes exit=21592 a0=3 a1=7ffc22d7bc50 a2=0 a3=7ffc22d7bc3c items=0 ppid=3187 pid=3652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.575000 audit[3652]: SYSCALL arch=c000003e syscall=46 success=yes exit=21592 a0=3 a1=7ffc22d7bc50 a2=0 a3=7ffc22d7bc3c items=0 ppid=3187 pid=3652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.601761 kernel: audit: type=1327 audit(1712948081.575:1197): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:41.575000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:41.621125 systemd-networkd[1082]: cali63e4852a6ff: Link UP Apr 12 18:54:41.624454 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali63e4852a6ff: link becomes ready Apr 12 18:54:41.626458 systemd-networkd[1082]: cali63e4852a6ff: Gained carrier Apr 12 18:54:41.643916 env[1186]: time="2024-04-12T18:54:41.639541147Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:54:41.643916 env[1186]: time="2024-04-12T18:54:41.639640194Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:54:41.643916 env[1186]: time="2024-04-12T18:54:41.639662496Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:54:41.643916 env[1186]: time="2024-04-12T18:54:41.639831715Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df pid=3662 runtime=io.containerd.runc.v2 Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.237 [INFO][3581] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--76f75df574--hkcfz-eth0 coredns-76f75df574- kube-system 4af71046-a0e9-4b27-8d92-cee652a23de0 852 0 2024-04-12 18:53:54 +0000 UTC map[k8s-app:kube-dns pod-template-hash:76f75df574 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-76f75df574-hkcfz eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali63e4852a6ff [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] []}} ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Namespace="kube-system" Pod="coredns-76f75df574-hkcfz" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--hkcfz-" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.240 [INFO][3581] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Namespace="kube-system" Pod="coredns-76f75df574-hkcfz" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.348 [INFO][3602] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" HandleID="k8s-pod-network.b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.391 [INFO][3602] ipam_plugin.go 268: Auto assigning IP ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" HandleID="k8s-pod-network.b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000619450), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-76f75df574-hkcfz", "timestamp":"2024-04-12 18:54:41.348908904 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.392 [INFO][3602] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.438 [INFO][3602] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.438 [INFO][3602] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.453 [INFO][3602] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" host="localhost" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.475 [INFO][3602] ipam.go 372: Looking up existing affinities for host host="localhost" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.499 [INFO][3602] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.511 [INFO][3602] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.541 [INFO][3602] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.541 [INFO][3602] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" host="localhost" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.551 [INFO][3602] ipam.go 1682: Creating new handle: k8s-pod-network.b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65 Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.577 [INFO][3602] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" host="localhost" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.608 [INFO][3602] ipam.go 1216: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" host="localhost" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.608 [INFO][3602] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" host="localhost" Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.608 [INFO][3602] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:41.662527 env[1186]: 2024-04-12 18:54:41.608 [INFO][3602] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" HandleID="k8s-pod-network.b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:41.663593 env[1186]: 2024-04-12 18:54:41.611 [INFO][3581] k8s.go 385: Populated endpoint ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Namespace="kube-system" Pod="coredns-76f75df574-hkcfz" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--hkcfz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--hkcfz-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"4af71046-a0e9-4b27-8d92-cee652a23de0", ResourceVersion:"852", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 53, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-76f75df574-hkcfz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali63e4852a6ff", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:41.663593 env[1186]: 2024-04-12 18:54:41.611 [INFO][3581] k8s.go 386: Calico CNI using IPs: [192.168.88.131/32] ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Namespace="kube-system" Pod="coredns-76f75df574-hkcfz" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:41.663593 env[1186]: 2024-04-12 18:54:41.611 [INFO][3581] dataplane_linux.go 68: Setting the host side veth name to cali63e4852a6ff ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Namespace="kube-system" Pod="coredns-76f75df574-hkcfz" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:41.663593 env[1186]: 2024-04-12 18:54:41.624 [INFO][3581] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Namespace="kube-system" Pod="coredns-76f75df574-hkcfz" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:41.663593 env[1186]: 2024-04-12 18:54:41.641 [INFO][3581] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Namespace="kube-system" Pod="coredns-76f75df574-hkcfz" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--hkcfz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--hkcfz-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"4af71046-a0e9-4b27-8d92-cee652a23de0", ResourceVersion:"852", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 53, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65", Pod:"coredns-76f75df574-hkcfz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali63e4852a6ff", MAC:"5a:e9:2a:f2:d0:42", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:41.663593 env[1186]: 2024-04-12 18:54:41.656 [INFO][3581] k8s.go 498: Wrote updated endpoint to datastore ContainerID="b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65" Namespace="kube-system" Pod="coredns-76f75df574-hkcfz" WorkloadEndpoint="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:41.698799 systemd[1]: Started cri-containerd-6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df.scope. Apr 12 18:54:41.729000 audit[3704]: NETFILTER_CFG table=filter:103 family=2 entries=34 op=nft_register_chain pid=3704 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:41.729000 audit[3704]: SYSCALL arch=c000003e syscall=46 success=yes exit=18220 a0=3 a1=7ffe13f535f0 a2=0 a3=7ffe13f535dc items=0 ppid=3187 pid=3704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.745877 env[1186]: time="2024-04-12T18:54:41.732643140Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:54:41.759321 env[1186]: time="2024-04-12T18:54:41.759196373Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:54:41.759623 env[1186]: time="2024-04-12T18:54:41.759277667Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:54:41.760347 kernel: audit: type=1325 audit(1712948081.729:1198): table=filter:103 family=2 entries=34 op=nft_register_chain pid=3704 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:41.760428 kernel: audit: type=1300 audit(1712948081.729:1198): arch=c000003e syscall=46 success=yes exit=18220 a0=3 a1=7ffe13f535f0 a2=0 a3=7ffe13f535dc items=0 ppid=3187 pid=3704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.760549 env[1186]: time="2024-04-12T18:54:41.759864473Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65 pid=3703 runtime=io.containerd.runc.v2 Apr 12 18:54:41.729000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:41.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.772889 kernel: audit: type=1327 audit(1712948081.729:1198): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:41.773181 kernel: audit: type=1400 audit(1712948081.744:1199): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.773207 kernel: audit: type=1400 audit(1712948081.744:1200): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.781101 kernel: audit: type=1400 audit(1712948081.744:1201): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.784648 kernel: audit: type=1400 audit(1712948081.744:1202): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.759000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.759000 audit: BPF prog-id=150 op=LOAD Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3662 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663613139633634633633323334363065643162393765613666393064 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3662 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663613139633634633633323334363065643162393765613666393064 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.708 [INFO][3635] k8s.go 585: Cleaning up netns ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.708 [INFO][3635] dataplane_linux.go 530: Deleting workload's device in netns. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" iface="eth0" netns="/var/run/netns/cni-420024d0-fd97-0339-0b16-40bf2686ca67" Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.708 [INFO][3635] dataplane_linux.go 541: Entered netns, deleting veth. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" iface="eth0" netns="/var/run/netns/cni-420024d0-fd97-0339-0b16-40bf2686ca67" Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.709 [INFO][3635] dataplane_linux.go 568: Workload's veth was already gone. Nothing to do. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" iface="eth0" netns="/var/run/netns/cni-420024d0-fd97-0339-0b16-40bf2686ca67" Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.709 [INFO][3635] k8s.go 592: Releasing IP address(es) ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.709 [INFO][3635] utils.go 188: Calico CNI releasing IP address ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.768 [INFO][3700] ipam_plugin.go 415: Releasing address using handleID ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" HandleID="k8s-pod-network.ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.769 [INFO][3700] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.769 [INFO][3700] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.782 [WARNING][3700] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" HandleID="k8s-pod-network.ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.782 [INFO][3700] ipam_plugin.go 443: Releasing address using workloadID ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" HandleID="k8s-pod-network.ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.791 [INFO][3700] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:41.799739 env[1186]: 2024-04-12 18:54:41.794 [INFO][3635] k8s.go 598: Teardown processing complete. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:54:41.804014 env[1186]: time="2024-04-12T18:54:41.803930309Z" level=info msg="TearDown network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\" successfully" Apr 12 18:54:41.804014 env[1186]: time="2024-04-12T18:54:41.803996963Z" level=info msg="StopPodSandbox for \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\" returns successfully" Apr 12 18:54:41.779000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.779000 audit: BPF prog-id=151 op=LOAD Apr 12 18:54:41.779000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003ca480 items=0 ppid=3662 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.779000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663613139633634633633323334363065643162393765613666393064 Apr 12 18:54:41.803000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.803000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.803000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.803000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.803000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.803000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.803000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.803000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.805216 env[1186]: time="2024-04-12T18:54:41.805144638Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c5d75f8dc-vqn77,Uid:54d0b786-ab92-49a5-9480-ceea1bb2f91f,Namespace:calico-system,Attempt:1,}" Apr 12 18:54:41.803000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.803000 audit: BPF prog-id=152 op=LOAD Apr 12 18:54:41.803000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003ca4c8 items=0 ppid=3662 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663613139633634633633323334363065643162393765613666393064 Apr 12 18:54:41.812000 audit: BPF prog-id=152 op=UNLOAD Apr 12 18:54:41.812000 audit: BPF prog-id=151 op=UNLOAD Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.813000 audit: BPF prog-id=153 op=LOAD Apr 12 18:54:41.813000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003ca8d8 items=0 ppid=3662 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3663613139633634633633323334363065643162393765613666393064 Apr 12 18:54:41.826780 systemd-resolved[1134]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Apr 12 18:54:41.861731 systemd[1]: Started cri-containerd-b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65.scope. Apr 12 18:54:41.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.922000 audit: BPF prog-id=154 op=LOAD Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3703 pid=3726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393162316132333762626362636461333130313535313132633463 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3703 pid=3726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393162316132333762626362636461333130313535313132633463 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.959461 env[1186]: time="2024-04-12T18:54:41.956261546Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-dthn7,Uid:70d0491e-916d-4334-8058-e007f6b7c886,Namespace:kube-system,Attempt:1,} returns sandbox id \"6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df\"" Apr 12 18:54:41.981000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.120:22-10.0.0.1:59438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:41.975213 systemd[1]: run-netns-cni\x2d420024d0\x2dfd97\x2d0339\x2d0b16\x2d40bf2686ca67.mount: Deactivated successfully. Apr 12 18:54:41.986790 systemd[1]: Started sshd@9-10.0.0.120:22-10.0.0.1:59438.service. Apr 12 18:54:41.991586 kubelet[2101]: E0412 18:54:41.991549 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:41.996921 env[1186]: time="2024-04-12T18:54:41.994851132Z" level=info msg="CreateContainer within sandbox \"6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Apr 12 18:54:41.933000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:41.933000 audit: BPF prog-id=155 op=LOAD Apr 12 18:54:41.933000 audit[3726]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002205d0 items=0 ppid=3703 pid=3726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:41.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393162316132333762626362636461333130313535313132633463 Apr 12 18:54:42.019000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.019000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.019000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.019000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.019000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.019000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.019000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.019000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.019000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.019000 audit: BPF prog-id=156 op=LOAD Apr 12 18:54:42.019000 audit[3726]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000308008 items=0 ppid=3703 pid=3726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.019000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393162316132333762626362636461333130313535313132633463 Apr 12 18:54:42.028000 audit: BPF prog-id=156 op=UNLOAD Apr 12 18:54:42.028000 audit: BPF prog-id=155 op=UNLOAD Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { perfmon } for pid=3726 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit[3726]: AVC avc: denied { bpf } for pid=3726 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.028000 audit: BPF prog-id=157 op=LOAD Apr 12 18:54:42.028000 audit[3726]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000308418 items=0 ppid=3703 pid=3726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.028000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238393162316132333762626362636461333130313535313132633463 Apr 12 18:54:42.054164 systemd-resolved[1134]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Apr 12 18:54:42.149149 env[1186]: time="2024-04-12T18:54:42.149093635Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-76f75df574-hkcfz,Uid:4af71046-a0e9-4b27-8d92-cee652a23de0,Namespace:kube-system,Attempt:1,} returns sandbox id \"b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65\"" Apr 12 18:54:42.152829 kubelet[2101]: E0412 18:54:42.150392 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:42.153048 env[1186]: time="2024-04-12T18:54:42.152652226Z" level=info msg="CreateContainer within sandbox \"b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Apr 12 18:54:42.165538 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2557141827.mount: Deactivated successfully. Apr 12 18:54:42.214888 sshd[3765]: Accepted publickey for core from 10.0.0.1 port 59438 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:54:42.212000 audit[3765]: USER_ACCT pid=3765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:42.217000 audit[3765]: CRED_ACQ pid=3765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:42.217000 audit[3765]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe6c15d5a0 a2=3 a3=0 items=0 ppid=1 pid=3765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.217000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:42.220263 env[1186]: time="2024-04-12T18:54:42.219358445Z" level=info msg="CreateContainer within sandbox \"6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"40ca87362b20b7b89997c9889ed8563a52925ae4e5a31f54d48e9b36ef8197aa\"" Apr 12 18:54:42.221783 env[1186]: time="2024-04-12T18:54:42.220455223Z" level=info msg="StartContainer for \"40ca87362b20b7b89997c9889ed8563a52925ae4e5a31f54d48e9b36ef8197aa\"" Apr 12 18:54:42.228666 sshd[3765]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:54:42.240530 env[1186]: time="2024-04-12T18:54:42.240444329Z" level=info msg="CreateContainer within sandbox \"b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"fae4807ca112904bd94e115d5171998c96a1918d0d13c6dd911965539d797634\"" Apr 12 18:54:42.248628 env[1186]: time="2024-04-12T18:54:42.241849820Z" level=info msg="StartContainer for \"fae4807ca112904bd94e115d5171998c96a1918d0d13c6dd911965539d797634\"" Apr 12 18:54:42.256322 systemd-logind[1168]: New session 10 of user core. Apr 12 18:54:42.263411 systemd[1]: Started session-10.scope. Apr 12 18:54:42.276266 systemd[1]: Started cri-containerd-40ca87362b20b7b89997c9889ed8563a52925ae4e5a31f54d48e9b36ef8197aa.scope. Apr 12 18:54:42.300599 systemd-networkd[1082]: cali5b3fef866bb: Link UP Apr 12 18:54:42.308273 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Apr 12 18:54:42.308398 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5b3fef866bb: link becomes ready Apr 12 18:54:42.307576 systemd-networkd[1082]: cali5b3fef866bb: Gained carrier Apr 12 18:54:42.318000 audit[3765]: USER_START pid=3765 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:42.324000 audit[3828]: CRED_ACQ pid=3828 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:42.356083 systemd[1]: Started cri-containerd-fae4807ca112904bd94e115d5171998c96a1918d0d13c6dd911965539d797634.scope. Apr 12 18:54:42.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.435000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.435000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.441000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.441000 audit: BPF prog-id=158 op=LOAD Apr 12 18:54:42.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=3662 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636138373336326232306237623839393937633938383965643835 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=3662 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636138373336326232306237623839393937633938383965643835 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:41.962 [INFO][3736] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0 calico-kube-controllers-6c5d75f8dc- calico-system 54d0b786-ab92-49a5-9480-ceea1bb2f91f 870 0 2024-04-12 18:54:02 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6c5d75f8dc projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6c5d75f8dc-vqn77 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali5b3fef866bb [] []}} ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Namespace="calico-system" Pod="calico-kube-controllers-6c5d75f8dc-vqn77" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:41.962 [INFO][3736] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Namespace="calico-system" Pod="calico-kube-controllers-6c5d75f8dc-vqn77" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.116 [INFO][3767] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" HandleID="k8s-pod-network.dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.156 [INFO][3767] ipam_plugin.go 268: Auto assigning IP ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" HandleID="k8s-pod-network.dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000371b60), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6c5d75f8dc-vqn77", "timestamp":"2024-04-12 18:54:42.116229547 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.157 [INFO][3767] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.157 [INFO][3767] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.157 [INFO][3767] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.181 [INFO][3767] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" host="localhost" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.191 [INFO][3767] ipam.go 372: Looking up existing affinities for host host="localhost" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.203 [INFO][3767] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.207 [INFO][3767] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.218 [INFO][3767] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.218 [INFO][3767] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" host="localhost" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.237 [INFO][3767] ipam.go 1682: Creating new handle: k8s-pod-network.dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766 Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.254 [INFO][3767] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" host="localhost" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.271 [INFO][3767] ipam.go 1216: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" host="localhost" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.271 [INFO][3767] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" host="localhost" Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.271 [INFO][3767] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:42.456710 env[1186]: 2024-04-12 18:54:42.272 [INFO][3767] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" HandleID="k8s-pod-network.dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:42.457479 env[1186]: 2024-04-12 18:54:42.287 [INFO][3736] k8s.go 385: Populated endpoint ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Namespace="calico-system" Pod="calico-kube-controllers-6c5d75f8dc-vqn77" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0", GenerateName:"calico-kube-controllers-6c5d75f8dc-", Namespace:"calico-system", SelfLink:"", UID:"54d0b786-ab92-49a5-9480-ceea1bb2f91f", ResourceVersion:"870", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 54, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c5d75f8dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6c5d75f8dc-vqn77", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5b3fef866bb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:42.457479 env[1186]: 2024-04-12 18:54:42.289 [INFO][3736] k8s.go 386: Calico CNI using IPs: [192.168.88.132/32] ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Namespace="calico-system" Pod="calico-kube-controllers-6c5d75f8dc-vqn77" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:42.457479 env[1186]: 2024-04-12 18:54:42.289 [INFO][3736] dataplane_linux.go 68: Setting the host side veth name to cali5b3fef866bb ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Namespace="calico-system" Pod="calico-kube-controllers-6c5d75f8dc-vqn77" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:42.457479 env[1186]: 2024-04-12 18:54:42.321 [INFO][3736] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Namespace="calico-system" Pod="calico-kube-controllers-6c5d75f8dc-vqn77" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:42.457479 env[1186]: 2024-04-12 18:54:42.321 [INFO][3736] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Namespace="calico-system" Pod="calico-kube-controllers-6c5d75f8dc-vqn77" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0", GenerateName:"calico-kube-controllers-6c5d75f8dc-", Namespace:"calico-system", SelfLink:"", UID:"54d0b786-ab92-49a5-9480-ceea1bb2f91f", ResourceVersion:"870", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 54, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c5d75f8dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766", Pod:"calico-kube-controllers-6c5d75f8dc-vqn77", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5b3fef866bb", MAC:"ba:8d:c1:43:8b:6d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:42.457479 env[1186]: 2024-04-12 18:54:42.433 [INFO][3736] k8s.go 498: Wrote updated endpoint to datastore ContainerID="dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766" Namespace="calico-system" Pod="calico-kube-controllers-6c5d75f8dc-vqn77" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:54:42.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.464000 audit: BPF prog-id=159 op=LOAD Apr 12 18:54:42.447000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.447000 audit: BPF prog-id=160 op=LOAD Apr 12 18:54:42.447000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000025120 items=0 ppid=3662 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636138373336326232306237623839393937633938383965643835 Apr 12 18:54:42.475000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.475000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.475000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.475000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.475000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.475000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.475000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.475000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.475000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.475000 audit: BPF prog-id=161 op=LOAD Apr 12 18:54:42.475000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000025168 items=0 ppid=3662 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.475000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636138373336326232306237623839393937633938383965643835 Apr 12 18:54:42.476000 audit: BPF prog-id=161 op=UNLOAD Apr 12 18:54:42.476000 audit: BPF prog-id=160 op=UNLOAD Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { perfmon } for pid=3793 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit[3793]: AVC avc: denied { bpf } for pid=3793 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.477000 audit: BPF prog-id=162 op=LOAD Apr 12 18:54:42.477000 audit[3793]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000025578 items=0 ppid=3662 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636138373336326232306237623839393937633938383965643835 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3703 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661653438303763613131323930346264393465313135643531373139 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3703 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661653438303763613131323930346264393465313135643531373139 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit: BPF prog-id=163 op=LOAD Apr 12 18:54:42.480000 audit[3813]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00019efc0 items=0 ppid=3703 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661653438303763613131323930346264393465313135643531373139 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.480000 audit: BPF prog-id=164 op=LOAD Apr 12 18:54:42.480000 audit[3813]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00019f008 items=0 ppid=3703 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.480000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661653438303763613131323930346264393465313135643531373139 Apr 12 18:54:42.481000 audit: BPF prog-id=164 op=UNLOAD Apr 12 18:54:42.488000 audit: BPF prog-id=163 op=UNLOAD Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.491000 audit[3860]: NETFILTER_CFG table=filter:104 family=2 entries=48 op=nft_register_chain pid=3860 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:54:42.491000 audit[3860]: SYSCALL arch=c000003e syscall=46 success=yes exit=23868 a0=3 a1=7ffea18c9b60 a2=0 a3=7ffea18c9b4c items=0 ppid=3187 pid=3860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.491000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:54:42.502321 env[1186]: time="2024-04-12T18:54:42.502115266Z" level=info msg="StopPodSandbox for \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\"" Apr 12 18:54:42.488000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.488000 audit: BPF prog-id=165 op=LOAD Apr 12 18:54:42.488000 audit[3813]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00019f418 items=0 ppid=3703 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.488000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661653438303763613131323930346264393465313135643531373139 Apr 12 18:54:42.580868 env[1186]: time="2024-04-12T18:54:42.579326044Z" level=info msg="StartContainer for \"40ca87362b20b7b89997c9889ed8563a52925ae4e5a31f54d48e9b36ef8197aa\" returns successfully" Apr 12 18:54:42.581351 env[1186]: time="2024-04-12T18:54:42.581029678Z" level=info msg="StartContainer for \"fae4807ca112904bd94e115d5171998c96a1918d0d13c6dd911965539d797634\" returns successfully" Apr 12 18:54:42.660986 env[1186]: time="2024-04-12T18:54:42.660589145Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:54:42.660986 env[1186]: time="2024-04-12T18:54:42.660652455Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:54:42.660986 env[1186]: time="2024-04-12T18:54:42.660679936Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:54:42.669101 env[1186]: time="2024-04-12T18:54:42.668672449Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766 pid=3910 runtime=io.containerd.runc.v2 Apr 12 18:54:42.674909 sshd[3765]: pam_unix(sshd:session): session closed for user core Apr 12 18:54:42.681000 audit[3765]: USER_END pid=3765 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:42.682000 audit[3765]: CRED_DISP pid=3765 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:42.685689 systemd[1]: sshd@9-10.0.0.120:22-10.0.0.1:59438.service: Deactivated successfully. Apr 12 18:54:42.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.120:22-10.0.0.1:59438 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:42.687113 systemd[1]: session-10.scope: Deactivated successfully. Apr 12 18:54:42.688777 systemd-logind[1168]: Session 10 logged out. Waiting for processes to exit. Apr 12 18:54:42.700624 systemd-networkd[1082]: cali63e4852a6ff: Gained IPv6LL Apr 12 18:54:42.702820 systemd[1]: Started cri-containerd-dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766.scope. Apr 12 18:54:42.708277 systemd-logind[1168]: Removed session 10. Apr 12 18:54:42.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.755000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.755000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit: BPF prog-id=166 op=LOAD Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3910 pid=3924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463653233623430326135613335323663336333633437663965383434 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3910 pid=3924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463653233623430326135613335323663336333633437663965383434 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.763000 audit: BPF prog-id=167 op=LOAD Apr 12 18:54:42.763000 audit[3924]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003e8710 items=0 ppid=3910 pid=3924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.763000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463653233623430326135613335323663336333633437663965383434 Apr 12 18:54:42.781000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.781000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.781000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.781000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.781000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.781000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.781000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.781000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.781000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.781000 audit: BPF prog-id=168 op=LOAD Apr 12 18:54:42.781000 audit[3924]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003e8758 items=0 ppid=3910 pid=3924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463653233623430326135613335323663336333633437663965383434 Apr 12 18:54:42.787000 audit: BPF prog-id=168 op=UNLOAD Apr 12 18:54:42.788000 audit: BPF prog-id=167 op=UNLOAD Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { perfmon } for pid=3924 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit[3924]: AVC avc: denied { bpf } for pid=3924 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:42.788000 audit: BPF prog-id=169 op=LOAD Apr 12 18:54:42.788000 audit[3924]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003e8b68 items=0 ppid=3910 pid=3924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:42.788000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6463653233623430326135613335323663336333633437663965383434 Apr 12 18:54:42.824529 systemd-networkd[1082]: calie1cfe2b3853: Gained IPv6LL Apr 12 18:54:42.828353 systemd-resolved[1134]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Apr 12 18:54:42.878242 env[1186]: time="2024-04-12T18:54:42.877950320Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6c5d75f8dc-vqn77,Uid:54d0b786-ab92-49a5-9480-ceea1bb2f91f,Namespace:calico-system,Attempt:1,} returns sandbox id \"dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766\"" Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.746 [WARNING][3894] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--dthn7-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"70d0491e-916d-4334-8058-e007f6b7c886", ResourceVersion:"862", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 53, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df", Pod:"coredns-76f75df574-dthn7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5a4204a9370", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.747 [INFO][3894] k8s.go 585: Cleaning up netns ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.747 [INFO][3894] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" iface="eth0" netns="" Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.747 [INFO][3894] k8s.go 592: Releasing IP address(es) ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.747 [INFO][3894] utils.go 188: Calico CNI releasing IP address ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.850 [INFO][3947] ipam_plugin.go 415: Releasing address using handleID ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" HandleID="k8s-pod-network.befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.850 [INFO][3947] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.850 [INFO][3947] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.874 [WARNING][3947] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" HandleID="k8s-pod-network.befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.874 [INFO][3947] ipam_plugin.go 443: Releasing address using workloadID ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" HandleID="k8s-pod-network.befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.884 [INFO][3947] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:42.890709 env[1186]: 2024-04-12 18:54:42.886 [INFO][3894] k8s.go 598: Teardown processing complete. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:42.890709 env[1186]: time="2024-04-12T18:54:42.889135623Z" level=info msg="TearDown network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\" successfully" Apr 12 18:54:42.890709 env[1186]: time="2024-04-12T18:54:42.889196468Z" level=info msg="StopPodSandbox for \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\" returns successfully" Apr 12 18:54:42.890709 env[1186]: time="2024-04-12T18:54:42.889981279Z" level=info msg="RemovePodSandbox for \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\"" Apr 12 18:54:42.890709 env[1186]: time="2024-04-12T18:54:42.890020242Z" level=info msg="Forcibly stopping sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\"" Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.012 [WARNING][3980] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--dthn7-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"70d0491e-916d-4334-8058-e007f6b7c886", ResourceVersion:"862", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 53, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6ca19c64c6323460ed1b97ea6f90dba84380186b4880b9387910e9da446969df", Pod:"coredns-76f75df574-dthn7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali5a4204a9370", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.013 [INFO][3980] k8s.go 585: Cleaning up netns ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.013 [INFO][3980] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" iface="eth0" netns="" Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.013 [INFO][3980] k8s.go 592: Releasing IP address(es) ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.013 [INFO][3980] utils.go 188: Calico CNI releasing IP address ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.095 [INFO][3988] ipam_plugin.go 415: Releasing address using handleID ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" HandleID="k8s-pod-network.befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.096 [INFO][3988] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.096 [INFO][3988] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.111 [WARNING][3988] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" HandleID="k8s-pod-network.befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.112 [INFO][3988] ipam_plugin.go 443: Releasing address using workloadID ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" HandleID="k8s-pod-network.befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Workload="localhost-k8s-coredns--76f75df574--dthn7-eth0" Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.121 [INFO][3988] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:43.127823 env[1186]: 2024-04-12 18:54:43.123 [INFO][3980] k8s.go 598: Teardown processing complete. ContainerID="befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a" Apr 12 18:54:43.127823 env[1186]: time="2024-04-12T18:54:43.127754483Z" level=info msg="TearDown network for sandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\" successfully" Apr 12 18:54:43.150653 env[1186]: time="2024-04-12T18:54:43.149357068Z" level=info msg="RemovePodSandbox \"befdf8fe1abc9d8689c3a4b26d5cdb1bb182b7462883f16495752ddac8f3e59a\" returns successfully" Apr 12 18:54:43.153933 env[1186]: time="2024-04-12T18:54:43.153879946Z" level=info msg="StopPodSandbox for \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\"" Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.268 [WARNING][4021] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--hkcfz-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"4af71046-a0e9-4b27-8d92-cee652a23de0", ResourceVersion:"868", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 53, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65", Pod:"coredns-76f75df574-hkcfz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali63e4852a6ff", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.269 [INFO][4021] k8s.go 585: Cleaning up netns ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.269 [INFO][4021] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" iface="eth0" netns="" Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.269 [INFO][4021] k8s.go 592: Releasing IP address(es) ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.269 [INFO][4021] utils.go 188: Calico CNI releasing IP address ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.339 [INFO][4028] ipam_plugin.go 415: Releasing address using handleID ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" HandleID="k8s-pod-network.3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.341 [INFO][4028] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.342 [INFO][4028] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.353 [WARNING][4028] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" HandleID="k8s-pod-network.3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.354 [INFO][4028] ipam_plugin.go 443: Releasing address using workloadID ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" HandleID="k8s-pod-network.3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.359 [INFO][4028] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:43.364071 env[1186]: 2024-04-12 18:54:43.361 [INFO][4021] k8s.go 598: Teardown processing complete. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:43.364787 env[1186]: time="2024-04-12T18:54:43.364119273Z" level=info msg="TearDown network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\" successfully" Apr 12 18:54:43.364787 env[1186]: time="2024-04-12T18:54:43.364173144Z" level=info msg="StopPodSandbox for \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\" returns successfully" Apr 12 18:54:43.365111 env[1186]: time="2024-04-12T18:54:43.365052342Z" level=info msg="RemovePodSandbox for \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\"" Apr 12 18:54:43.365177 env[1186]: time="2024-04-12T18:54:43.365114388Z" level=info msg="Forcibly stopping sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\"" Apr 12 18:54:43.384641 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2210198158.mount: Deactivated successfully. Apr 12 18:54:43.398999 systemd-networkd[1082]: cali5a4204a9370: Gained IPv6LL Apr 12 18:54:43.450112 kubelet[2101]: E0412 18:54:43.450060 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:43.474692 kubelet[2101]: E0412 18:54:43.464640 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:43.523113 kubelet[2101]: I0412 18:54:43.519554 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-dthn7" podStartSLOduration=49.519505278 podStartE2EDuration="49.519505278s" podCreationTimestamp="2024-04-12 18:53:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:54:43.518882043 +0000 UTC m=+61.278560232" watchObservedRunningTime="2024-04-12 18:54:43.519505278 +0000 UTC m=+61.279183457" Apr 12 18:54:43.581437 kubelet[2101]: I0412 18:54:43.581089 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/coredns-76f75df574-hkcfz" podStartSLOduration=49.581015271 podStartE2EDuration="49.581015271s" podCreationTimestamp="2024-04-12 18:53:54 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2024-04-12 18:54:43.554662009 +0000 UTC m=+61.314340188" watchObservedRunningTime="2024-04-12 18:54:43.581015271 +0000 UTC m=+61.340693450" Apr 12 18:54:43.652699 systemd-networkd[1082]: cali5b3fef866bb: Gained IPv6LL Apr 12 18:54:43.659000 audit[4062]: NETFILTER_CFG table=filter:105 family=2 entries=11 op=nft_register_rule pid=4062 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:43.659000 audit[4062]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffcc74c9190 a2=0 a3=7ffcc74c917c items=0 ppid=2248 pid=4062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:43.659000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.551 [WARNING][4048] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--76f75df574--hkcfz-eth0", GenerateName:"coredns-76f75df574-", Namespace:"kube-system", SelfLink:"", UID:"4af71046-a0e9-4b27-8d92-cee652a23de0", ResourceVersion:"868", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 53, 54, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"76f75df574", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b891b1a237bbcbcda310155112c4c234b317457877a5db1c36d2930cfc792a65", Pod:"coredns-76f75df574-hkcfz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali63e4852a6ff", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.551 [INFO][4048] k8s.go 585: Cleaning up netns ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.551 [INFO][4048] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" iface="eth0" netns="" Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.551 [INFO][4048] k8s.go 592: Releasing IP address(es) ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.552 [INFO][4048] utils.go 188: Calico CNI releasing IP address ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.631 [INFO][4055] ipam_plugin.go 415: Releasing address using handleID ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" HandleID="k8s-pod-network.3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.633 [INFO][4055] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.633 [INFO][4055] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.650 [WARNING][4055] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" HandleID="k8s-pod-network.3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.650 [INFO][4055] ipam_plugin.go 443: Releasing address using workloadID ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" HandleID="k8s-pod-network.3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Workload="localhost-k8s-coredns--76f75df574--hkcfz-eth0" Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.659 [INFO][4055] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:43.664121 env[1186]: 2024-04-12 18:54:43.660 [INFO][4048] k8s.go 598: Teardown processing complete. ContainerID="3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb" Apr 12 18:54:43.664955 env[1186]: time="2024-04-12T18:54:43.664176229Z" level=info msg="TearDown network for sandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\" successfully" Apr 12 18:54:43.661000 audit[4062]: NETFILTER_CFG table=nat:106 family=2 entries=35 op=nft_register_chain pid=4062 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:43.661000 audit[4062]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffcc74c9190 a2=0 a3=7ffcc74c917c items=0 ppid=2248 pid=4062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:43.661000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:43.724713 env[1186]: time="2024-04-12T18:54:43.723169877Z" level=info msg="RemovePodSandbox \"3981936d9327004d463679570705c854af657b14173295eb28f060de40de81cb\" returns successfully" Apr 12 18:54:43.725362 env[1186]: time="2024-04-12T18:54:43.725316595Z" level=info msg="StopPodSandbox for \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\"" Apr 12 18:54:43.734000 audit[4069]: NETFILTER_CFG table=filter:107 family=2 entries=8 op=nft_register_rule pid=4069 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:43.734000 audit[4069]: SYSCALL arch=c000003e syscall=46 success=yes exit=2932 a0=3 a1=7ffc5ab576d0 a2=0 a3=7ffc5ab576bc items=0 ppid=2248 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:43.734000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:43.781000 audit[4069]: NETFILTER_CFG table=nat:108 family=2 entries=56 op=nft_register_chain pid=4069 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:54:43.781000 audit[4069]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffc5ab576d0 a2=0 a3=7ffc5ab576bc items=0 ppid=2248 pid=4069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:43.781000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.826 [WARNING][4081] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gv4d4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b", ResourceVersion:"856", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 54, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"64699887c5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5", Pod:"csi-node-driver-gv4d4", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie1cfe2b3853", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.827 [INFO][4081] k8s.go 585: Cleaning up netns ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.827 [INFO][4081] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" iface="eth0" netns="" Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.827 [INFO][4081] k8s.go 592: Releasing IP address(es) ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.827 [INFO][4081] utils.go 188: Calico CNI releasing IP address ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.861 [INFO][4088] ipam_plugin.go 415: Releasing address using handleID ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" HandleID="k8s-pod-network.3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.861 [INFO][4088] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.861 [INFO][4088] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.879 [WARNING][4088] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" HandleID="k8s-pod-network.3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.881 [INFO][4088] ipam_plugin.go 443: Releasing address using workloadID ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" HandleID="k8s-pod-network.3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.884 [INFO][4088] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:43.888227 env[1186]: 2024-04-12 18:54:43.886 [INFO][4081] k8s.go 598: Teardown processing complete. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:43.888952 env[1186]: time="2024-04-12T18:54:43.888258388Z" level=info msg="TearDown network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\" successfully" Apr 12 18:54:43.888952 env[1186]: time="2024-04-12T18:54:43.888307901Z" level=info msg="StopPodSandbox for \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\" returns successfully" Apr 12 18:54:43.890549 env[1186]: time="2024-04-12T18:54:43.890498903Z" level=info msg="RemovePodSandbox for \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\"" Apr 12 18:54:43.890610 env[1186]: time="2024-04-12T18:54:43.890554627Z" level=info msg="Forcibly stopping sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\"" Apr 12 18:54:44.027868 env[1186]: time="2024-04-12T18:54:44.027801233Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:44.033738 env[1186]: time="2024-04-12T18:54:44.033679044Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f457bd778a36f01fbbc41cd8b9ac45cf5e7e3a09e4d619cfa819328acd45ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:44.044265 env[1186]: time="2024-04-12T18:54:44.044197134Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:44.053831 env[1186]: time="2024-04-12T18:54:44.053765924Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e6e9be3e67df7388eae74d419fff785fdb35b0c3456e3d27a0251c7bdb55f0fd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:44.056184 env[1186]: time="2024-04-12T18:54:44.055251646Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.27.3\" returns image reference \"sha256:f457bd778a36f01fbbc41cd8b9ac45cf5e7e3a09e4d619cfa819328acd45ea0b\"" Apr 12 18:54:44.063075 env[1186]: time="2024-04-12T18:54:44.063019270Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.3\"" Apr 12 18:54:44.065291 env[1186]: time="2024-04-12T18:54:44.065251088Z" level=info msg="CreateContainer within sandbox \"67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.002 [WARNING][4110] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--gv4d4-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"63b0dc57-1b72-4064-a3cc-9a7caa2fa16b", ResourceVersion:"856", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 54, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"64699887c5", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"default"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5", Pod:"csi-node-driver-gv4d4", Endpoint:"eth0", ServiceAccountName:"default", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.default"}, InterfaceName:"calie1cfe2b3853", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.002 [INFO][4110] k8s.go 585: Cleaning up netns ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.003 [INFO][4110] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" iface="eth0" netns="" Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.003 [INFO][4110] k8s.go 592: Releasing IP address(es) ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.003 [INFO][4110] utils.go 188: Calico CNI releasing IP address ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.061 [INFO][4117] ipam_plugin.go 415: Releasing address using handleID ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" HandleID="k8s-pod-network.3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.061 [INFO][4117] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.061 [INFO][4117] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.082 [WARNING][4117] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" HandleID="k8s-pod-network.3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.082 [INFO][4117] ipam_plugin.go 443: Releasing address using workloadID ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" HandleID="k8s-pod-network.3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Workload="localhost-k8s-csi--node--driver--gv4d4-eth0" Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.088 [INFO][4117] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:54:44.111461 env[1186]: 2024-04-12 18:54:44.101 [INFO][4110] k8s.go 598: Teardown processing complete. ContainerID="3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4" Apr 12 18:54:44.112308 env[1186]: time="2024-04-12T18:54:44.111494582Z" level=info msg="TearDown network for sandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\" successfully" Apr 12 18:54:44.135503 env[1186]: time="2024-04-12T18:54:44.135233508Z" level=info msg="CreateContainer within sandbox \"67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"f0c36cb1b7631e8ab98571b543802b50050e38686103b3b841de34f290976042\"" Apr 12 18:54:44.136351 env[1186]: time="2024-04-12T18:54:44.136279701Z" level=info msg="RemovePodSandbox \"3ce09bbf3f421bb6c244e6b66aff577cf9624d15135abe631937f222b13f81a4\" returns successfully" Apr 12 18:54:44.137930 env[1186]: time="2024-04-12T18:54:44.137834151Z" level=info msg="StartContainer for \"f0c36cb1b7631e8ab98571b543802b50050e38686103b3b841de34f290976042\"" Apr 12 18:54:44.219675 systemd[1]: run-containerd-runc-k8s.io-f0c36cb1b7631e8ab98571b543802b50050e38686103b3b841de34f290976042-runc.nbFD6D.mount: Deactivated successfully. Apr 12 18:54:44.258355 systemd[1]: Started cri-containerd-f0c36cb1b7631e8ab98571b543802b50050e38686103b3b841de34f290976042.scope. Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7fa244516230 items=0 ppid=3537 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:44.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630633336636231623736333165386162393835373162353433383032 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.280000 audit: BPF prog-id=170 op=LOAD Apr 12 18:54:44.280000 audit[4132]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0003c2ab8 items=0 ppid=3537 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:44.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630633336636231623736333165386162393835373162353433383032 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit: BPF prog-id=171 op=LOAD Apr 12 18:54:44.281000 audit[4132]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0003c2b08 items=0 ppid=3537 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:44.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630633336636231623736333165386162393835373162353433383032 Apr 12 18:54:44.281000 audit: BPF prog-id=171 op=UNLOAD Apr 12 18:54:44.281000 audit: BPF prog-id=170 op=UNLOAD Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { perfmon } for pid=4132 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit[4132]: AVC avc: denied { bpf } for pid=4132 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:44.281000 audit: BPF prog-id=172 op=LOAD Apr 12 18:54:44.281000 audit[4132]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0003c2b98 items=0 ppid=3537 pid=4132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:44.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630633336636231623736333165386162393835373162353433383032 Apr 12 18:54:44.385827 env[1186]: time="2024-04-12T18:54:44.385733326Z" level=info msg="StartContainer for \"f0c36cb1b7631e8ab98571b543802b50050e38686103b3b841de34f290976042\" returns successfully" Apr 12 18:54:44.483315 kubelet[2101]: E0412 18:54:44.483277 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:44.486513 kubelet[2101]: E0412 18:54:44.486479 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:45.493699 kubelet[2101]: E0412 18:54:45.493596 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:47.692957 kernel: kauditd_printk_skb: 350 callbacks suppressed Apr 12 18:54:47.693139 kernel: audit: type=1130 audit(1712948087.680:1309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.120:22-10.0.0.1:50398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:47.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.120:22-10.0.0.1:50398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:47.682381 systemd[1]: Started sshd@10-10.0.0.120:22-10.0.0.1:50398.service. Apr 12 18:54:47.747000 audit[4163]: USER_ACCT pid=4163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:47.754905 sshd[4163]: Accepted publickey for core from 10.0.0.1 port 50398 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:54:47.774838 kernel: audit: type=1101 audit(1712948087.747:1310): pid=4163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:47.774951 kernel: audit: type=1103 audit(1712948087.753:1311): pid=4163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:47.774986 kernel: audit: type=1006 audit(1712948087.753:1312): pid=4163 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Apr 12 18:54:47.775027 kernel: audit: type=1300 audit(1712948087.753:1312): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc65d02d90 a2=3 a3=0 items=0 ppid=1 pid=4163 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:47.753000 audit[4163]: CRED_ACQ pid=4163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:47.753000 audit[4163]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc65d02d90 a2=3 a3=0 items=0 ppid=1 pid=4163 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:47.756326 sshd[4163]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:54:47.753000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:47.781819 kernel: audit: type=1327 audit(1712948087.753:1312): proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:47.788394 systemd[1]: Started session-11.scope. Apr 12 18:54:47.789007 systemd-logind[1168]: New session 11 of user core. Apr 12 18:54:47.822000 audit[4163]: USER_START pid=4163 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:47.835495 kernel: audit: type=1105 audit(1712948087.822:1313): pid=4163 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:47.835639 kernel: audit: type=1103 audit(1712948087.830:1314): pid=4165 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:47.830000 audit[4165]: CRED_ACQ pid=4165 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:48.050929 env[1186]: time="2024-04-12T18:54:48.050847175Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:48.064356 env[1186]: time="2024-04-12T18:54:48.059354406Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e4fd05c0c1c037d7b99e8aab4e14d2f54e8150b91b06776fb019a2d51611a88,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:48.064356 env[1186]: time="2024-04-12T18:54:48.063749629Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:48.071098 env[1186]: time="2024-04-12T18:54:48.071035728Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:c74026de594a0e40b9aa63b33f41fa42fb311e35d65a10dfb642293292368c51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:48.072833 env[1186]: time="2024-04-12T18:54:48.072785506Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.27.3\" returns image reference \"sha256:3e4fd05c0c1c037d7b99e8aab4e14d2f54e8150b91b06776fb019a2d51611a88\"" Apr 12 18:54:48.076121 env[1186]: time="2024-04-12T18:54:48.076067630Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3\"" Apr 12 18:54:48.109622 env[1186]: time="2024-04-12T18:54:48.106565129Z" level=info msg="CreateContainer within sandbox \"dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Apr 12 18:54:48.123245 sshd[4163]: pam_unix(sshd:session): session closed for user core Apr 12 18:54:48.137000 audit[4163]: USER_END pid=4163 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:48.143181 systemd[1]: sshd@10-10.0.0.120:22-10.0.0.1:50398.service: Deactivated successfully. Apr 12 18:54:48.144240 systemd[1]: session-11.scope: Deactivated successfully. Apr 12 18:54:48.138000 audit[4163]: CRED_DISP pid=4163 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:48.149734 systemd-logind[1168]: Session 11 logged out. Waiting for processes to exit. Apr 12 18:54:48.154274 systemd-logind[1168]: Removed session 11. Apr 12 18:54:48.158182 kernel: audit: type=1106 audit(1712948088.137:1315): pid=4163 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:48.159826 kernel: audit: type=1104 audit(1712948088.138:1316): pid=4163 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:48.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.120:22-10.0.0.1:50398 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:48.162999 env[1186]: time="2024-04-12T18:54:48.162926566Z" level=info msg="CreateContainer within sandbox \"dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"c0a60064587c8fdb5c29d2bf00fdefbd06ce705bc9fd277daf06336307ee9cc9\"" Apr 12 18:54:48.165309 env[1186]: time="2024-04-12T18:54:48.164104936Z" level=info msg="StartContainer for \"c0a60064587c8fdb5c29d2bf00fdefbd06ce705bc9fd277daf06336307ee9cc9\"" Apr 12 18:54:48.210922 systemd[1]: Started cri-containerd-c0a60064587c8fdb5c29d2bf00fdefbd06ce705bc9fd277daf06336307ee9cc9.scope. Apr 12 18:54:48.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.232000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.232000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.241000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.241000 audit: BPF prog-id=173 op=LOAD Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3910 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:48.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330613630303634353837633866646235633239643262663030666465 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3910 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:48.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330613630303634353837633866646235633239643262663030666465 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.244000 audit: BPF prog-id=174 op=LOAD Apr 12 18:54:48.244000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024570 items=0 ppid=3910 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:48.244000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330613630303634353837633866646235633239643262663030666465 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit: BPF prog-id=175 op=LOAD Apr 12 18:54:48.246000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0000245b8 items=0 ppid=3910 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:48.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330613630303634353837633866646235633239643262663030666465 Apr 12 18:54:48.246000 audit: BPF prog-id=175 op=UNLOAD Apr 12 18:54:48.246000 audit: BPF prog-id=174 op=UNLOAD Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { perfmon } for pid=4193 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit[4193]: AVC avc: denied { bpf } for pid=4193 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:48.246000 audit: BPF prog-id=176 op=LOAD Apr 12 18:54:48.246000 audit[4193]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0000249c8 items=0 ppid=3910 pid=4193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:48.246000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6330613630303634353837633866646235633239643262663030666465 Apr 12 18:54:48.296985 env[1186]: time="2024-04-12T18:54:48.296868963Z" level=info msg="StartContainer for \"c0a60064587c8fdb5c29d2bf00fdefbd06ce705bc9fd277daf06336307ee9cc9\" returns successfully" Apr 12 18:54:48.672644 kubelet[2101]: I0412 18:54:48.670771 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6c5d75f8dc-vqn77" podStartSLOduration=41.477019777 podStartE2EDuration="46.670715652s" podCreationTimestamp="2024-04-12 18:54:02 +0000 UTC" firstStartedPulling="2024-04-12 18:54:42.880806446 +0000 UTC m=+60.640484625" lastFinishedPulling="2024-04-12 18:54:48.074502321 +0000 UTC m=+65.834180500" observedRunningTime="2024-04-12 18:54:48.584970796 +0000 UTC m=+66.344648995" watchObservedRunningTime="2024-04-12 18:54:48.670715652 +0000 UTC m=+66.430393831" Apr 12 18:54:51.052641 env[1186]: time="2024-04-12T18:54:51.052558656Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:51.062536 env[1186]: time="2024-04-12T18:54:51.059250491Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7ac3827a6231c88089a78b3c48feee265627f54838c750d32163d73364a5aae1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:51.064385 env[1186]: time="2024-04-12T18:54:51.064323938Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:51.068629 env[1186]: time="2024-04-12T18:54:51.067848387Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.27.3\" returns image reference \"sha256:7ac3827a6231c88089a78b3c48feee265627f54838c750d32163d73364a5aae1\"" Apr 12 18:54:51.068629 env[1186]: time="2024-04-12T18:54:51.068224026Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:f3c7cf1e4b85038d77b3568a1103d3c5174b07bd4435b22a8891b167ef28a50a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:54:51.082764 env[1186]: time="2024-04-12T18:54:51.082705003Z" level=info msg="CreateContainer within sandbox \"67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Apr 12 18:54:51.272540 env[1186]: time="2024-04-12T18:54:51.272395821Z" level=info msg="CreateContainer within sandbox \"67d0d0d7200c3a9b835c251a7fed3bd84f0e75c2412e9320ee6fe04b40671ba5\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"9341378683a55b147d728efc66cbabe77584535f845e68ea9f2d2e1cce32a347\"" Apr 12 18:54:51.278666 env[1186]: time="2024-04-12T18:54:51.274064414Z" level=info msg="StartContainer for \"9341378683a55b147d728efc66cbabe77584535f845e68ea9f2d2e1cce32a347\"" Apr 12 18:54:51.374347 systemd[1]: Started cri-containerd-9341378683a55b147d728efc66cbabe77584535f845e68ea9f2d2e1cce32a347.scope. Apr 12 18:54:51.435000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.435000 audit[4252]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f7bb285dc88 items=0 ppid=3537 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:51.435000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933343133373836383361353562313437643732386566633636636261 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.436000 audit: BPF prog-id=177 op=LOAD Apr 12 18:54:51.436000 audit[4252]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c00020e228 items=0 ppid=3537 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:51.436000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933343133373836383361353562313437643732386566633636636261 Apr 12 18:54:51.439000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.439000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.439000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.439000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.439000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.439000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.439000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.439000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.439000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.439000 audit: BPF prog-id=178 op=LOAD Apr 12 18:54:51.439000 audit[4252]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c00020e278 items=0 ppid=3537 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:51.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933343133373836383361353562313437643732386566633636636261 Apr 12 18:54:51.440000 audit: BPF prog-id=178 op=UNLOAD Apr 12 18:54:51.440000 audit: BPF prog-id=177 op=UNLOAD Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { perfmon } for pid=4252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit[4252]: AVC avc: denied { bpf } for pid=4252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:54:51.441000 audit: BPF prog-id=179 op=LOAD Apr 12 18:54:51.441000 audit[4252]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c00020e308 items=0 ppid=3537 pid=4252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:51.441000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3933343133373836383361353562313437643732386566633636636261 Apr 12 18:54:51.528105 env[1186]: time="2024-04-12T18:54:51.528009669Z" level=info msg="StartContainer for \"9341378683a55b147d728efc66cbabe77584535f845e68ea9f2d2e1cce32a347\" returns successfully" Apr 12 18:54:51.613746 kubelet[2101]: I0412 18:54:51.608956 2101 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="calico-system/csi-node-driver-gv4d4" podStartSLOduration=39.865707249 podStartE2EDuration="49.608897591s" podCreationTimestamp="2024-04-12 18:54:02 +0000 UTC" firstStartedPulling="2024-04-12 18:54:41.329649879 +0000 UTC m=+59.089328058" lastFinishedPulling="2024-04-12 18:54:51.072840211 +0000 UTC m=+68.832518400" observedRunningTime="2024-04-12 18:54:51.605882071 +0000 UTC m=+69.365560250" watchObservedRunningTime="2024-04-12 18:54:51.608897591 +0000 UTC m=+69.368575770" Apr 12 18:54:51.697901 kubelet[2101]: I0412 18:54:51.697722 2101 csi_plugin.go:99] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Apr 12 18:54:51.702378 kubelet[2101]: I0412 18:54:51.702218 2101 csi_plugin.go:112] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Apr 12 18:54:52.968602 kernel: kauditd_printk_skb: 101 callbacks suppressed Apr 12 18:54:52.968808 kernel: audit: type=1400 audit(1712948092.964:1342): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:52.964000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:52.964000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001822780 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:52.987026 kernel: audit: type=1300 audit(1712948092.964:1342): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001822780 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:52.996884 kernel: audit: type=1327 audit(1712948092.964:1342): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:52.964000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:52.967000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:53.006893 kernel: audit: type=1400 audit(1712948092.967:1343): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:53.006994 kernel: audit: type=1300 audit(1712948092.967:1343): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00015f8e0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:52.967000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00015f8e0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:52.967000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:53.033558 kernel: audit: type=1327 audit(1712948092.967:1343): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:53.033790 kernel: audit: type=1400 audit(1712948092.981:1344): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:52.981000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:53.045721 kernel: audit: type=1300 audit(1712948092.981:1344): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0018227c0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:52.981000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0018227c0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:52.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:53.071555 kernel: audit: type=1327 audit(1712948092.981:1344): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:53.071758 kernel: audit: type=1400 audit(1712948092.981:1345): avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:52.981000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:54:52.981000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001822800 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:54:52.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:54:53.131904 systemd[1]: Started sshd@11-10.0.0.120:22-10.0.0.1:50408.service. Apr 12 18:54:53.131000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.120:22-10.0.0.1:50408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:53.242000 audit[4288]: USER_ACCT pid=4288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:53.244648 sshd[4288]: Accepted publickey for core from 10.0.0.1 port 50408 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:54:53.245000 audit[4288]: CRED_ACQ pid=4288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:53.245000 audit[4288]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffefa9a8bc0 a2=3 a3=0 items=0 ppid=1 pid=4288 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:53.245000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:53.247714 sshd[4288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:54:53.262913 systemd-logind[1168]: New session 12 of user core. Apr 12 18:54:53.264784 systemd[1]: Started session-12.scope. Apr 12 18:54:53.284000 audit[4288]: USER_START pid=4288 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:53.291000 audit[4293]: CRED_ACQ pid=4293 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:53.522129 sshd[4288]: pam_unix(sshd:session): session closed for user core Apr 12 18:54:53.524000 audit[4288]: USER_END pid=4288 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:53.524000 audit[4288]: CRED_DISP pid=4288 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:53.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.120:22-10.0.0.1:50410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:53.548000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.120:22-10.0.0.1:50408 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:53.548735 systemd[1]: Started sshd@12-10.0.0.120:22-10.0.0.1:50410.service. Apr 12 18:54:53.549603 systemd[1]: sshd@11-10.0.0.120:22-10.0.0.1:50408.service: Deactivated successfully. Apr 12 18:54:53.551102 systemd[1]: session-12.scope: Deactivated successfully. Apr 12 18:54:53.556342 systemd-logind[1168]: Session 12 logged out. Waiting for processes to exit. Apr 12 18:54:53.569644 systemd-logind[1168]: Removed session 12. Apr 12 18:54:53.615000 audit[4307]: USER_ACCT pid=4307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:53.618257 sshd[4307]: Accepted publickey for core from 10.0.0.1 port 50410 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:54:53.617000 audit[4307]: CRED_ACQ pid=4307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:53.618000 audit[4307]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff00766060 a2=3 a3=0 items=0 ppid=1 pid=4307 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:53.618000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:53.619846 sshd[4307]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:54:53.633993 systemd-logind[1168]: New session 13 of user core. Apr 12 18:54:53.634702 systemd[1]: Started session-13.scope. Apr 12 18:54:53.732000 audit[4307]: USER_START pid=4307 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:53.739000 audit[4310]: CRED_ACQ pid=4310 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:54.113214 sshd[4307]: pam_unix(sshd:session): session closed for user core Apr 12 18:54:54.115000 audit[4307]: USER_END pid=4307 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:54.116000 audit[4307]: CRED_DISP pid=4307 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:54.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.120:22-10.0.0.1:50420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:54.119490 systemd[1]: Started sshd@13-10.0.0.120:22-10.0.0.1:50420.service. Apr 12 18:54:54.130102 systemd[1]: sshd@12-10.0.0.120:22-10.0.0.1:50410.service: Deactivated successfully. Apr 12 18:54:54.130000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.120:22-10.0.0.1:50410 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:54.132265 systemd[1]: session-13.scope: Deactivated successfully. Apr 12 18:54:54.133673 systemd-logind[1168]: Session 13 logged out. Waiting for processes to exit. Apr 12 18:54:54.136669 systemd-logind[1168]: Removed session 13. Apr 12 18:54:54.230000 audit[4319]: USER_ACCT pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:54.232360 sshd[4319]: Accepted publickey for core from 10.0.0.1 port 50420 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:54:54.232000 audit[4319]: CRED_ACQ pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:54.235000 audit[4319]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdab6e9e40 a2=3 a3=0 items=0 ppid=1 pid=4319 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:54.235000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:54.241331 sshd[4319]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:54:54.261165 systemd[1]: Started session-14.scope. Apr 12 18:54:54.262532 systemd-logind[1168]: New session 14 of user core. Apr 12 18:54:54.346000 audit[4319]: USER_START pid=4319 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:54.351000 audit[4322]: CRED_ACQ pid=4322 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:54.555773 sshd[4319]: pam_unix(sshd:session): session closed for user core Apr 12 18:54:54.558000 audit[4319]: USER_END pid=4319 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:54.558000 audit[4319]: CRED_DISP pid=4319 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:54.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.120:22-10.0.0.1:50420 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:54.562250 systemd[1]: sshd@13-10.0.0.120:22-10.0.0.1:50420.service: Deactivated successfully. Apr 12 18:54:54.563686 systemd[1]: session-14.scope: Deactivated successfully. Apr 12 18:54:54.566920 systemd-logind[1168]: Session 14 logged out. Waiting for processes to exit. Apr 12 18:54:54.572139 systemd-logind[1168]: Removed session 14. Apr 12 18:54:59.495496 kubelet[2101]: E0412 18:54:59.495428 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:54:59.576545 kernel: kauditd_printk_skb: 35 callbacks suppressed Apr 12 18:54:59.576673 kernel: audit: type=1130 audit(1712948099.571:1373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.120:22-10.0.0.1:38822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:59.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.120:22-10.0.0.1:38822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:59.572676 systemd[1]: Started sshd@14-10.0.0.120:22-10.0.0.1:38822.service. Apr 12 18:54:59.637000 audit[4367]: USER_ACCT pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.639129 sshd[4367]: Accepted publickey for core from 10.0.0.1 port 38822 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:54:59.642060 sshd[4367]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:54:59.637000 audit[4367]: CRED_ACQ pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.651572 kernel: audit: type=1101 audit(1712948099.637:1374): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.651743 kernel: audit: type=1103 audit(1712948099.637:1375): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.654947 kernel: audit: type=1006 audit(1712948099.637:1376): pid=4367 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Apr 12 18:54:59.660445 kernel: audit: type=1300 audit(1712948099.637:1376): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6c71d0d0 a2=3 a3=0 items=0 ppid=1 pid=4367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:59.637000 audit[4367]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6c71d0d0 a2=3 a3=0 items=0 ppid=1 pid=4367 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:54:59.662773 kernel: audit: type=1327 audit(1712948099.637:1376): proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:59.637000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:54:59.668362 systemd-logind[1168]: New session 15 of user core. Apr 12 18:54:59.669718 systemd[1]: Started session-15.scope. Apr 12 18:54:59.700000 audit[4367]: USER_START pid=4367 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.700000 audit[4369]: CRED_ACQ pid=4369 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.723646 kernel: audit: type=1105 audit(1712948099.700:1377): pid=4367 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.723998 kernel: audit: type=1103 audit(1712948099.700:1378): pid=4369 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.884708 sshd[4367]: pam_unix(sshd:session): session closed for user core Apr 12 18:54:59.892000 audit[4367]: USER_END pid=4367 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.896503 systemd[1]: sshd@14-10.0.0.120:22-10.0.0.1:38822.service: Deactivated successfully. Apr 12 18:54:59.897559 systemd[1]: session-15.scope: Deactivated successfully. Apr 12 18:54:59.899053 systemd-logind[1168]: Session 15 logged out. Waiting for processes to exit. Apr 12 18:54:59.893000 audit[4367]: CRED_DISP pid=4367 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.907396 kernel: audit: type=1106 audit(1712948099.892:1379): pid=4367 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.907605 kernel: audit: type=1104 audit(1712948099.893:1380): pid=4367 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:54:59.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.120:22-10.0.0.1:38822 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:54:59.914269 systemd-logind[1168]: Removed session 15. Apr 12 18:55:03.490628 kubelet[2101]: E0412 18:55:03.490557 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:55:04.898165 systemd[1]: Started sshd@15-10.0.0.120:22-10.0.0.1:38836.service. Apr 12 18:55:04.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.120:22-10.0.0.1:38836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:04.900757 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:55:04.900840 kernel: audit: type=1130 audit(1712948104.896:1382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.120:22-10.0.0.1:38836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:05.024000 audit[4385]: USER_ACCT pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.026650 sshd[4385]: Accepted publickey for core from 10.0.0.1 port 38836 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:05.033000 audit[4385]: CRED_ACQ pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.043218 sshd[4385]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:05.051830 kernel: audit: type=1101 audit(1712948105.024:1383): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.051998 kernel: audit: type=1103 audit(1712948105.033:1384): pid=4385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.052077 kernel: audit: type=1006 audit(1712948105.041:1385): pid=4385 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Apr 12 18:55:05.041000 audit[4385]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd15b44f0 a2=3 a3=0 items=0 ppid=1 pid=4385 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:05.070332 systemd-logind[1168]: New session 16 of user core. Apr 12 18:55:05.073155 systemd[1]: Started session-16.scope. Apr 12 18:55:05.092116 kernel: audit: type=1300 audit(1712948105.041:1385): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd15b44f0 a2=3 a3=0 items=0 ppid=1 pid=4385 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:05.092279 kernel: audit: type=1327 audit(1712948105.041:1385): proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:05.092308 kernel: audit: type=1105 audit(1712948105.087:1386): pid=4385 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.041000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:05.087000 audit[4385]: USER_START pid=4385 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.104308 kernel: audit: type=1103 audit(1712948105.087:1387): pid=4387 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.087000 audit[4387]: CRED_ACQ pid=4387 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.294671 sshd[4385]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:05.294000 audit[4385]: USER_END pid=4385 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.302495 systemd-logind[1168]: Session 16 logged out. Waiting for processes to exit. Apr 12 18:55:05.304277 systemd[1]: sshd@15-10.0.0.120:22-10.0.0.1:38836.service: Deactivated successfully. Apr 12 18:55:05.309713 kernel: audit: type=1106 audit(1712948105.294:1388): pid=4385 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.309841 kernel: audit: type=1104 audit(1712948105.294:1389): pid=4385 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.294000 audit[4385]: CRED_DISP pid=4385 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:05.305297 systemd[1]: session-16.scope: Deactivated successfully. Apr 12 18:55:05.306850 systemd-logind[1168]: Removed session 16. Apr 12 18:55:05.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.120:22-10.0.0.1:38836 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:07.198768 systemd[1]: run-containerd-runc-k8s.io-913119e654fa0be3129e14172ce9ba552f080f3d446c98154fd64f9d1d213fe0-runc.RnKXSL.mount: Deactivated successfully. Apr 12 18:55:07.328294 kubelet[2101]: E0412 18:55:07.327055 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:55:10.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.120:22-10.0.0.1:36678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:10.311729 systemd[1]: Started sshd@16-10.0.0.120:22-10.0.0.1:36678.service. Apr 12 18:55:10.316446 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:55:10.316554 kernel: audit: type=1130 audit(1712948110.311:1391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.120:22-10.0.0.1:36678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:10.417000 audit[4434]: USER_ACCT pid=4434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.421553 sshd[4434]: Accepted publickey for core from 10.0.0.1 port 36678 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:10.426445 kernel: audit: type=1101 audit(1712948110.417:1392): pid=4434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.436000 audit[4434]: CRED_ACQ pid=4434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.438097 sshd[4434]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:10.451224 kernel: audit: type=1103 audit(1712948110.436:1393): pid=4434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.451455 kernel: audit: type=1006 audit(1712948110.437:1394): pid=4434 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Apr 12 18:55:10.451500 kernel: audit: type=1300 audit(1712948110.437:1394): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd41495bb0 a2=3 a3=0 items=0 ppid=1 pid=4434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:10.437000 audit[4434]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd41495bb0 a2=3 a3=0 items=0 ppid=1 pid=4434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:10.468187 kernel: audit: type=1327 audit(1712948110.437:1394): proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:10.437000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:10.475976 systemd[1]: Started session-17.scope. Apr 12 18:55:10.487254 systemd-logind[1168]: New session 17 of user core. Apr 12 18:55:10.524000 audit[4434]: USER_START pid=4434 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.533525 kernel: audit: type=1105 audit(1712948110.524:1395): pid=4434 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.533000 audit[4436]: CRED_ACQ pid=4436 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.543881 kernel: audit: type=1103 audit(1712948110.533:1396): pid=4436 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.714596 sshd[4434]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:10.718000 audit[4434]: USER_END pid=4434 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.718000 audit[4434]: CRED_DISP pid=4434 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.737659 systemd[1]: sshd@16-10.0.0.120:22-10.0.0.1:36678.service: Deactivated successfully. Apr 12 18:55:10.738844 systemd[1]: session-17.scope: Deactivated successfully. Apr 12 18:55:10.743206 kernel: audit: type=1106 audit(1712948110.718:1397): pid=4434 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.743371 kernel: audit: type=1104 audit(1712948110.718:1398): pid=4434 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:10.732000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.120:22-10.0.0.1:36678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:10.741241 systemd-logind[1168]: Session 17 logged out. Waiting for processes to exit. Apr 12 18:55:10.744532 systemd-logind[1168]: Removed session 17. Apr 12 18:55:11.490846 kubelet[2101]: E0412 18:55:11.490797 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:55:15.725192 systemd[1]: Started sshd@17-10.0.0.120:22-10.0.0.1:36690.service. Apr 12 18:55:15.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.120:22-10.0.0.1:36690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:15.726971 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:55:15.727045 kernel: audit: type=1130 audit(1712948115.725:1400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.120:22-10.0.0.1:36690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:15.777000 audit[4448]: USER_ACCT pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:15.778565 sshd[4448]: Accepted publickey for core from 10.0.0.1 port 36690 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:15.781629 sshd[4448]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:15.780000 audit[4448]: CRED_ACQ pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:15.794024 kernel: audit: type=1101 audit(1712948115.777:1401): pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:15.794198 kernel: audit: type=1103 audit(1712948115.780:1402): pid=4448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:15.794231 kernel: audit: type=1006 audit(1712948115.780:1403): pid=4448 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Apr 12 18:55:15.795718 kernel: audit: type=1300 audit(1712948115.780:1403): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd13302340 a2=3 a3=0 items=0 ppid=1 pid=4448 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:15.780000 audit[4448]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd13302340 a2=3 a3=0 items=0 ppid=1 pid=4448 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:15.806214 kernel: audit: type=1327 audit(1712948115.780:1403): proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:15.780000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:15.812801 systemd-logind[1168]: New session 18 of user core. Apr 12 18:55:15.816552 systemd[1]: Started session-18.scope. Apr 12 18:55:15.912000 audit[4448]: USER_START pid=4448 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:15.918000 audit[4450]: CRED_ACQ pid=4450 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:15.929470 kernel: audit: type=1105 audit(1712948115.912:1404): pid=4448 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:15.929614 kernel: audit: type=1103 audit(1712948115.918:1405): pid=4450 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:16.147111 sshd[4448]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:16.152000 audit[4448]: USER_END pid=4448 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:16.155868 systemd[1]: sshd@17-10.0.0.120:22-10.0.0.1:36690.service: Deactivated successfully. Apr 12 18:55:16.156915 systemd[1]: session-18.scope: Deactivated successfully. Apr 12 18:55:16.157893 systemd-logind[1168]: Session 18 logged out. Waiting for processes to exit. Apr 12 18:55:16.158961 systemd-logind[1168]: Removed session 18. Apr 12 18:55:16.152000 audit[4448]: CRED_DISP pid=4448 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:16.171243 kernel: audit: type=1106 audit(1712948116.152:1406): pid=4448 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:16.171468 kernel: audit: type=1104 audit(1712948116.152:1407): pid=4448 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:16.154000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.120:22-10.0.0.1:36690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:17.491335 kubelet[2101]: E0412 18:55:17.491290 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:55:21.142784 systemd[1]: Started sshd@18-10.0.0.120:22-10.0.0.1:42348.service. Apr 12 18:55:21.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.120:22-10.0.0.1:42348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:21.148362 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:55:21.148499 kernel: audit: type=1130 audit(1712948121.142:1409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.120:22-10.0.0.1:42348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:21.219000 audit[4472]: USER_ACCT pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.226826 sshd[4472]: Accepted publickey for core from 10.0.0.1 port 42348 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:21.232470 kernel: audit: type=1101 audit(1712948121.219:1410): pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.235000 audit[4472]: CRED_ACQ pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.237250 sshd[4472]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:21.242456 kernel: audit: type=1103 audit(1712948121.235:1411): pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.257214 kernel: audit: type=1006 audit(1712948121.235:1412): pid=4472 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Apr 12 18:55:21.257393 kernel: audit: type=1300 audit(1712948121.235:1412): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd10762e0 a2=3 a3=0 items=0 ppid=1 pid=4472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:21.235000 audit[4472]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffd10762e0 a2=3 a3=0 items=0 ppid=1 pid=4472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:21.235000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:21.267389 kernel: audit: type=1327 audit(1712948121.235:1412): proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:21.273354 systemd[1]: Started session-19.scope. Apr 12 18:55:21.277916 systemd-logind[1168]: New session 19 of user core. Apr 12 18:55:21.298000 audit[4472]: USER_START pid=4472 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.308074 kernel: audit: type=1105 audit(1712948121.298:1413): pid=4472 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.308228 kernel: audit: type=1103 audit(1712948121.300:1414): pid=4474 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.300000 audit[4474]: CRED_ACQ pid=4474 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.540195 sshd[4472]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:21.542000 audit[4472]: USER_END pid=4472 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.542000 audit[4472]: CRED_DISP pid=4472 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.544898 systemd[1]: sshd@18-10.0.0.120:22-10.0.0.1:42348.service: Deactivated successfully. Apr 12 18:55:21.545837 systemd[1]: session-19.scope: Deactivated successfully. Apr 12 18:55:21.553993 kernel: audit: type=1106 audit(1712948121.542:1415): pid=4472 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.554111 kernel: audit: type=1104 audit(1712948121.542:1416): pid=4472 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:21.544000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.120:22-10.0.0.1:42348 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:21.555550 systemd-logind[1168]: Session 19 logged out. Waiting for processes to exit. Apr 12 18:55:21.556620 systemd-logind[1168]: Removed session 19. Apr 12 18:55:24.655319 systemd[1]: run-containerd-runc-k8s.io-c0a60064587c8fdb5c29d2bf00fdefbd06ce705bc9fd277daf06336307ee9cc9-runc.OyzmE7.mount: Deactivated successfully. Apr 12 18:55:26.554894 systemd[1]: Started sshd@19-10.0.0.120:22-10.0.0.1:42364.service. Apr 12 18:55:26.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.120:22-10.0.0.1:42364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:26.564718 kernel: kauditd_printk_skb: 1 callbacks suppressed Apr 12 18:55:26.564802 kernel: audit: type=1130 audit(1712948126.561:1418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.120:22-10.0.0.1:42364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:26.610000 audit[4510]: USER_ACCT pid=4510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.612591 sshd[4510]: Accepted publickey for core from 10.0.0.1 port 42364 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:26.615680 sshd[4510]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:26.614000 audit[4510]: CRED_ACQ pid=4510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.623014 kernel: audit: type=1101 audit(1712948126.610:1419): pid=4510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.623153 kernel: audit: type=1103 audit(1712948126.614:1420): pid=4510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.623227 kernel: audit: type=1006 audit(1712948126.614:1421): pid=4510 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Apr 12 18:55:26.614000 audit[4510]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd526af50 a2=3 a3=0 items=0 ppid=1 pid=4510 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:26.635538 kernel: audit: type=1300 audit(1712948126.614:1421): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd526af50 a2=3 a3=0 items=0 ppid=1 pid=4510 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:26.635643 kernel: audit: type=1327 audit(1712948126.614:1421): proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:26.614000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:26.635041 systemd-logind[1168]: New session 20 of user core. Apr 12 18:55:26.635989 systemd[1]: Started session-20.scope. Apr 12 18:55:26.680000 audit[4510]: USER_START pid=4510 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.689784 kernel: audit: type=1105 audit(1712948126.680:1422): pid=4510 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.691000 audit[4512]: CRED_ACQ pid=4512 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.698461 kernel: audit: type=1103 audit(1712948126.691:1423): pid=4512 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.866285 sshd[4510]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:26.867000 audit[4510]: USER_END pid=4510 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.867000 audit[4510]: CRED_DISP pid=4510 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.870263 systemd[1]: sshd@19-10.0.0.120:22-10.0.0.1:42364.service: Deactivated successfully. Apr 12 18:55:26.871375 systemd[1]: session-20.scope: Deactivated successfully. Apr 12 18:55:26.872321 systemd-logind[1168]: Session 20 logged out. Waiting for processes to exit. Apr 12 18:55:26.879936 systemd-logind[1168]: Removed session 20. Apr 12 18:55:26.881787 kernel: audit: type=1106 audit(1712948126.867:1424): pid=4510 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.881953 kernel: audit: type=1104 audit(1712948126.867:1425): pid=4510 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:26.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.120:22-10.0.0.1:42364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:31.090000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:31.090000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:31.090000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0008e5a20 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:55:31.090000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0008b6750 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:55:31.090000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:55:31.090000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:55:31.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.120:22-10.0.0.1:35710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:31.876878 systemd[1]: Started sshd@20-10.0.0.120:22-10.0.0.1:35710.service. Apr 12 18:55:31.878240 kernel: kauditd_printk_skb: 7 callbacks suppressed Apr 12 18:55:31.878277 kernel: audit: type=1130 audit(1712948131.875:1429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.120:22-10.0.0.1:35710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:31.924343 sshd[4528]: Accepted publickey for core from 10.0.0.1 port 35710 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:31.923000 audit[4528]: USER_ACCT pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:31.933360 sshd[4528]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:31.928000 audit[4528]: CRED_ACQ pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:31.943508 kernel: audit: type=1101 audit(1712948131.923:1430): pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:31.943629 kernel: audit: type=1103 audit(1712948131.928:1431): pid=4528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:31.946873 kernel: audit: type=1006 audit(1712948131.928:1432): pid=4528 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Apr 12 18:55:31.947001 kernel: audit: type=1300 audit(1712948131.928:1432): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd50fea100 a2=3 a3=0 items=0 ppid=1 pid=4528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:31.928000 audit[4528]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd50fea100 a2=3 a3=0 items=0 ppid=1 pid=4528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:31.952923 kernel: audit: type=1327 audit(1712948131.928:1432): proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:31.928000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:31.963559 systemd[1]: Started session-21.scope. Apr 12 18:55:31.964281 systemd-logind[1168]: New session 21 of user core. Apr 12 18:55:32.014000 audit[4528]: USER_START pid=4528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.021000 audit[4530]: CRED_ACQ pid=4530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.039435 kernel: audit: type=1105 audit(1712948132.014:1433): pid=4528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.039672 kernel: audit: type=1103 audit(1712948132.021:1434): pid=4530 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.248365 sshd[4528]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:32.249000 audit[4528]: USER_END pid=4528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.259425 systemd[1]: Started sshd@21-10.0.0.120:22-10.0.0.1:35712.service. Apr 12 18:55:32.264445 kernel: audit: type=1106 audit(1712948132.249:1435): pid=4528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.272000 audit[4528]: CRED_DISP pid=4528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.284730 kernel: audit: type=1104 audit(1712948132.272:1436): pid=4528 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.120:22-10.0.0.1:35712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:32.286646 systemd[1]: sshd@20-10.0.0.120:22-10.0.0.1:35710.service: Deactivated successfully. Apr 12 18:55:32.291000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.120:22-10.0.0.1:35710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:32.295264 systemd[1]: session-21.scope: Deactivated successfully. Apr 12 18:55:32.296764 systemd-logind[1168]: Session 21 logged out. Waiting for processes to exit. Apr 12 18:55:32.300225 systemd-logind[1168]: Removed session 21. Apr 12 18:55:32.349000 audit[4540]: USER_ACCT pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.351079 sshd[4540]: Accepted publickey for core from 10.0.0.1 port 35712 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:32.355378 sshd[4540]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:32.353000 audit[4540]: CRED_ACQ pid=4540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.353000 audit[4540]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbc76ac60 a2=3 a3=0 items=0 ppid=1 pid=4540 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:32.353000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:32.389908 systemd-logind[1168]: New session 22 of user core. Apr 12 18:55:32.390941 systemd[1]: Started session-22.scope. Apr 12 18:55:32.402000 audit[4540]: USER_START pid=4540 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.405000 audit[4543]: CRED_ACQ pid=4543 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.929061 sshd[4540]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:32.932000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.120:22-10.0.0.1:35716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:32.932993 systemd[1]: Started sshd@22-10.0.0.120:22-10.0.0.1:35716.service. Apr 12 18:55:32.934000 audit[4540]: USER_END pid=4540 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.934000 audit[4540]: CRED_DISP pid=4540 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:32.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.120:22-10.0.0.1:35712 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:32.938726 systemd[1]: sshd@21-10.0.0.120:22-10.0.0.1:35712.service: Deactivated successfully. Apr 12 18:55:32.939867 systemd[1]: session-22.scope: Deactivated successfully. Apr 12 18:55:32.940841 systemd-logind[1168]: Session 22 logged out. Waiting for processes to exit. Apr 12 18:55:32.941987 systemd-logind[1168]: Removed session 22. Apr 12 18:55:33.024000 audit[4551]: USER_ACCT pid=4551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:33.026713 sshd[4551]: Accepted publickey for core from 10.0.0.1 port 35716 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:33.030000 audit[4551]: CRED_ACQ pid=4551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:33.030000 audit[4551]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe22e97c50 a2=3 a3=0 items=0 ppid=1 pid=4551 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:33.030000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:33.031760 sshd[4551]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:33.037988 systemd-logind[1168]: New session 23 of user core. Apr 12 18:55:33.039199 systemd[1]: Started session-23.scope. Apr 12 18:55:33.048000 audit[4551]: USER_START pid=4551 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:33.050000 audit[4554]: CRED_ACQ pid=4554 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:34.272000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:34.272000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c002ff9080 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:55:34.272000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:55:34.272000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=521034 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:34.272000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c006b06000 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:55:34.272000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:55:34.272000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=521028 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:34.272000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c008308240 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:55:34.272000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:55:34.275000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:34.275000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c008308270 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:55:34.275000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:55:34.275000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:34.275000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c010065400 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:55:34.275000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:55:34.275000 audit[1987]: AVC avc: denied { watch } for pid=1987 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=521032 scontext=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:34.275000 audit[1987]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00e2e8420 a2=fc6 a3=0 items=0 ppid=1811 pid=1987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c682,c830 key=(null) Apr 12 18:55:34.275000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313230002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Apr 12 18:55:35.548000 audit[4566]: NETFILTER_CFG table=filter:109 family=2 entries=20 op=nft_register_rule pid=4566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:35.548000 audit[4566]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7ffc175357b0 a2=0 a3=7ffc1753579c items=0 ppid=2248 pid=4566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:35.548000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:35.550000 audit[4566]: NETFILTER_CFG table=nat:110 family=2 entries=20 op=nft_register_rule pid=4566 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:35.550000 audit[4566]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffc175357b0 a2=0 a3=0 items=0 ppid=2248 pid=4566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:35.550000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:35.584114 sshd[4551]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:35.585000 audit[4568]: NETFILTER_CFG table=filter:111 family=2 entries=32 op=nft_register_rule pid=4568 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:35.585000 audit[4568]: SYSCALL arch=c000003e syscall=46 success=yes exit=11860 a0=3 a1=7fff64f821d0 a2=0 a3=7fff64f821bc items=0 ppid=2248 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:35.585000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:35.593313 systemd[1]: Started sshd@23-10.0.0.120:22-10.0.0.1:35732.service. Apr 12 18:55:35.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.120:22-10.0.0.1:35732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:35.595000 audit[4551]: USER_END pid=4551 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:35.595000 audit[4551]: CRED_DISP pid=4551 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:35.586000 audit[4568]: NETFILTER_CFG table=nat:112 family=2 entries=20 op=nft_register_rule pid=4568 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:35.599663 systemd[1]: sshd@22-10.0.0.120:22-10.0.0.1:35716.service: Deactivated successfully. Apr 12 18:55:35.586000 audit[4568]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff64f821d0 a2=0 a3=0 items=0 ppid=2248 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:35.586000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:35.599000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.120:22-10.0.0.1:35716 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:35.600823 systemd[1]: session-23.scope: Deactivated successfully. Apr 12 18:55:35.607595 systemd-logind[1168]: Session 23 logged out. Waiting for processes to exit. Apr 12 18:55:35.610978 systemd-logind[1168]: Removed session 23. Apr 12 18:55:35.653000 audit[4570]: USER_ACCT pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:35.656332 sshd[4570]: Accepted publickey for core from 10.0.0.1 port 35732 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:35.662000 audit[4570]: CRED_ACQ pid=4570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:35.664934 sshd[4570]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:35.663000 audit[4570]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3b9a2f60 a2=3 a3=0 items=0 ppid=1 pid=4570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:35.663000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:35.692049 systemd-logind[1168]: New session 24 of user core. Apr 12 18:55:35.696223 systemd[1]: Started session-24.scope. Apr 12 18:55:35.717000 audit[4570]: USER_START pid=4570 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:35.719000 audit[4573]: CRED_ACQ pid=4573 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:36.241580 sshd[4570]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:36.244000 audit[4570]: USER_END pid=4570 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:36.244000 audit[4570]: CRED_DISP pid=4570 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:36.248678 systemd[1]: sshd@23-10.0.0.120:22-10.0.0.1:35732.service: Deactivated successfully. Apr 12 18:55:36.248000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.120:22-10.0.0.1:35732 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:36.249696 systemd[1]: session-24.scope: Deactivated successfully. Apr 12 18:55:36.252698 systemd-logind[1168]: Session 24 logged out. Waiting for processes to exit. Apr 12 18:55:36.256941 systemd[1]: Started sshd@24-10.0.0.120:22-10.0.0.1:35746.service. Apr 12 18:55:36.256000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.120:22-10.0.0.1:35746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:36.265734 systemd-logind[1168]: Removed session 24. Apr 12 18:55:36.312000 audit[4583]: USER_ACCT pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:36.313817 sshd[4583]: Accepted publickey for core from 10.0.0.1 port 35746 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:36.316000 audit[4583]: CRED_ACQ pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:36.316000 audit[4583]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdceb3f010 a2=3 a3=0 items=0 ppid=1 pid=4583 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:36.316000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:36.317098 sshd[4583]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:36.328576 systemd-logind[1168]: New session 25 of user core. Apr 12 18:55:36.329920 systemd[1]: Started session-25.scope. Apr 12 18:55:36.365000 audit[4583]: USER_START pid=4583 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:36.367000 audit[4585]: CRED_ACQ pid=4585 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:36.548781 sshd[4583]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:36.560869 systemd[1]: sshd@24-10.0.0.120:22-10.0.0.1:35746.service: Deactivated successfully. Apr 12 18:55:36.557000 audit[4583]: USER_END pid=4583 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:36.557000 audit[4583]: CRED_DISP pid=4583 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:36.557000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.120:22-10.0.0.1:35746 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:36.562178 systemd[1]: session-25.scope: Deactivated successfully. Apr 12 18:55:36.564518 systemd-logind[1168]: Session 25 logged out. Waiting for processes to exit. Apr 12 18:55:36.566206 systemd-logind[1168]: Removed session 25. Apr 12 18:55:37.179446 systemd[1]: run-containerd-runc-k8s.io-913119e654fa0be3129e14172ce9ba552f080f3d446c98154fd64f9d1d213fe0-runc.NvgMoa.mount: Deactivated successfully. Apr 12 18:55:41.553000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.120:22-10.0.0.1:41754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:41.553499 systemd[1]: Started sshd@25-10.0.0.120:22-10.0.0.1:41754.service. Apr 12 18:55:41.565125 kernel: kauditd_printk_skb: 75 callbacks suppressed Apr 12 18:55:41.565340 kernel: audit: type=1130 audit(1712948141.553:1484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.120:22-10.0.0.1:41754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:41.666000 audit[4645]: USER_ACCT pid=4645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:41.667566 sshd[4645]: Accepted publickey for core from 10.0.0.1 port 41754 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:41.676000 audit[4645]: CRED_ACQ pid=4645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:41.677556 sshd[4645]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:41.682773 kernel: audit: type=1101 audit(1712948141.666:1485): pid=4645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:41.683014 kernel: audit: type=1103 audit(1712948141.676:1486): pid=4645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:41.696135 kernel: audit: type=1006 audit(1712948141.676:1487): pid=4645 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Apr 12 18:55:41.696345 kernel: audit: type=1300 audit(1712948141.676:1487): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd34cf180 a2=3 a3=0 items=0 ppid=1 pid=4645 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:41.676000 audit[4645]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcd34cf180 a2=3 a3=0 items=0 ppid=1 pid=4645 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:41.687246 systemd[1]: Started session-26.scope. Apr 12 18:55:41.689330 systemd-logind[1168]: New session 26 of user core. Apr 12 18:55:41.676000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:41.700471 kernel: audit: type=1327 audit(1712948141.676:1487): proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:41.700000 audit[4645]: USER_START pid=4645 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:41.702000 audit[4647]: CRED_ACQ pid=4647 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:41.723726 kernel: audit: type=1105 audit(1712948141.700:1488): pid=4645 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:41.723888 kernel: audit: type=1103 audit(1712948141.702:1489): pid=4647 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:41.844189 kubelet[2101]: I0412 18:55:41.844048 2101 topology_manager.go:215] "Topology Admit Handler" podUID="9e4c55cc-e518-40e8-8cff-e13858c026e3" podNamespace="calico-apiserver" podName="calico-apiserver-5bb6fbd664-chjdq" Apr 12 18:55:41.875535 kubelet[2101]: I0412 18:55:41.875334 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/9e4c55cc-e518-40e8-8cff-e13858c026e3-calico-apiserver-certs\") pod \"calico-apiserver-5bb6fbd664-chjdq\" (UID: \"9e4c55cc-e518-40e8-8cff-e13858c026e3\") " pod="calico-apiserver/calico-apiserver-5bb6fbd664-chjdq" Apr 12 18:55:41.876119 kubelet[2101]: I0412 18:55:41.876055 2101 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qnhqn\" (UniqueName: \"kubernetes.io/projected/9e4c55cc-e518-40e8-8cff-e13858c026e3-kube-api-access-qnhqn\") pod \"calico-apiserver-5bb6fbd664-chjdq\" (UID: \"9e4c55cc-e518-40e8-8cff-e13858c026e3\") " pod="calico-apiserver/calico-apiserver-5bb6fbd664-chjdq" Apr 12 18:55:41.879000 audit[4657]: NETFILTER_CFG table=filter:113 family=2 entries=33 op=nft_register_rule pid=4657 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:41.879000 audit[4657]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7ffda54e8450 a2=0 a3=7ffda54e843c items=0 ppid=2248 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:41.899306 systemd[1]: Created slice kubepods-besteffort-pod9e4c55cc_e518_40e8_8cff_e13858c026e3.slice. Apr 12 18:55:41.912607 kernel: audit: type=1325 audit(1712948141.879:1490): table=filter:113 family=2 entries=33 op=nft_register_rule pid=4657 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:41.912787 kernel: audit: type=1300 audit(1712948141.879:1490): arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7ffda54e8450 a2=0 a3=7ffda54e843c items=0 ppid=2248 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:41.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:41.886000 audit[4657]: NETFILTER_CFG table=nat:114 family=2 entries=20 op=nft_register_rule pid=4657 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:41.886000 audit[4657]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffda54e8450 a2=0 a3=0 items=0 ppid=2248 pid=4657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:41.886000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:41.941000 audit[4659]: NETFILTER_CFG table=filter:115 family=2 entries=34 op=nft_register_rule pid=4659 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:41.941000 audit[4659]: SYSCALL arch=c000003e syscall=46 success=yes exit=12604 a0=3 a1=7ffd4ee82bc0 a2=0 a3=7ffd4ee82bac items=0 ppid=2248 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:41.941000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:41.943000 audit[4659]: NETFILTER_CFG table=nat:116 family=2 entries=20 op=nft_register_rule pid=4659 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:41.943000 audit[4659]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffd4ee82bc0 a2=0 a3=0 items=0 ppid=2248 pid=4659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:41.943000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:41.987934 kubelet[2101]: E0412 18:55:41.987853 2101 secret.go:194] Couldn't get secret calico-apiserver/calico-apiserver-certs: secret "calico-apiserver-certs" not found Apr 12 18:55:41.988617 kubelet[2101]: E0412 18:55:41.988547 2101 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/9e4c55cc-e518-40e8-8cff-e13858c026e3-calico-apiserver-certs podName:9e4c55cc-e518-40e8-8cff-e13858c026e3 nodeName:}" failed. No retries permitted until 2024-04-12 18:55:42.487948799 +0000 UTC m=+120.247626978 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "calico-apiserver-certs" (UniqueName: "kubernetes.io/secret/9e4c55cc-e518-40e8-8cff-e13858c026e3-calico-apiserver-certs") pod "calico-apiserver-5bb6fbd664-chjdq" (UID: "9e4c55cc-e518-40e8-8cff-e13858c026e3") : secret "calico-apiserver-certs" not found Apr 12 18:55:42.004093 sshd[4645]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:42.011000 audit[4645]: USER_END pid=4645 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:42.011000 audit[4645]: CRED_DISP pid=4645 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:42.015586 systemd-logind[1168]: Session 26 logged out. Waiting for processes to exit. Apr 12 18:55:42.017513 systemd[1]: sshd@25-10.0.0.120:22-10.0.0.1:41754.service: Deactivated successfully. Apr 12 18:55:42.016000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-10.0.0.120:22-10.0.0.1:41754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:42.040621 systemd[1]: session-26.scope: Deactivated successfully. Apr 12 18:55:42.055330 systemd-logind[1168]: Removed session 26. Apr 12 18:55:42.500093 kubelet[2101]: E0412 18:55:42.500037 2101 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Apr 12 18:55:42.528456 env[1186]: time="2024-04-12T18:55:42.527844592Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5bb6fbd664-chjdq,Uid:9e4c55cc-e518-40e8-8cff-e13858c026e3,Namespace:calico-apiserver,Attempt:0,}" Apr 12 18:55:42.885081 systemd-networkd[1082]: caliab249b1d88a: Link UP Apr 12 18:55:42.894561 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Apr 12 18:55:42.894717 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliab249b1d88a: link becomes ready Apr 12 18:55:42.892555 systemd-networkd[1082]: caliab249b1d88a: Gained carrier Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.682 [INFO][4670] plugin.go 327: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0 calico-apiserver-5bb6fbd664- calico-apiserver 9e4c55cc-e518-40e8-8cff-e13858c026e3 1219 0 2024-04-12 18:55:41 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5bb6fbd664 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5bb6fbd664-chjdq eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliab249b1d88a [] []}} ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Namespace="calico-apiserver" Pod="calico-apiserver-5bb6fbd664-chjdq" WorkloadEndpoint="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.683 [INFO][4670] k8s.go 76: Extracted identifiers for CmdAddK8s ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Namespace="calico-apiserver" Pod="calico-apiserver-5bb6fbd664-chjdq" WorkloadEndpoint="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.744 [INFO][4679] ipam_plugin.go 228: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" HandleID="k8s-pod-network.49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Workload="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.772 [INFO][4679] ipam_plugin.go 268: Auto assigning IP ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" HandleID="k8s-pod-network.49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Workload="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000291790), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5bb6fbd664-chjdq", "timestamp":"2024-04-12 18:55:42.744306941 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.772 [INFO][4679] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.772 [INFO][4679] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.772 [INFO][4679] ipam.go 107: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.779 [INFO][4679] ipam.go 660: Looking up existing affinities for host handle="k8s-pod-network.49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" host="localhost" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.796 [INFO][4679] ipam.go 372: Looking up existing affinities for host host="localhost" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.814 [INFO][4679] ipam.go 489: Trying affinity for 192.168.88.128/26 host="localhost" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.821 [INFO][4679] ipam.go 155: Attempting to load block cidr=192.168.88.128/26 host="localhost" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.826 [INFO][4679] ipam.go 232: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.826 [INFO][4679] ipam.go 1180: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" host="localhost" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.833 [INFO][4679] ipam.go 1682: Creating new handle: k8s-pod-network.49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927 Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.841 [INFO][4679] ipam.go 1203: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" host="localhost" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.865 [INFO][4679] ipam.go 1216: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" host="localhost" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.868 [INFO][4679] ipam.go 847: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" host="localhost" Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.869 [INFO][4679] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:55:43.002826 env[1186]: 2024-04-12 18:55:42.869 [INFO][4679] ipam_plugin.go 286: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" HandleID="k8s-pod-network.49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Workload="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" Apr 12 18:55:43.003854 env[1186]: 2024-04-12 18:55:42.874 [INFO][4670] k8s.go 385: Populated endpoint ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Namespace="calico-apiserver" Pod="calico-apiserver-5bb6fbd664-chjdq" WorkloadEndpoint="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0", GenerateName:"calico-apiserver-5bb6fbd664-", Namespace:"calico-apiserver", SelfLink:"", UID:"9e4c55cc-e518-40e8-8cff-e13858c026e3", ResourceVersion:"1219", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 55, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5bb6fbd664", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5bb6fbd664-chjdq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliab249b1d88a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:55:43.003854 env[1186]: 2024-04-12 18:55:42.874 [INFO][4670] k8s.go 386: Calico CNI using IPs: [192.168.88.133/32] ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Namespace="calico-apiserver" Pod="calico-apiserver-5bb6fbd664-chjdq" WorkloadEndpoint="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" Apr 12 18:55:43.003854 env[1186]: 2024-04-12 18:55:42.874 [INFO][4670] dataplane_linux.go 68: Setting the host side veth name to caliab249b1d88a ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Namespace="calico-apiserver" Pod="calico-apiserver-5bb6fbd664-chjdq" WorkloadEndpoint="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" Apr 12 18:55:43.003854 env[1186]: 2024-04-12 18:55:42.897 [INFO][4670] dataplane_linux.go 479: Disabling IPv4 forwarding ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Namespace="calico-apiserver" Pod="calico-apiserver-5bb6fbd664-chjdq" WorkloadEndpoint="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" Apr 12 18:55:43.003854 env[1186]: 2024-04-12 18:55:42.898 [INFO][4670] k8s.go 413: Added Mac, interface name, and active container ID to endpoint ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Namespace="calico-apiserver" Pod="calico-apiserver-5bb6fbd664-chjdq" WorkloadEndpoint="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0", GenerateName:"calico-apiserver-5bb6fbd664-", Namespace:"calico-apiserver", SelfLink:"", UID:"9e4c55cc-e518-40e8-8cff-e13858c026e3", ResourceVersion:"1219", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 55, 41, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5bb6fbd664", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927", Pod:"calico-apiserver-5bb6fbd664-chjdq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliab249b1d88a", MAC:"6a:8c:b1:85:97:1c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:55:43.003854 env[1186]: 2024-04-12 18:55:42.995 [INFO][4670] k8s.go 498: Wrote updated endpoint to datastore ContainerID="49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927" Namespace="calico-apiserver" Pod="calico-apiserver-5bb6fbd664-chjdq" WorkloadEndpoint="localhost-k8s-calico--apiserver--5bb6fbd664--chjdq-eth0" Apr 12 18:55:43.036000 audit[4705]: NETFILTER_CFG table=filter:117 family=2 entries=55 op=nft_register_chain pid=4705 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Apr 12 18:55:43.036000 audit[4705]: SYSCALL arch=c000003e syscall=46 success=yes exit=28936 a0=3 a1=7ffeaf27cc40 a2=0 a3=7ffeaf27cc2c items=0 ppid=3187 pid=4705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:43.036000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Apr 12 18:55:43.062437 env[1186]: time="2024-04-12T18:55:43.059816485Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Apr 12 18:55:43.062437 env[1186]: time="2024-04-12T18:55:43.059928115Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Apr 12 18:55:43.062437 env[1186]: time="2024-04-12T18:55:43.059967369Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Apr 12 18:55:43.062437 env[1186]: time="2024-04-12T18:55:43.060185759Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927 pid=4712 runtime=io.containerd.runc.v2 Apr 12 18:55:43.103004 systemd[1]: run-containerd-runc-k8s.io-49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927-runc.vpEl16.mount: Deactivated successfully. Apr 12 18:55:43.124575 systemd[1]: Started cri-containerd-49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927.scope. Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.148000 audit: BPF prog-id=180 op=LOAD Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4712 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:43.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333237656133383962313938333864653536666366326631366639 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4712 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:43.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333237656133383962313938333864653536666366326631366639 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.149000 audit: BPF prog-id=181 op=LOAD Apr 12 18:55:43.149000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003046d0 items=0 ppid=4712 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:43.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333237656133383962313938333864653536666366326631366639 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit: BPF prog-id=182 op=LOAD Apr 12 18:55:43.150000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000304718 items=0 ppid=4712 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:43.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333237656133383962313938333864653536666366326631366639 Apr 12 18:55:43.150000 audit: BPF prog-id=182 op=UNLOAD Apr 12 18:55:43.150000 audit: BPF prog-id=181 op=UNLOAD Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:43.150000 audit: BPF prog-id=183 op=LOAD Apr 12 18:55:43.150000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000304b28 items=0 ppid=4712 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:43.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439333237656133383962313938333864653536666366326631366639 Apr 12 18:55:43.152274 systemd-resolved[1134]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Apr 12 18:55:43.213305 env[1186]: time="2024-04-12T18:55:43.213201894Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5bb6fbd664-chjdq,Uid:9e4c55cc-e518-40e8-8cff-e13858c026e3,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927\"" Apr 12 18:55:43.215638 env[1186]: time="2024-04-12T18:55:43.215591253Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.3\"" Apr 12 18:55:44.145515 env[1186]: time="2024-04-12T18:55:44.145061626Z" level=info msg="StopPodSandbox for \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\"" Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.266 [WARNING][4759] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0", GenerateName:"calico-kube-controllers-6c5d75f8dc-", Namespace:"calico-system", SelfLink:"", UID:"54d0b786-ab92-49a5-9480-ceea1bb2f91f", ResourceVersion:"934", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 54, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c5d75f8dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766", Pod:"calico-kube-controllers-6c5d75f8dc-vqn77", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5b3fef866bb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.266 [INFO][4759] k8s.go 585: Cleaning up netns ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.266 [INFO][4759] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" iface="eth0" netns="" Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.266 [INFO][4759] k8s.go 592: Releasing IP address(es) ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.266 [INFO][4759] utils.go 188: Calico CNI releasing IP address ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.300 [INFO][4766] ipam_plugin.go 415: Releasing address using handleID ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" HandleID="k8s-pod-network.ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.301 [INFO][4766] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.301 [INFO][4766] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.312 [WARNING][4766] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" HandleID="k8s-pod-network.ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.312 [INFO][4766] ipam_plugin.go 443: Releasing address using workloadID ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" HandleID="k8s-pod-network.ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.319 [INFO][4766] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:55:44.326199 env[1186]: 2024-04-12 18:55:44.323 [INFO][4759] k8s.go 598: Teardown processing complete. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:55:44.326199 env[1186]: time="2024-04-12T18:55:44.326134479Z" level=info msg="TearDown network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\" successfully" Apr 12 18:55:44.326199 env[1186]: time="2024-04-12T18:55:44.326182118Z" level=info msg="StopPodSandbox for \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\" returns successfully" Apr 12 18:55:44.327001 env[1186]: time="2024-04-12T18:55:44.326963807Z" level=info msg="RemovePodSandbox for \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\"" Apr 12 18:55:44.327078 env[1186]: time="2024-04-12T18:55:44.327018039Z" level=info msg="Forcibly stopping sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\"" Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.410 [WARNING][4788] k8s.go 549: CNI_CONTAINERID does not match WorkloadEndpoint ConainerID, don't delete WEP. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0", GenerateName:"calico-kube-controllers-6c5d75f8dc-", Namespace:"calico-system", SelfLink:"", UID:"54d0b786-ab92-49a5-9480-ceea1bb2f91f", ResourceVersion:"934", Generation:0, CreationTimestamp:time.Date(2024, time.April, 12, 18, 54, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6c5d75f8dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"dce23b402a5a3526c3c3c47f9e844482eef32adb403d2f982e4f1c0ce2279766", Pod:"calico-kube-controllers-6c5d75f8dc-vqn77", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali5b3fef866bb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil)}} Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.412 [INFO][4788] k8s.go 585: Cleaning up netns ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.413 [INFO][4788] dataplane_linux.go 526: CleanUpNamespace called with no netns name, ignoring. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" iface="eth0" netns="" Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.413 [INFO][4788] k8s.go 592: Releasing IP address(es) ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.413 [INFO][4788] utils.go 188: Calico CNI releasing IP address ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.461 [INFO][4795] ipam_plugin.go 415: Releasing address using handleID ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" HandleID="k8s-pod-network.ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.462 [INFO][4795] ipam_plugin.go 356: About to acquire host-wide IPAM lock. Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.462 [INFO][4795] ipam_plugin.go 371: Acquired host-wide IPAM lock. Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.472 [WARNING][4795] ipam_plugin.go 432: Asked to release address but it doesn't exist. Ignoring ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" HandleID="k8s-pod-network.ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.472 [INFO][4795] ipam_plugin.go 443: Releasing address using workloadID ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" HandleID="k8s-pod-network.ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Workload="localhost-k8s-calico--kube--controllers--6c5d75f8dc--vqn77-eth0" Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.482 [INFO][4795] ipam_plugin.go 377: Released host-wide IPAM lock. Apr 12 18:55:44.496687 env[1186]: 2024-04-12 18:55:44.489 [INFO][4788] k8s.go 598: Teardown processing complete. ContainerID="ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d" Apr 12 18:55:44.496687 env[1186]: time="2024-04-12T18:55:44.495958592Z" level=info msg="TearDown network for sandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\" successfully" Apr 12 18:55:44.534449 env[1186]: time="2024-04-12T18:55:44.534134786Z" level=info msg="RemovePodSandbox \"ed1fb672da9c71d2eb046a78b88c254c78edf71c51cd06ffc262de272bd8810d\" returns successfully" Apr 12 18:55:44.644813 systemd-networkd[1082]: caliab249b1d88a: Gained IPv6LL Apr 12 18:55:44.894787 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3044231590.mount: Deactivated successfully. Apr 12 18:55:45.500000 audit[4805]: NETFILTER_CFG table=filter:118 family=2 entries=22 op=nft_register_rule pid=4805 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:45.500000 audit[4805]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffe4d93e860 a2=0 a3=7ffe4d93e84c items=0 ppid=2248 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:45.500000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:45.503000 audit[4805]: NETFILTER_CFG table=nat:119 family=2 entries=104 op=nft_register_chain pid=4805 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:45.503000 audit[4805]: SYSCALL arch=c000003e syscall=46 success=yes exit=48684 a0=3 a1=7ffe4d93e860 a2=0 a3=7ffe4d93e84c items=0 ppid=2248 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:45.503000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:46.792546 env[1186]: time="2024-04-12T18:55:46.792396155Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:55:46.797479 env[1186]: time="2024-04-12T18:55:46.797316508Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b1053ac6a81e8635acaa253516add87a758796b61fa4e29b767a8bd31e4b3eb2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:55:46.812109 env[1186]: time="2024-04-12T18:55:46.812043671Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.27.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:55:46.819917 env[1186]: time="2024-04-12T18:55:46.819839776Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:62b75df90aa008b11fee8f555f22bfc00d3dc6af5053185c293ee3467342f32a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Apr 12 18:55:46.820345 env[1186]: time="2024-04-12T18:55:46.820282097Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.27.3\" returns image reference \"sha256:b1053ac6a81e8635acaa253516add87a758796b61fa4e29b767a8bd31e4b3eb2\"" Apr 12 18:55:46.822896 env[1186]: time="2024-04-12T18:55:46.822842717Z" level=info msg="CreateContainer within sandbox \"49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Apr 12 18:55:46.870780 env[1186]: time="2024-04-12T18:55:46.870665989Z" level=info msg="CreateContainer within sandbox \"49327ea389b19838de56fcf2f16f933fccc52cc54262ef633d1044d2565d5927\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"af7ce0c006f5dba03ba492573ca2c415711f6dbdda11c33411f0e05066744a31\"" Apr 12 18:55:46.871895 env[1186]: time="2024-04-12T18:55:46.871858519Z" level=info msg="StartContainer for \"af7ce0c006f5dba03ba492573ca2c415711f6dbdda11c33411f0e05066744a31\"" Apr 12 18:55:46.935490 systemd[1]: Started cri-containerd-af7ce0c006f5dba03ba492573ca2c415711f6dbdda11c33411f0e05066744a31.scope. Apr 12 18:55:46.966121 kernel: kauditd_printk_skb: 79 callbacks suppressed Apr 12 18:55:46.966502 kernel: audit: type=1400 audit(1712948146.959:1518): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.966554 kernel: audit: type=1400 audit(1712948146.959:1519): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.971462 kernel: audit: type=1400 audit(1712948146.959:1520): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985825 kernel: audit: type=1400 audit(1712948146.959:1521): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.995887 kernel: audit: type=1400 audit(1712948146.959:1522): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.996069 kernel: audit: type=1400 audit(1712948146.959:1523): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:47.008157 kernel: audit: type=1400 audit(1712948146.959:1524): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.959000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:47.018978 kernel: audit: type=1400 audit(1712948146.959:1525): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:47.019098 kernel: audit: type=1400 audit(1712948146.959:1526): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.959000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:47.019224 systemd[1]: Started sshd@26-10.0.0.120:22-10.0.0.1:54106.service. Apr 12 18:55:46.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.970000 audit: BPF prog-id=184 op=LOAD Apr 12 18:55:47.027479 kernel: audit: type=1400 audit(1712948146.970:1527): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4712 pid=4813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:46.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166376365306330303666356462613033626134393235373363613263 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4712 pid=4813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:46.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166376365306330303666356462613033626134393235373363613263 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.972000 audit: BPF prog-id=185 op=LOAD Apr 12 18:55:46.972000 audit[4813]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031dc50 items=0 ppid=4712 pid=4813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:46.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166376365306330303666356462613033626134393235373363613263 Apr 12 18:55:46.978000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.978000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.978000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.978000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.978000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.978000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.978000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.978000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.978000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.978000 audit: BPF prog-id=186 op=LOAD Apr 12 18:55:46.978000 audit[4813]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031dc98 items=0 ppid=4712 pid=4813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:46.978000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166376365306330303666356462613033626134393235373363613263 Apr 12 18:55:46.985000 audit: BPF prog-id=186 op=UNLOAD Apr 12 18:55:46.985000 audit: BPF prog-id=185 op=UNLOAD Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { perfmon } for pid=4813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit[4813]: AVC avc: denied { bpf } for pid=4813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Apr 12 18:55:46.985000 audit: BPF prog-id=187 op=LOAD Apr 12 18:55:46.985000 audit[4813]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003680a8 items=0 ppid=4712 pid=4813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:46.985000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166376365306330303666356462613033626134393235373363613263 Apr 12 18:55:47.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.120:22-10.0.0.1:54106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:47.285194 env[1186]: time="2024-04-12T18:55:47.285135015Z" level=info msg="StartContainer for \"af7ce0c006f5dba03ba492573ca2c415711f6dbdda11c33411f0e05066744a31\" returns successfully" Apr 12 18:55:47.357000 audit[4829]: USER_ACCT pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:47.361036 sshd[4829]: Accepted publickey for core from 10.0.0.1 port 54106 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:47.366000 audit[4829]: CRED_ACQ pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:47.366000 audit[4829]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcab541980 a2=3 a3=0 items=0 ppid=1 pid=4829 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:47.366000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:47.368372 sshd[4829]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:47.381443 systemd-logind[1168]: New session 27 of user core. Apr 12 18:55:47.382225 systemd[1]: Started session-27.scope. Apr 12 18:55:47.406000 audit[4829]: USER_START pid=4829 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:47.412000 audit[4846]: CRED_ACQ pid=4846 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:47.599000 audit[4829]: USER_END pid=4829 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:47.599000 audit[4829]: CRED_DISP pid=4829 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:47.598735 sshd[4829]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:47.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-10.0.0.120:22-10.0.0.1:54106 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:47.604425 systemd[1]: sshd@26-10.0.0.120:22-10.0.0.1:54106.service: Deactivated successfully. Apr 12 18:55:47.605341 systemd[1]: session-27.scope: Deactivated successfully. Apr 12 18:55:47.607302 systemd-logind[1168]: Session 27 logged out. Waiting for processes to exit. Apr 12 18:55:47.613856 systemd-logind[1168]: Removed session 27. Apr 12 18:55:47.896000 audit[4822]: AVC avc: denied { watch } for pid=4822 comm="apiserver" path="/calico-apiserver-certs/..2024_04_12_18_55_42.729088506/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c305,c807 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c305,c807 tclass=file permissive=0 Apr 12 18:55:47.896000 audit[4822]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000692f00 a2=fc6 a3=0 items=0 ppid=4712 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c305,c807 key=(null) Apr 12 18:55:47.896000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Apr 12 18:55:48.025000 audit[4858]: NETFILTER_CFG table=filter:120 family=2 entries=10 op=nft_register_rule pid=4858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:48.025000 audit[4858]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffca82b7040 a2=0 a3=7ffca82b702c items=0 ppid=2248 pid=4858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:48.025000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:48.028000 audit[4858]: NETFILTER_CFG table=nat:121 family=2 entries=44 op=nft_register_rule pid=4858 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:48.028000 audit[4858]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffca82b7040 a2=0 a3=7ffca82b702c items=0 ppid=2248 pid=4858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:48.028000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:48.566000 audit[4862]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=4862 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:48.566000 audit[4862]: SYSCALL arch=c000003e syscall=46 success=yes exit=3676 a0=3 a1=7ffc43ba5dc0 a2=0 a3=7ffc43ba5dac items=0 ppid=2248 pid=4862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:48.566000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:48.568000 audit[4862]: NETFILTER_CFG table=nat:123 family=2 entries=44 op=nft_register_rule pid=4862 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Apr 12 18:55:48.568000 audit[4862]: SYSCALL arch=c000003e syscall=46 success=yes exit=14988 a0=3 a1=7ffc43ba5dc0 a2=0 a3=7ffc43ba5dac items=0 ppid=2248 pid=4862 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:48.568000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Apr 12 18:55:52.607812 systemd[1]: Started sshd@27-10.0.0.120:22-10.0.0.1:54110.service. Apr 12 18:55:52.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.120:22-10.0.0.1:54110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:52.622388 kernel: kauditd_printk_skb: 73 callbacks suppressed Apr 12 18:55:52.622613 kernel: audit: type=1130 audit(1712948152.607:1550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.120:22-10.0.0.1:54110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:52.720000 audit[4869]: USER_ACCT pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.720979 sshd[4869]: Accepted publickey for core from 10.0.0.1 port 54110 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:52.725000 audit[4869]: CRED_ACQ pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.726582 sshd[4869]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:52.730525 kernel: audit: type=1101 audit(1712948152.720:1551): pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.730627 kernel: audit: type=1103 audit(1712948152.725:1552): pid=4869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.730666 kernel: audit: type=1006 audit(1712948152.725:1553): pid=4869 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Apr 12 18:55:52.725000 audit[4869]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdda52d00 a2=3 a3=0 items=0 ppid=1 pid=4869 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:52.743025 kernel: audit: type=1300 audit(1712948152.725:1553): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdda52d00 a2=3 a3=0 items=0 ppid=1 pid=4869 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:52.745012 kernel: audit: type=1327 audit(1712948152.725:1553): proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:52.725000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:52.752483 systemd-logind[1168]: New session 28 of user core. Apr 12 18:55:52.757716 systemd[1]: Started session-28.scope. Apr 12 18:55:52.783000 audit[4869]: USER_START pid=4869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.788000 audit[4871]: CRED_ACQ pid=4871 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.800488 kernel: audit: type=1105 audit(1712948152.783:1554): pid=4869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.800694 kernel: audit: type=1103 audit(1712948152.788:1555): pid=4871 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.956513 sshd[4869]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:52.957000 audit[4869]: USER_END pid=4869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.965451 kernel: audit: type=1106 audit(1712948152.957:1556): pid=4869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.957000 audit[4869]: CRED_DISP pid=4869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.969323 systemd[1]: sshd@27-10.0.0.120:22-10.0.0.1:54110.service: Deactivated successfully. Apr 12 18:55:52.971476 kernel: audit: type=1104 audit(1712948152.957:1557): pid=4869 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:52.970415 systemd[1]: session-28.scope: Deactivated successfully. Apr 12 18:55:52.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-10.0.0.120:22-10.0.0.1:54110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:52.978664 systemd-logind[1168]: Session 28 logged out. Waiting for processes to exit. Apr 12 18:55:52.979000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:52.979000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002620a20 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:55:52.979000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:55:52.981000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:52.981000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0023acc80 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:55:52.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:55:52.982864 systemd-logind[1168]: Removed session 28. Apr 12 18:55:52.984000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:52.984000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00254a180 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:55:52.984000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:55:52.984000 audit[1962]: AVC avc: denied { watch } for pid=1962 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=521026 scontext=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Apr 12 18:55:52.984000 audit[1962]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002718ae0 a2=fc6 a3=0 items=0 ppid=1815 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c200,c212 key=(null) Apr 12 18:55:52.984000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Apr 12 18:55:54.661925 systemd[1]: run-containerd-runc-k8s.io-c0a60064587c8fdb5c29d2bf00fdefbd06ce705bc9fd277daf06336307ee9cc9-runc.GucpB0.mount: Deactivated successfully. Apr 12 18:55:57.979277 kernel: kauditd_printk_skb: 13 callbacks suppressed Apr 12 18:55:57.979535 kernel: audit: type=1130 audit(1712948157.975:1563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.120:22-10.0.0.1:33798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:57.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.120:22-10.0.0.1:33798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Apr 12 18:55:57.975439 systemd[1]: Started sshd@28-10.0.0.120:22-10.0.0.1:33798.service. Apr 12 18:55:58.066000 audit[4907]: USER_ACCT pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.067567 sshd[4907]: Accepted publickey for core from 10.0.0.1 port 33798 ssh2: RSA SHA256:oFTmhZVjs8bjXH/lYpDQZ+WL9oh5tEY90V+L3H6oLsU Apr 12 18:55:58.073894 kernel: audit: type=1101 audit(1712948158.066:1564): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.074609 kernel: audit: type=1103 audit(1712948158.073:1565): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.073000 audit[4907]: CRED_ACQ pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.074103 sshd[4907]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Apr 12 18:55:58.083445 kernel: audit: type=1006 audit(1712948158.073:1566): pid=4907 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Apr 12 18:55:58.083635 kernel: audit: type=1300 audit(1712948158.073:1566): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda45d30f0 a2=3 a3=0 items=0 ppid=1 pid=4907 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:58.073000 audit[4907]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda45d30f0 a2=3 a3=0 items=0 ppid=1 pid=4907 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Apr 12 18:55:58.073000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:58.096481 kernel: audit: type=1327 audit(1712948158.073:1566): proctitle=737368643A20636F7265205B707269765D Apr 12 18:55:58.101510 systemd-logind[1168]: New session 29 of user core. Apr 12 18:55:58.101787 systemd[1]: Started session-29.scope. Apr 12 18:55:58.124000 audit[4907]: USER_START pid=4907 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.124000 audit[4917]: CRED_ACQ pid=4917 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.135080 kernel: audit: type=1105 audit(1712948158.124:1567): pid=4907 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.135303 kernel: audit: type=1103 audit(1712948158.124:1568): pid=4917 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.299673 sshd[4907]: pam_unix(sshd:session): session closed for user core Apr 12 18:55:58.305000 audit[4907]: USER_END pid=4907 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.308240 systemd[1]: sshd@28-10.0.0.120:22-10.0.0.1:33798.service: Deactivated successfully. Apr 12 18:55:58.310228 systemd[1]: session-29.scope: Deactivated successfully. Apr 12 18:55:58.311897 systemd-logind[1168]: Session 29 logged out. Waiting for processes to exit. Apr 12 18:55:58.313339 systemd-logind[1168]: Removed session 29. Apr 12 18:55:58.305000 audit[4907]: CRED_DISP pid=4907 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.318966 kernel: audit: type=1106 audit(1712948158.305:1569): pid=4907 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.319135 kernel: audit: type=1104 audit(1712948158.305:1570): pid=4907 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Apr 12 18:55:58.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-10.0.0.120:22-10.0.0.1:33798 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'